Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D133494ECCC311EFBC126FAC762E951A.roa
File: D133494ECCC311EFBC126FAC762E951A.roa (raw, json)
Hash identifier: 5UrPSrvlpE+cp6ciD00gOusjYHHhq0Bw+lMvZEMbN0c=
Subject key identifier: 8C:F8:3C:7F:65:02:7C:87:16:14:3E:FA:86:55:78:95:50:0D:E4:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D133494ECCC311EFBC126FAC762E951A.roa
Signing time: Tue 07 Jan 2025 06:51:27 +0000
ROA not before: Tue 07 Jan 2025 06:51:24 +0000
ROA not after: Sat 13 Dec 2025 06:51:24 +0000
asID: 984
IP address blocks: 156.233.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64068 (0xfa44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 06:51:24 2025 GMT
Not After : Dec 13 06:51:24 2025 GMT
Subject: CN=677cceef-96c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:45:19:73:4b:95:8c:0e:31:8b:a2:58:b1:
7a:b0:a9:f7:4f:ea:60:e8:ce:42:51:69:77:c9:6b:
62:dd:ed:21:1d:ba:ca:87:83:1f:8c:4f:8d:d7:5e:
87:d5:45:8c:a4:28:c9:4d:ea:c6:c5:c4:15:55:87:
af:c1:2b:c1:86:d2:fa:a8:65:40:fb:5c:e6:76:75:
b1:ff:be:68:67:fd:24:5a:cc:2b:15:c6:52:d8:c2:
e1:15:e2:92:fc:fe:c3:7d:64:d8:9f:bd:f8:00:d7:
f6:85:d0:21:6e:c8:72:f1:e1:cf:89:6b:aa:41:c2:
36:37:b6:5b:4c:92:83:ca:d9:c3:e2:50:e4:57:3b:
76:a6:65:db:9b:2e:2a:b0:d1:ca:bc:df:03:c6:87:
e3:e8:95:c1:56:05:02:c5:c1:4f:78:95:5d:91:5c:
a4:c6:c1:9d:68:77:d3:c8:f9:5c:9d:c2:69:1b:27:
32:26:d1:60:60:59:64:9b:47:31:a1:2f:14:90:de:
7f:07:a9:63:35:ad:c0:51:d9:5c:1f:6e:16:b0:1d:
4e:12:af:e3:f0:7c:21:ac:b1:c3:0f:e1:62:b1:4c:
75:bf:00:b1:d6:2b:42:f8:df:bc:b2:dc:21:e7:41:
62:ae:6d:81:20:09:2e:ce:d9:94:f5:80:80:62:28:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F8:3C:7F:65:02:7C:87:16:14:3E:FA:86:55:78:95:50:0D:E4:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D133494ECCC311EFBC126FAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.54.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ef:88:c5:5a:ac:98:cc:da:8d:d3:90:c3:c3:f2:95:6c:2e:
3f:d4:93:5a:f7:db:bb:45:5c:30:87:b3:37:88:e6:f4:79:07:
3c:28:f9:62:eb:ec:1d:5c:5b:fc:f0:88:93:8e:70:d5:87:6e:
e9:63:3f:8a:ba:b1:df:58:0a:7b:70:b6:a2:a5:f7:9a:30:01:
ff:f5:82:e7:17:77:b9:f2:c6:57:e3:f7:bd:59:9a:33:1b:ed:
2d:a4:5f:86:a8:b2:fb:de:e8:48:00:53:60:af:df:68:c7:26:
bc:0f:3a:9c:a4:ba:29:59:4d:85:7a:ff:63:db:aa:1d:87:b9:
c2:c0:c3:33:29:3e:18:1b:f8:1c:47:44:6a:f3:da:17:64:d3:
71:7d:32:19:3e:30:8f:9a:47:b9:50:64:ea:1c:33:b1:ae:a4:
12:65:e6:74:ba:3a:5c:98:92:61:8e:8d:14:92:a1:b8:43:18:
f2:a6:58:3e:1c:3b:5d:96:de:a8:6f:94:cb:7d:80:da:72:0d:
4c:e1:63:52:15:0e:58:8e:22:42:18:fa:b6:89:3b:15:e2:68:
ec:60:8b:48:9b:23:59:c7:b1:46:50:fe:1d:cc:f2:d8:19:81:
0d:62:b2:2e:ab:d0:bc:65:f8:d8:95:b6:f3:f0:af:e5:36:9e:
43:4b:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:35 2025 by rpki-client