Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEABE4E4CC9111EF99DCA95B762E951A.roa
File: AEABE4E4CC9111EF99DCA95B762E951A.roa (raw, json)
Hash identifier: N9MvFs3Tx+Ghfxh+tXq3oI8u1znevPaJ/VJPJnsAI7A=
Subject key identifier: 7C:FD:1E:43:BB:B2:56:2E:3B:AD:D6:F3:B8:51:8A:B9:D1:33:83:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F90F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEABE4E4CC9111EF99DCA95B762E951A.roa
Signing time: Tue 07 Jan 2025 00:52:34 +0000
ROA not before: Tue 07 Jan 2025 00:00:31 +0000
ROA not after: Sat 13 Dec 2025 00:00:31 +0000
asID: 984
IP address blocks: 156.226.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63759 (0xf90f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 00:00:31 2025 GMT
Not After : Dec 13 00:00:31 2025 GMT
Subject: CN=677c7ad2-dd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e4:40:01:dd:46:a0:34:d4:a0:11:9f:9c:ad:
ab:95:85:bd:34:3b:0c:4b:50:ef:eb:ad:d3:13:e3:
85:2d:9a:47:b9:a2:4d:94:ed:57:3f:88:13:e7:59:
59:a4:d0:0d:48:50:a0:5d:09:6c:46:14:3c:40:76:
0b:94:a1:c9:e2:2a:82:f9:cf:92:53:6f:b3:1c:0c:
62:35:ef:40:cd:b0:de:4d:c6:d5:af:d9:50:db:b2:
7d:e0:b8:23:a3:09:1d:83:0e:09:06:6b:ff:87:a8:
f4:5c:0c:7b:fa:08:43:0b:82:d3:17:cc:2d:00:7b:
2f:fe:93:85:38:65:e7:04:62:43:41:5f:0d:f9:5f:
81:64:61:4a:c4:94:e2:73:70:89:1c:c2:cb:d3:9e:
08:ea:fa:de:c0:28:04:06:b6:11:69:e2:8f:e2:74:
82:28:2c:e5:78:f1:11:6b:77:4c:03:5f:da:f2:20:
0d:ac:45:06:4b:89:c5:0b:57:59:b8:f8:da:c1:5e:
71:7e:08:dd:26:4d:1d:e3:bb:c9:22:16:14:85:92:
03:ba:df:ca:1e:d4:4b:d7:0c:6a:7b:d5:f6:b8:61:
16:3b:02:4c:99:25:94:dd:fe:1e:08:c2:a0:34:21:
9a:24:bc:4c:b6:0a:22:83:3c:ae:4b:bf:1b:58:75:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FD:1E:43:BB:B2:56:2E:3B:AD:D6:F3:B8:51:8A:B9:D1:33:83:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEABE4E4CC9111EF99DCA95B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.254.0/24
Signature Algorithm: sha256WithRSAEncryption
20:20:d1:e9:59:1c:02:f5:09:2c:94:3e:40:94:8d:6d:b8:b1:
6b:75:69:c1:cb:2a:e7:32:a7:fa:bb:89:7d:f7:c4:d2:50:b3:
3f:ba:4a:98:16:63:fc:18:e8:72:67:9d:5e:1a:44:eb:3d:01:
d1:a8:27:65:3e:6e:61:fa:71:8b:e8:b7:56:51:66:a7:7f:5b:
88:37:25:a0:4e:46:1b:5d:ee:c7:77:d8:0a:87:8e:6a:f1:cb:
95:5f:c7:2b:27:07:d1:e4:70:35:43:c3:3c:9a:a0:9f:60:1d:
a3:45:a1:af:6d:54:8f:d4:42:c8:8d:ad:72:2b:4b:5b:95:ba:
42:a2:22:80:b4:83:f0:35:20:c6:d7:b2:21:f6:32:c1:ce:94:
5e:c2:c1:a3:23:c2:5c:72:44:0b:cf:e6:8f:96:75:cd:3d:af:
7f:d0:6b:df:4e:23:e1:bb:b3:aa:79:46:8f:ab:44:4f:3d:0b:
5c:b5:7a:bf:d0:02:95:b2:b2:81:df:94:40:46:60:47:0a:05:
2a:6f:b5:32:31:b6:5b:f4:4b:a9:03:fb:9c:40:71:73:c3:40:
3a:6b:a7:8a:40:25:64:ac:52:bd:cd:62:39:f5:71:be:dc:9e:
6e:84:c0:e8:21:e4:d4:e0:a8:ca:f2:c2:7a:cc:d0:06:19:2d:
54:a9:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:49 2025 by rpki-client