Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE51A1D0CEF511EF8AA34DAA762E951A.roa
File: AE51A1D0CEF511EF8AA34DAA762E951A.roa (raw, json)
Hash identifier: 0FOoJT1FDrln8HhC/+3TCDJv6uFfI5qzexBBjQkVGqM=
Subject key identifier: 5C:60:79:74:EA:2D:6B:97:CC:D4:2A:C8:A1:66:10:93:C0:CC:59:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01048D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE51A1D0CEF511EF8AA34DAA762E951A.roa
Signing time: Fri 10 Jan 2025 01:53:26 +0000
ROA not before: Fri 10 Jan 2025 01:53:22 +0000
ROA not after: Mon 14 Jul 2025 01:53:22 +0000
asID: 135419
IP address blocks: 156.232.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66701 (0x1048d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 01:53:22 2025 GMT
Not After : Jul 14 01:53:22 2025 GMT
Subject: CN=67807d96-fe5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:60:8c:1c:ee:2f:e3:c7:89:1b:62:fc:e4:
d9:6f:ef:7a:d8:33:b6:c7:63:9e:32:22:04:03:d3:
cd:95:6b:ef:77:d9:9d:01:67:bd:e0:9e:ac:74:c8:
66:4b:c4:43:e2:2c:7a:b9:29:a6:f4:80:00:8f:35:
f2:89:cb:c5:72:ee:87:fa:62:ae:1b:9f:31:83:0b:
44:6e:e5:97:c1:e9:78:00:e4:57:24:c5:ea:2f:de:
65:28:1a:dd:e7:b5:03:55:eb:67:4b:48:44:67:7d:
ab:2a:08:95:03:86:9b:85:fd:f7:3c:ad:c0:30:9d:
69:8b:d5:45:6b:62:b6:e3:2e:57:86:42:7b:65:ba:
2e:c3:d7:32:82:3f:87:44:bf:e0:8b:46:89:b2:65:
49:d6:f2:bb:e6:a1:73:d5:77:bf:1f:a7:de:cc:a0:
78:ca:69:2b:13:ad:b4:5e:34:4c:44:c3:2e:93:e9:
15:48:34:d6:8d:94:cc:6d:ae:25:a7:39:fa:df:87:
3f:0a:0a:cd:6e:62:83:cf:62:60:df:83:60:df:8d:
1b:de:d4:c6:5f:fd:86:73:e6:64:b9:1b:34:70:b3:
67:36:8a:31:3b:e6:31:fa:4d:aa:66:b6:18:55:23:
a3:a7:51:7a:2e:81:0d:f7:72:bd:f2:95:ea:6b:8a:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:60:79:74:EA:2D:6B:97:CC:D4:2A:C8:A1:66:10:93:C0:CC:59:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE51A1D0CEF511EF8AA34DAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.105.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:28:cc:f4:6f:5a:f5:a0:57:92:92:b3:bf:d5:fa:2e:fb:ae:
80:2b:28:1e:44:a8:e9:26:c5:df:87:51:4f:3d:16:d8:e4:d7:
26:c6:10:03:b1:ea:8a:ad:83:44:c8:c9:8f:5b:33:6f:a0:5b:
5d:c5:aa:a2:71:c7:ce:27:93:0e:d2:19:35:07:eb:be:1b:6b:
a5:8d:39:a1:db:5c:cb:6e:fe:cb:a9:d6:da:69:2b:d7:0b:c8:
37:6a:68:f0:3d:5d:44:f1:93:4c:5d:13:ae:09:1c:4e:10:c8:
35:f0:90:9b:63:63:ba:5a:b3:89:67:44:16:76:79:16:94:10:
44:8b:e2:ab:f8:61:73:41:6b:37:08:f3:2a:06:16:e8:5b:c5:
f2:46:51:39:ed:1a:6e:7e:24:dc:b9:7f:f8:96:82:07:a0:0b:
b4:0f:1d:f8:a4:e8:e4:3a:c4:6e:0e:d9:83:b0:7c:13:4d:cc:
d0:e2:a3:0c:40:e6:96:1f:11:9e:f6:d3:25:12:a4:af:1f:0f:
ab:b4:90:d2:9c:8b:02:02:e4:79:8f:c3:8f:22:87:84:7b:a5:
ed:52:bc:39:aa:1e:3d:17:a5:97:b8:7e:6d:32:55:8f:33:9e:
90:d4:a2:6a:b9:c0:bc:a6:63:44:08:cf:b9:6e:83:02:d0:d8:
7a:8a:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:29 2025 by rpki-client