Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB1A0642CCCE11EFAA847471762E951A.roa
File: BB1A0642CCCE11EFAA847471762E951A.roa (raw, json)
Hash identifier: aVYYNe9aSpC4SVOXKfoT8TpDu+QcDekk88v0GlJt8Rw=
Subject key identifier: 55:E1:1B:F9:F4:B3:62:0C:3E:84:2B:DF:CD:C4:46:D7:B7:5C:52:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FAA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB1A0642CCCE11EFAA847471762E951A.roa
Signing time: Tue 07 Jan 2025 08:09:35 +0000
ROA not before: Tue 07 Jan 2025 08:09:31 +0000
ROA not after: Sun 23 Mar 2025 08:09:31 +0000
asID: 135097
IP address blocks: 156.254.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64162 (0xfaa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 08:09:31 2025 GMT
Not After : Mar 23 08:09:31 2025 GMT
Subject: CN=677ce13e-2e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:a2:7b:1b:65:5a:f3:17:cb:90:ed:cd:a4:
f2:26:bb:10:a8:1d:ff:77:41:05:a6:c4:21:69:27:
9b:44:e8:09:7a:1c:53:78:0c:e9:da:e9:4e:6d:b3:
be:89:e7:b5:a1:ab:30:ce:d5:e4:00:24:34:c4:30:
4e:87:26:43:0c:bc:c2:2f:61:3c:26:a8:be:fa:9f:
75:65:4b:bb:ae:2c:97:df:0b:6b:4c:38:96:a6:b8:
2a:f3:ba:22:e9:7e:28:bc:cc:fe:e0:35:53:8c:bf:
6d:37:f3:8c:26:f0:9a:89:00:ce:75:cf:b4:bc:a1:
c8:da:e3:74:ca:02:de:bb:92:71:da:f3:a1:2a:19:
7f:01:dc:38:eb:92:f5:67:1d:22:e9:ec:b7:54:57:
84:33:bb:a6:7b:2a:a3:ee:ac:db:48:c9:50:32:b4:
64:d8:48:74:a3:b4:c8:7b:68:55:ec:58:5f:9f:97:
2e:cf:3a:6e:fa:61:ea:cb:ce:fa:ad:7e:52:42:3c:
5f:a5:a3:7e:2a:87:4f:00:4f:dc:3f:9d:19:b6:80:
b9:0e:d4:04:c4:1f:10:82:bf:38:09:9b:ca:4d:59:
fc:36:0c:b0:81:1e:5f:09:05:10:80:f5:00:90:31:
b5:ce:09:f7:42:73:c9:ab:47:98:e8:b2:c3:52:51:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E1:1B:F9:F4:B3:62:0C:3E:84:2B:DF:CD:C4:46:D7:B7:5C:52:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB1A0642CCCE11EFAA847471762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
29:17:b5:43:26:e3:7f:4d:6c:56:3e:66:5a:7e:3b:41:fe:fe:
d1:fd:c3:89:39:5c:8e:06:59:69:c2:ef:ad:b4:4e:2c:85:1f:
93:cf:74:de:b4:9a:8f:38:d4:99:55:9e:e1:d4:3e:b7:bc:ce:
6e:e4:ce:52:d1:4e:6d:51:9d:dd:7a:9a:f1:39:d1:fd:7d:f6:
8d:78:fa:c5:fd:0f:13:a4:c6:e4:48:52:d6:0d:4d:b9:78:c3:
cf:40:5b:ab:8e:9f:50:fe:53:f6:8f:b8:1e:e2:46:72:a5:56:
c7:b4:0f:74:1d:e1:3f:cc:d0:bf:45:b5:9d:ba:99:05:f9:36:
40:6b:3f:37:f3:bb:43:05:23:f1:26:00:5e:10:e8:17:38:83:
b9:0b:b2:c0:61:ba:a2:8c:fa:e1:da:12:41:de:47:48:72:38:
61:98:ec:d1:de:37:8b:93:1b:f6:b2:a1:f1:98:ac:71:a5:6d:
ba:28:78:39:24:af:b8:07:6b:db:51:ff:9a:c6:41:37:9e:01:
75:69:7a:9c:94:5b:d0:29:23:1b:60:95:b2:57:00:94:32:b0:
40:72:03:20:05:ea:a6:f5:11:80:b3:c5:df:ab:54:37:0c:45:
6d:82:ad:f9:b7:af:6e:c7:43:94:39:40:df:ee:a9:b0:ff:69:
a7:f0:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:38 2025 by rpki-client