Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C13C429ECCD111EF8B022085762E951A.roa
File: C13C429ECCD111EF8B022085762E951A.roa (raw, json)
Hash identifier: ++w/1c9RIEqXwgFWjeDvgaAAfe+7n6oWU8WDjgm58zU=
Subject key identifier: 6E:67:E7:F1:DC:63:E2:55:E0:3C:51:4B:11:0A:FA:0F:8C:02:E4:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FAD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C13C429ECCD111EF8B022085762E951A.roa
Signing time: Tue 07 Jan 2025 08:31:13 +0000
ROA not before: Tue 07 Jan 2025 08:31:10 +0000
ROA not after: Mon 13 Dec 2027 08:31:10 +0000
asID: 17561
IP address blocks: 156.233.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64211 (0xfad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 08:31:10 2025 GMT
Not After : Dec 13 08:31:10 2027 GMT
Subject: CN=677ce651-16d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:29:23:93:cd:02:c9:26:49:38:0e:4b:76:
62:22:77:d7:3f:39:3f:34:76:d0:87:66:29:34:67:
d7:5d:ea:40:db:c6:a0:ea:34:49:24:23:cf:a9:0c:
6e:4b:a3:2c:36:00:23:c1:cf:e4:92:27:fa:85:76:
53:89:c0:fc:2d:53:6c:eb:e6:28:fe:51:02:f0:e4:
59:2e:98:ec:68:67:a5:ac:ee:62:02:11:2f:2b:f4:
a4:82:99:c4:ac:91:8a:59:3d:d6:2f:a8:ab:04:41:
4d:d6:aa:bc:f3:49:d3:0a:87:11:28:b9:bc:65:d3:
bc:40:3b:c7:f7:fd:dc:f4:34:c9:6e:84:26:b9:01:
c4:ec:46:21:cd:2e:51:75:61:11:23:28:14:84:92:
bb:70:12:29:1b:fb:97:71:c7:f5:ac:3d:b1:cf:61:
66:00:07:c7:8d:92:c6:80:41:0c:a4:50:45:ef:38:
ec:4c:1d:32:24:75:b2:76:ce:f2:24:f6:66:b7:ea:
80:25:d0:5d:48:d5:00:75:25:3c:11:7e:f9:09:36:
0c:5e:91:ab:32:b8:25:42:3b:b3:24:ea:24:c3:05:
90:ea:67:fe:72:a0:cd:d3:c6:24:2c:b8:66:03:5d:
f1:e0:3a:cb:57:6c:d0:89:7c:4c:5f:b2:35:79:a8:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:67:E7:F1:DC:63:E2:55:E0:3C:51:4B:11:0A:FA:0F:8C:02:E4:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C13C429ECCD111EF8B022085762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.155.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ba:00:27:b7:9e:b8:84:b9:9a:aa:2b:3f:56:10:93:17:ee:
62:77:26:a0:43:74:98:9f:91:53:38:f2:1c:60:05:30:f1:2c:
88:2e:f9:09:fe:fd:d5:1d:77:04:12:0c:1a:b7:83:57:37:a4:
a0:35:8f:dd:38:72:46:90:fa:ae:19:2f:d7:58:e4:7e:ea:68:
0b:04:03:3b:40:a2:13:76:0f:43:0d:c6:da:28:2a:1c:dc:6f:
16:c2:36:47:b6:ac:71:e0:52:60:2c:e2:2a:40:83:61:aa:36:
12:ec:64:ec:83:c1:c9:09:16:9c:56:08:ec:ad:96:76:ef:08:
c2:06:6e:f7:08:5a:a4:30:93:f6:c9:a1:ad:16:31:26:ea:e5:
13:ff:65:d5:87:58:23:2f:c4:65:f7:32:68:05:19:04:d7:7b:
df:cc:0d:bc:22:01:73:4f:1c:a4:eb:46:42:44:05:76:01:e3:
7d:97:7e:cc:a1:ce:a2:86:a4:59:67:56:1c:c6:cd:23:53:11:
68:09:17:5d:46:bd:f9:7b:5c:4a:63:06:26:9c:8c:4f:df:03:
67:50:bf:3c:5f:1f:e4:d1:4e:7d:11:b3:a0:78:f0:a8:c3:6d:
7d:48:6e:6b:e8:96:c8:6b:28:ff:65:4e:f0:b7:e7:e3:35:89:
f1:fe:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:10 2025 by rpki-client