Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B53896E2CD2F11EF8ABAAA55762E951A.roa
File: B53896E2CD2F11EF8ABAAA55762E951A.roa (raw, json)
Hash identifier: rgMPQ2H0vfZDXptZRHA3X7GGjK5ck/xvkdkkMk9ab70=
Subject key identifier: 91:33:BF:67:EC:04:A2:CF:BE:FC:4E:09:98:EC:64:E1:FD:C1:C0:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B53896E2CD2F11EF8ABAAA55762E951A.roa
Signing time: Tue 07 Jan 2025 19:43:46 +0000
ROA not before: Tue 07 Jan 2025 19:43:42 +0000
ROA not after: Mon 13 Dec 2027 19:43:42 +0000
asID: 17561
IP address blocks: 156.242.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64999 (0xfde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 19:43:42 2025 GMT
Not After : Dec 13 19:43:42 2027 GMT
Subject: CN=677d83f2-5d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:57:c6:08:40:fc:ab:e4:34:81:03:49:09:13:
ce:20:63:63:d3:19:68:4f:27:ec:75:de:c7:40:3e:
03:66:a5:3e:ef:74:69:18:b2:a2:78:0e:0b:15:95:
d3:a6:6f:27:49:8e:43:c8:5d:88:1a:4d:f6:2a:6b:
c8:7b:8d:cc:d7:e3:dc:0a:84:69:af:6b:e1:39:97:
0e:50:6d:00:cc:6a:b0:1c:dc:5b:ab:a0:70:90:80:
cc:75:ed:18:b2:a0:25:ee:07:3d:37:42:35:54:40:
35:a5:46:13:ed:da:ad:87:f0:3e:07:6f:ae:af:3c:
b0:47:98:da:eb:bd:80:4b:9a:2c:35:ae:a6:2e:6b:
14:99:8a:e0:b8:db:4a:1e:e1:98:c1:63:81:38:a2:
d0:51:1d:ed:18:5c:15:b6:7e:f9:51:c0:cb:8b:f1:
11:f8:73:88:bf:60:86:45:fc:36:8a:09:2a:e7:de:
15:eb:ee:1b:76:e9:1e:0a:bd:31:ed:5f:8b:bc:ef:
3a:0c:c6:f7:bf:01:ea:08:9d:da:c5:87:ea:1b:27:
40:be:57:b4:cd:92:dc:8a:cb:e5:bf:b4:c8:1e:60:
97:0c:93:db:0e:0b:e1:81:dc:d4:1f:a7:6c:62:f8:
94:0d:40:8a:28:24:b6:50:74:1c:8e:dd:8a:fa:1a:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:33:BF:67:EC:04:A2:CF:BE:FC:4E:09:98:EC:64:E1:FD:C1:C0:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B53896E2CD2F11EF8ABAAA55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e7:e5:5d:22:35:ad:c6:bc:4b:14:ed:f4:fb:06:e2:c7:05:
f9:d6:8e:22:6f:85:72:3f:04:b6:c4:dd:f9:c4:42:4f:fe:af:
48:d4:3f:85:01:87:02:86:34:2d:e9:31:47:93:8c:33:68:f7:
8e:f0:9f:35:67:12:af:d4:de:be:4c:be:aa:45:77:54:8a:cc:
d0:1c:72:68:3c:ff:61:db:03:1b:08:15:df:40:70:35:ab:0a:
3d:32:61:87:f5:01:fc:8e:a0:f6:a1:cc:b4:ef:72:92:5d:8d:
21:92:a8:e6:d6:7d:61:6e:a3:f0:04:e7:b6:dd:52:c3:38:d4:
f6:c6:7b:63:ba:15:b3:71:ed:dd:bb:bd:ee:4e:18:cc:ee:1a:
32:34:bf:fd:a4:80:73:f0:28:84:49:fc:56:84:01:9a:0d:cd:
ca:fa:69:0a:a7:38:c8:93:bb:13:2b:e1:df:42:96:36:31:b2:
9e:b8:70:63:9c:1f:5c:c4:c3:36:4e:c3:6d:18:13:6e:df:9f:
bc:9b:10:be:88:ae:22:ef:38:64:e5:ff:5a:01:27:ab:c9:2b:
dd:a0:76:4a:dc:36:a8:ed:4d:31:7c:e6:8f:0a:25:57:7b:f3:
fb:5d:7d:57:d7:d6:ad:a2:53:5d:6b:fc:e5:a5:4c:cc:37:ab:
bc:b9:63:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:13 2025 by rpki-client