Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5B0BBB8C99611EF8F76AA89762E951A.roa
File: C5B0BBB8C99611EF8F76AA89762E951A.roa (raw, json)
Hash identifier: ERu+3JJb/kf0juQbjYYa5icpNByjSlrwStqFESIBNgg=
Subject key identifier: 55:7B:DD:6E:85:05:0B:7F:36:63:91:C2:28:D6:68:79:2F:2C:6D:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F619
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5B0BBB8C99611EF8F76AA89762E951A.roa
Signing time: Fri 03 Jan 2025 05:51:27 +0000
ROA not before: Fri 03 Jan 2025 05:51:23 +0000
ROA not after: Mon 13 Dec 2027 05:51:23 +0000
asID: 17561
IP address blocks: 156.233.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63001 (0xf619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 05:51:23 2025 GMT
Not After : Dec 13 05:51:23 2027 GMT
Subject: CN=67777adf-1f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:70:d9:a9:00:b1:26:e8:49:85:d3:b2:08:
00:72:21:80:52:ab:89:c6:14:31:d8:ea:24:2f:d5:
73:a2:0f:17:af:4a:39:1b:e8:8c:16:cf:77:f3:18:
38:26:0f:09:4f:a3:43:c2:ba:dd:10:25:d6:6b:13:
e1:30:2d:b7:77:1e:b6:a1:3a:df:0d:c5:01:31:54:
95:60:70:00:4d:c6:71:90:07:b3:67:4b:c9:bc:ba:
04:2c:dd:3e:da:b2:28:c8:e9:21:59:bd:24:e0:dc:
50:af:1e:02:85:55:4e:3a:14:6e:47:87:8e:59:8d:
e1:08:cd:a4:f3:73:4f:af:7f:63:a7:cf:25:b4:4f:
0c:fe:9d:ec:10:9d:d8:d1:8d:70:b6:11:51:9e:d6:
36:b9:b2:e4:25:ae:3d:9a:c4:fd:b3:8f:e9:70:95:
30:30:27:ea:f4:a9:15:08:53:18:38:ec:c0:40:c1:
0f:e0:aa:0b:48:ff:34:46:f8:e9:92:7b:30:d2:06:
ed:60:ea:3e:16:e5:e1:84:ee:60:d9:97:37:2a:45:
ee:0d:99:da:73:00:f6:17:83:99:5a:45:5b:72:08:
9e:1f:a0:6c:91:c5:99:82:f6:ed:9a:fc:3b:49:ed:
b1:69:1c:43:e8:15:e8:dc:88:27:a8:0c:8c:f8:bc:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7B:DD:6E:85:05:0B:7F:36:63:91:C2:28:D6:68:79:2F:2C:6D:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5B0BBB8C99611EF8F76AA89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:92:e0:6c:ee:fa:de:ca:ce:95:d5:63:9d:03:90:42:9e:bb:
03:43:26:81:aa:de:b7:00:04:0e:09:4b:0f:ad:7b:41:7c:f7:
30:f8:d0:e3:9e:ae:4f:a9:4d:60:10:f1:84:23:2b:24:b5:88:
58:28:37:23:74:20:25:03:a7:e0:b5:fb:5a:9c:68:2d:f4:4c:
af:5f:db:40:d4:2a:eb:08:6e:2f:1e:5c:45:22:0b:f3:e4:3c:
3c:13:98:b8:ff:82:79:d7:91:46:14:43:31:7b:88:02:87:9b:
71:0b:dc:0f:8f:ad:8f:90:33:fc:bc:34:a1:c0:df:ae:1a:60:
1a:74:3f:d1:02:8b:74:e1:3f:22:70:59:dd:b2:bf:44:75:76:
17:1a:d5:ad:86:c7:a0:bd:86:ca:c9:8e:03:98:c4:e4:f9:f7:
8d:12:47:d9:5f:70:29:81:ee:0d:9a:3a:20:bb:f2:96:b8:76:
91:7b:d0:ea:e0:ea:b6:07:80:1b:18:a3:24:b1:c9:cb:d9:93:
58:4a:8b:8b:d4:71:58:c2:9b:0a:43:b1:1a:0d:72:be:1f:68:
0d:2d:d3:b6:21:67:66:a4:ba:75:50:5b:c1:d2:ad:0f:7f:68:
83:ec:78:1a:fa:6d:85:d1:b9:43:f5:5b:34:52:db:5f:1f:0e:
e0:1c:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:29 2025 by rpki-client