Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1DA8250C98E11EFA7D23158762E951A.roa
File: D1DA8250C98E11EFA7D23158762E951A.roa (raw, json)
Hash identifier: WriIDhWcqWfoVurBURQ22X3JrHW43SzVav3lTDIHPCg=
Subject key identifier: FE:51:95:13:D6:20:51:16:75:93:5C:C1:FC:C9:04:E2:B7:48:4A:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1DA8250C98E11EFA7D23158762E951A.roa
Signing time: Fri 03 Jan 2025 04:54:31 +0000
ROA not before: Fri 03 Jan 2025 04:54:28 +0000
ROA not after: Sat 13 Dec 2025 04:54:28 +0000
asID: 984
IP address blocks: 156.233.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62927 (0xf5cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 04:54:28 2025 GMT
Not After : Dec 13 04:54:28 2025 GMT
Subject: CN=67776d87-cd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:89:49:a1:49:da:4a:ef:cd:13:3f:2e:ae:46:
e0:50:33:9c:de:5d:f5:60:71:f3:15:1b:25:fb:c2:
dc:0f:5d:ee:87:9d:eb:69:1f:ca:24:a3:80:18:9a:
39:84:10:52:40:93:d4:b5:a7:12:18:b4:30:58:c3:
f4:96:f0:71:d1:21:18:4d:98:a0:17:53:49:6a:55:
4c:99:69:eb:b5:9a:1c:39:b6:a9:78:d0:c4:bc:1a:
72:ea:95:84:b8:4e:0e:c3:89:9c:53:6e:66:ab:a6:
f6:23:f6:dd:4a:6a:e7:63:fb:72:20:18:1e:43:a7:
26:48:62:f7:0f:48:fb:fa:ed:e4:ac:0d:49:b0:b8:
25:c8:fc:0f:48:10:c5:f2:e4:13:36:f6:18:77:dc:
07:be:66:93:03:fc:85:6d:64:1f:0b:43:69:70:34:
ad:c5:60:79:e9:5b:d1:bd:d4:08:e9:7a:12:74:85:
12:81:82:99:8c:85:1c:7b:fd:88:47:4b:bb:7b:bf:
79:ab:58:22:69:c8:1f:83:8b:24:88:45:ae:34:a7:
b6:ce:7f:2b:54:68:22:2e:76:0b:62:12:82:7b:02:
8f:e5:fc:0b:90:29:66:b4:48:3e:ee:64:bb:c1:ab:
1f:a1:4d:cb:56:8a:fd:0f:77:b5:52:12:e6:c7:fb:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:51:95:13:D6:20:51:16:75:93:5C:C1:FC:C9:04:E2:B7:48:4A:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1DA8250C98E11EFA7D23158762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5c:53:f0:28:39:5f:86:53:41:da:15:9d:7d:f2:56:43:29:
79:1d:6b:8c:60:2c:35:8e:c7:60:46:d4:41:7f:57:0c:55:51:
aa:e0:0d:48:aa:ef:e7:c4:fa:75:0c:d6:8a:0b:c7:b5:f8:74:
bc:fa:69:87:c8:bb:db:12:11:1c:5a:ce:f7:e4:da:27:ed:df:
d0:d6:65:ca:84:e0:dc:e9:dd:e0:90:e1:13:1c:72:b3:5c:33:
53:99:70:a8:05:e2:6e:d0:fc:9e:f8:15:d6:bc:bc:5e:8c:b8:
0d:69:8a:71:4d:3d:70:55:69:48:0d:6d:a5:b6:01:0a:20:c1:
81:19:93:4d:c2:15:d4:72:0c:3a:e3:b8:2a:55:53:20:ff:37:
3b:75:69:b7:48:b3:e9:34:16:ed:ef:99:55:ca:95:8a:37:43:
67:5f:37:27:4c:26:0d:28:d4:e5:7d:6e:f5:ad:0e:e5:8f:6c:
60:83:15:47:3f:90:c3:da:88:96:6f:f8:71:a3:b7:7e:8e:0f:
72:18:e8:b4:5e:51:b5:15:76:38:39:3d:a4:62:4f:1e:12:4d:
a4:b0:6e:29:f5:51:22:2c:6b:d1:62:f3:38:f2:e5:53:f0:7a:
0b:ca:f2:91:89:4f:9e:72:cb:94:fb:f2:a0:68:bc:6e:4b:8c:
e8:8e:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:37 2025 by rpki-client