Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD3C75BCCD4A11EF9F2B0280762E951A.roa
File: DD3C75BCCD4A11EF9F2B0280762E951A.roa (raw, json)
Hash identifier: rO6AnJ6uK3qmSoIB5AnqLcceT/b6ScERk4yuBT8g8eI=
Subject key identifier: 5E:10:00:2F:4E:65:CA:A2:66:34:CD:A6:03:B8:E9:4F:70:04:98:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD3C75BCCD4A11EF9F2B0280762E951A.roa
Signing time: Tue 07 Jan 2025 22:58:09 +0000
ROA not before: Tue 07 Jan 2025 22:58:06 +0000
ROA not after: Mon 13 Dec 2027 22:58:06 +0000
asID: 17561
IP address blocks: 156.246.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65213 (0xfebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 22:58:06 2025 GMT
Not After : Dec 13 22:58:06 2027 GMT
Subject: CN=677db181-1da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:25:8b:95:12:2b:1d:d7:74:3d:65:03:d6:
36:2d:8d:34:fa:0e:de:22:7e:9b:4d:e3:6c:1b:91:
80:d8:2a:ab:29:77:b6:3e:1f:b2:3c:e6:26:cf:7b:
34:7e:d0:2c:bc:61:fc:c4:d3:4e:1a:de:65:bd:98:
96:3a:2b:0e:66:11:32:8c:5a:a2:bd:cb:eb:85:9e:
0a:3a:ae:de:fd:e2:2a:17:df:4a:f1:09:b5:84:58:
a4:e6:0f:64:de:e4:1d:39:10:1a:d3:d8:6a:bd:02:
19:0b:59:2e:61:d5:2d:25:97:1c:ac:7a:c6:f6:2a:
a5:ea:e5:5e:69:56:3a:2f:af:02:a8:c0:30:84:65:
c0:38:bd:20:89:60:f1:8c:e4:22:40:73:5d:c1:1a:
7f:b1:72:d2:c1:44:51:68:44:e4:bd:c5:5b:a3:3a:
76:43:9f:6e:e5:78:75:1f:ed:79:81:c3:71:53:5b:
c7:93:ad:14:d2:be:4c:e6:13:f3:3e:54:a2:6f:c8:
a8:6d:a2:f9:e3:5e:6c:a4:3f:63:77:f7:e0:cd:83:
7c:b4:ea:55:09:23:f4:a3:0f:74:b3:5d:11:f8:7c:
62:c4:64:eb:c6:82:9e:d8:aa:9c:8c:5d:3c:40:62:
3b:e0:b9:80:62:41:31:ba:b0:5c:43:22:43:6f:4b:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:10:00:2F:4E:65:CA:A2:66:34:CD:A6:03:B8:E9:4F:70:04:98:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD3C75BCCD4A11EF9F2B0280762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.90.0/24
Signature Algorithm: sha256WithRSAEncryption
15:73:22:5e:4b:5c:f8:f3:b8:7b:c6:67:9b:75:6b:c0:44:12:
c2:b6:b3:dd:a1:60:d1:ae:56:5c:59:99:75:86:50:98:4a:37:
5c:fc:a9:a9:1a:c7:03:b4:17:a1:91:39:2f:51:97:78:f8:53:
c8:2b:e4:52:0e:50:3d:9a:f3:7f:79:fd:48:2b:34:a0:8f:f2:
43:a7:48:ee:7a:4f:71:bc:45:53:42:d9:38:fc:e1:eb:63:66:
c1:6b:dc:ad:64:6d:f6:2f:ce:5e:eb:b2:83:46:3d:16:a4:84:
0e:19:fe:c1:34:f0:63:98:b8:db:42:2a:63:ef:7f:5e:d7:07:
4e:1a:f9:5b:de:10:c8:c4:f6:07:45:9b:af:af:e9:f2:dd:0d:
ef:55:95:71:c0:89:d8:e2:74:0f:d5:59:fc:6f:0c:61:95:91:
3a:f6:d7:78:00:ef:e8:f6:5f:0c:09:c6:1f:4a:7a:ae:08:25:
a2:8b:07:6e:21:82:1d:7f:18:93:fc:6b:55:8c:45:56:64:b6:
50:03:0c:58:3b:1a:cb:42:53:2b:eb:89:66:d0:0c:b5:4d:d8:
58:f2:36:21:30:8e:84:bb:ab:96:f3:c3:a1:32:43:c8:78:75:
c2:d4:26:9d:e9:7e:0c:e7:e4:47:4c:d2:bb:92:3d:85:e8:59:
07:d5:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:21 2025 by rpki-client