Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5E34E9CCF2D11EF8C294C99762E951A.roa
File: C5E34E9CCF2D11EF8C294C99762E951A.roa (raw, json)
Hash identifier: ssFbCMI2+2nnLQ5CqcCbMD77QMw5zJlgNLiKpXfUIoI=
Subject key identifier: 86:97:AD:01:2E:E9:E5:2B:39:6A:07:BB:D8:F2:C1:99:64:98:64:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01051F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5E34E9CCF2D11EF8C294C99762E951A.roa
Signing time: Fri 10 Jan 2025 08:34:57 +0000
ROA not before: Fri 10 Jan 2025 08:34:54 +0000
ROA not after: Sat 22 Mar 2025 08:34:54 +0000
asID: 135097
IP address blocks: 156.250.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66847 (0x1051f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 08:34:54 2025 GMT
Not After : Mar 22 08:34:54 2025 GMT
Subject: CN=6780dbb1-c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:ea:2a:ae:29:0c:1e:92:84:7d:bd:ec:3f:
e2:be:54:7e:24:8f:09:74:17:6b:04:e1:20:72:a6:
de:4b:4d:21:d2:6f:02:67:46:b3:9f:89:bc:30:0d:
30:68:33:2f:32:cd:44:cf:39:29:17:fd:ef:6f:91:
31:f1:86:86:d4:ee:5b:8a:d4:ea:7d:bc:4c:ba:ec:
23:5f:8e:75:86:4f:92:ad:46:c2:da:36:9b:28:b7:
f9:3e:05:e9:ad:7b:5f:c3:b1:da:fa:a3:ab:0c:6a:
b0:dc:9f:f0:c3:ed:37:95:56:71:3c:12:58:5c:dc:
2b:e4:70:3c:cc:c1:1e:71:37:51:97:10:eb:36:1c:
bb:0d:6e:f2:80:39:1d:d0:7b:a6:b5:50:51:44:f4:
db:0c:4c:2b:bf:1a:cd:c6:88:3a:7b:8e:ba:10:20:
12:7e:4d:5c:ca:05:d8:62:07:8f:a5:03:18:bb:c8:
39:45:99:b0:72:a6:cf:22:65:02:34:31:16:91:10:
ca:91:6b:91:38:ba:37:b8:03:1d:a0:47:bb:ea:3e:
be:47:44:2e:01:fa:3f:c6:88:35:42:70:b8:24:b1:
bc:2e:6d:77:e4:fd:d4:8e:0f:a8:cd:9a:e1:1e:85:
9a:a3:41:df:7c:b0:7a:9f:63:1c:ad:3f:e6:11:ed:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:97:AD:01:2E:E9:E5:2B:39:6A:07:BB:D8:F2:C1:99:64:98:64:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5E34E9CCF2D11EF8C294C99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.8.0/21
Signature Algorithm: sha256WithRSAEncryption
79:b7:0b:9e:b7:2a:71:d8:6a:4f:f1:d4:5c:0e:5a:51:01:cd:
d6:0b:99:3a:cd:7a:73:57:98:93:08:ca:c7:fe:8a:06:5f:80:
a1:09:56:b9:91:9e:85:52:ed:64:64:df:ea:8b:ef:d3:37:2e:
73:eb:9f:b9:3d:f5:67:d1:88:74:97:b5:89:2a:d5:90:52:c7:
bb:54:16:a3:aa:7d:6d:24:52:48:7f:81:05:fa:e3:1f:b5:e2:
ec:bb:c6:60:90:78:6e:cb:39:df:20:60:29:e7:e3:96:58:6f:
c7:af:8f:c7:47:5e:34:46:06:70:bd:dc:15:0c:14:c1:73:1f:
10:ec:23:94:5f:7e:74:f0:ee:03:a8:ba:c6:f1:f9:88:54:4c:
e1:ea:4b:44:c6:6c:a7:9f:95:3b:78:e1:4b:19:f8:97:d1:9a:
b0:b0:84:a1:85:e5:42:58:1e:82:0d:85:ba:3c:b2:ff:22:94:
e1:c9:3e:1e:15:3d:01:ae:88:7d:85:7b:2d:4b:72:7d:b1:07:
7c:88:95:86:18:07:8e:fe:5a:6f:51:3c:7e:1a:3e:fc:0d:b0:
87:2b:b5:33:11:66:41:79:5b:ac:e2:68:0c:00:5e:3e:07:5f:
df:19:7e:56:fa:97:07:ec:f0:38:ca:f4:46:f5:f8:d4:bf:bb:
ce:ea:6f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:45 2025 by rpki-client