Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE5C8A88D2FD11EF9F17F4BA762E951A.roa
File: CE5C8A88D2FD11EF9F17F4BA762E951A.roa (raw, json)
Hash identifier: 6GscEhGEdyrrv4y3erpcm9YzhXI2BCUlUSUgv3j8Sgw=
Subject key identifier: 68:5C:81:26:31:E8:C7:78:4D:17:5F:1C:3A:AA:FD:0A:5C:ED:AE:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0107D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE5C8A88D2FD11EF9F17F4BA762E951A.roa
Signing time: Wed 15 Jan 2025 05:01:40 +0000
ROA not before: Wed 15 Jan 2025 05:01:37 +0000
ROA not after: Mon 03 Jan 2028 05:01:37 +0000
asID: 17561
IP address blocks: 156.254.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67543 (0x107d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 05:01:37 2025 GMT
Not After : Jan 3 05:01:37 2028 GMT
Subject: CN=67874134-1d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:00:7f:0a:da:6f:72:81:6c:10:de:78:f7:
ba:db:0f:34:6f:e6:3c:1e:0c:ec:c9:79:aa:cc:cc:
27:6d:51:fb:c0:e3:74:2b:bf:ee:a5:49:3b:2e:09:
c5:cc:b3:18:4a:33:03:67:bd:0c:4e:00:a9:43:2e:
67:da:d5:06:64:ca:bd:90:72:a9:48:2a:3f:c0:f1:
14:29:8d:8a:2c:ca:63:6d:ee:fe:91:5a:af:d3:62:
75:8a:14:85:bb:3a:4f:76:84:1f:f9:03:76:d9:38:
a5:0c:a7:1f:8b:c0:32:bc:15:11:2b:84:44:69:97:
41:61:c8:82:5f:20:a6:b0:4a:e9:d4:bd:12:a1:f9:
13:a9:d1:d4:c4:d2:8a:a6:db:03:fb:dc:2f:47:f4:
b9:28:6f:f0:48:fa:12:30:a6:39:2c:c4:b5:a0:49:
fd:07:66:de:11:3e:7e:49:2b:e3:09:0d:ac:2a:d7:
31:97:6b:05:a2:ea:7f:90:57:85:45:74:7b:88:89:
b1:03:41:8d:18:d1:17:b4:78:08:48:c5:7e:3b:d6:
a3:22:90:aa:fe:a9:c1:42:9d:17:8e:db:57:76:47:
be:93:ac:93:a6:88:80:d4:af:fa:79:d8:f3:a2:1f:
4f:6b:8d:30:20:ce:52:11:00:e7:93:0a:98:53:8c:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:81:26:31:E8:C7:78:4D:17:5F:1C:3A:AA:FD:0A:5C:ED:AE:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE5C8A88D2FD11EF9F17F4BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.22.0/24
Signature Algorithm: sha256WithRSAEncryption
14:86:dc:83:a4:92:9a:49:1a:ca:d1:ee:15:d7:92:ec:56:9e:
7f:eb:24:5e:7a:4a:98:b7:be:25:d9:eb:7f:88:06:5d:1b:7f:
66:b3:ec:34:3f:53:3d:49:87:6d:4a:bc:28:12:a6:5b:a2:f2:
cf:2c:fb:36:f5:8f:4f:b2:2a:42:b5:93:d7:d4:03:2f:44:00:
b7:61:35:a4:3c:ab:a7:87:b5:a4:58:91:d5:ae:10:d4:1a:2d:
b4:90:ea:79:ca:bd:5b:af:07:af:11:65:ad:b1:5c:8a:43:fb:
4c:76:5a:76:a4:32:80:c1:b3:d4:7d:fc:f2:2b:9c:3a:f7:f2:
49:85:5f:b6:eb:e6:c8:19:45:6e:1b:48:fa:72:50:81:79:63:
4a:68:e6:2e:3f:7f:bb:06:39:0c:34:20:7e:9d:c5:98:f7:f0:
ff:ee:cb:e3:7d:09:0e:2e:17:86:74:d7:bf:4a:7e:5e:77:65:
51:76:fa:91:63:09:02:34:9c:d6:9a:4d:82:ef:50:7a:68:9b:
05:ee:00:a5:fe:5a:25:fd:01:af:15:45:f8:1e:c0:86:fc:51:
fa:1e:e9:2d:74:8b:a5:79:a6:33:ed:32:95:5a:72:4a:89:37:
43:41:1f:43:ba:31:59:a3:2c:a5:76:00:05:4f:12:f5:81:26:
36:41:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:40 2025 by rpki-client