Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFEB554ACD5111EF8F5508AA762E951A.roa
File: AFEB554ACD5111EF8F5508AA762E951A.roa (raw, json)
Hash identifier: TJNB3tLlOqx1kLSYCCk9PWx4qlhnYDtoiWnGaH8//LU=
Subject key identifier: A5:F1:DB:5D:4C:72:F0:98:56:3B:09:DA:B4:3F:D6:C4:42:3E:9A:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFEB554ACD5111EF8F5508AA762E951A.roa
Signing time: Tue 07 Jan 2025 23:47:00 +0000
ROA not before: Tue 07 Jan 2025 23:46:56 +0000
ROA not after: Sat 13 Dec 2025 23:46:56 +0000
asID: 984
IP address blocks: 156.247.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65265 (0xfef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 23:46:56 2025 GMT
Not After : Dec 13 23:46:56 2025 GMT
Subject: CN=677dbcf4-c799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:2b:cc:5e:b8:67:3b:f9:ae:5b:9e:22:6d:
8b:6a:89:cc:2a:5a:e4:06:10:ed:25:4e:c4:13:1b:
3f:0d:c4:9d:2d:47:6e:96:6c:a0:99:d8:9f:6b:c4:
1d:69:10:4f:81:87:d5:3e:47:8d:ca:01:d6:5a:1c:
7a:4c:e2:af:8b:0f:d9:b6:17:2d:e9:5d:ec:22:73:
42:f4:79:76:d7:d3:98:dc:32:36:01:a1:30:8c:77:
29:c1:32:eb:ba:87:7b:0a:12:01:04:13:8b:c3:dd:
f1:ea:a2:6a:8d:3a:5d:47:26:21:12:f9:43:48:3d:
a2:94:f1:1f:9b:87:91:66:22:ad:2d:32:29:2b:10:
7b:e5:94:c7:e9:42:ab:09:14:73:55:b0:35:ae:c1:
b4:4f:b4:46:69:ee:7c:c2:50:2b:7e:3f:ba:ed:51:
2a:55:fd:a6:cd:70:af:75:30:c4:df:50:28:df:b3:
e2:1b:6c:65:c6:db:f5:c1:1b:48:89:ef:3e:cf:99:
ab:2b:ab:e6:bb:b5:a7:12:53:eb:ff:d2:47:ed:c5:
5d:5a:dc:45:d4:08:ba:fc:45:39:4b:89:52:0f:a9:
c7:19:ec:1d:9b:c9:6d:f2:1b:34:27:53:c9:53:45:
52:79:63:5c:61:5c:70:53:1a:a8:32:c1:1f:d1:90:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F1:DB:5D:4C:72:F0:98:56:3B:09:DA:B4:3F:D6:C4:42:3E:9A:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFEB554ACD5111EF8F5508AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.65.0/24
Signature Algorithm: sha256WithRSAEncryption
36:22:cc:24:82:f7:8b:22:cf:2a:a9:8c:2a:ca:b3:84:24:fd:
de:53:63:74:a9:a1:8a:63:38:f8:45:3b:c7:19:03:da:12:a3:
9c:41:c3:72:47:08:3a:b2:32:e4:2a:fa:91:81:eb:c8:c5:e0:
72:4d:a8:b8:bf:f6:be:04:19:b7:3a:cf:fd:72:9c:87:3e:f5:
a4:ca:c7:79:2d:36:cf:a9:4c:72:1b:d0:31:2f:eb:47:55:0f:
b8:2e:fa:14:df:0e:fa:af:08:1a:92:ac:33:d2:c8:e3:e4:d7:
80:bb:ef:85:4e:d2:ef:7a:20:c3:a1:6d:56:1c:d4:58:6d:77:
84:c2:51:df:11:de:e4:bb:5e:16:84:59:da:20:f2:ff:a1:60:
0c:41:59:c3:46:52:15:16:8b:0a:ee:86:a6:12:eb:6b:be:a9:
ae:b1:1e:f1:34:68:df:3e:58:a4:5f:f1:c8:4a:ca:c5:30:b5:
b9:2d:8e:f4:9a:b4:2c:3f:0d:51:06:97:87:05:3c:5a:61:08:
c4:81:86:97:14:a9:8f:0b:b9:01:d5:95:39:6c:4f:af:fc:5b:
dc:8e:2f:14:a7:c0:23:9c:3b:6a:7c:10:33:3d:e6:02:52:c6:
3f:2b:9a:12:20:c8:47:56:a8:8c:5d:16:69:47:49:f7:23:42:
ca:af:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:04 2025 by rpki-client