Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E005485ECCC911EFA3BFC154762E951A.roa
File: E005485ECCC911EFA3BFC154762E951A.roa (raw, json)
Hash identifier: BhGZCSiuK4tA7ITgoeDDsZSwiS+lXIaeVBS567z8uck=
Subject key identifier: 98:4B:8F:89:50:C9:FD:37:09:B0:2A:06:FF:FC:CA:E8:6B:93:D6:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E005485ECCC911EFA3BFC154762E951A.roa
Signing time: Tue 07 Jan 2025 07:34:49 +0000
ROA not before: Tue 07 Jan 2025 07:34:45 +0000
ROA not after: Sat 13 Dec 2025 07:34:45 +0000
asID: 984
IP address blocks: 156.233.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64112 (0xfa70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 07:34:45 2025 GMT
Not After : Dec 13 07:34:45 2025 GMT
Subject: CN=677cd919-a6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:64:a3:9c:1b:3e:f1:2c:56:90:29:cd:a5:
12:28:49:9c:66:10:15:39:d4:70:7e:20:cd:89:ea:
29:27:91:e8:61:63:0f:ce:ba:0b:17:48:c2:25:d8:
dc:48:23:46:ff:bb:7b:26:2b:11:4a:a7:89:f9:c9:
99:3a:2b:d4:bf:d1:cc:4a:6d:62:1a:b0:94:15:79:
1e:8b:6f:da:1c:c8:c0:46:5f:82:53:72:2f:f6:82:
23:e1:42:ad:e6:d2:60:50:37:eb:94:dd:c6:e2:c2:
93:5b:b2:e5:5a:82:c4:ae:24:60:00:7f:bb:48:85:
d2:24:7a:eb:2c:87:55:a2:05:3b:9e:19:d8:21:a8:
4d:a1:6d:7a:f5:6c:c3:e0:b9:1d:8e:6d:c8:92:a1:
ac:22:f4:86:f2:a0:07:b0:66:bc:e3:b3:e0:73:5f:
60:ff:ff:be:f1:f6:1b:e5:f1:c4:51:eb:ee:73:6c:
c2:a9:6b:3c:6e:73:44:65:d1:8a:cb:8a:25:d1:4d:
71:c0:8a:ac:ac:33:bc:27:27:7d:0e:2d:80:67:47:
26:1a:3c:a5:c6:44:28:02:01:d0:08:00:dc:05:36:
9f:d1:f2:3a:01:17:ce:35:38:97:ec:3c:40:81:6e:
0c:2b:fa:3b:3a:e1:d9:a6:8e:fa:ce:9e:ae:13:03:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4B:8F:89:50:C9:FD:37:09:B0:2A:06:FF:FC:CA:E8:6B:93:D6:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E005485ECCC911EFA3BFC154762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.96.0/24
Signature Algorithm: sha256WithRSAEncryption
02:07:ec:59:59:d9:95:62:5d:3b:28:fd:be:eb:66:f5:90:98:
7f:a8:99:05:93:f6:b7:61:66:b7:14:ef:8f:51:1e:f4:69:63:
62:9e:5e:1f:11:5e:56:a7:ee:52:b7:c6:80:64:b4:09:f2:83:
d2:ea:1b:86:ea:23:46:3c:bf:13:a1:13:9b:63:05:72:2b:6f:
f9:0a:cd:c1:a7:ff:5e:38:d3:b8:a4:f5:9d:39:53:9b:c5:3e:
92:5a:78:7d:3a:38:1f:9c:92:93:88:77:37:98:16:7e:33:9c:
46:e8:a4:80:54:83:b8:96:9a:e1:f5:cd:73:47:ee:06:27:80:
a7:02:ef:de:b1:31:84:bb:1a:6d:14:90:78:a5:6d:e0:e7:de:
b6:b5:ec:16:e7:b1:cb:1c:02:ea:f2:ea:2a:36:72:9c:64:31:
99:18:50:72:9c:b1:27:d4:32:af:1e:b5:ff:98:f9:9b:d2:36:
7b:8e:61:81:d1:d4:2c:91:d8:94:5b:01:b1:72:15:cd:52:1e:
2b:77:92:a2:24:9b:82:a0:86:94:e2:f1:fa:d2:9c:e8:86:48:
8c:61:59:ef:5b:2e:af:79:19:cb:e9:50:bf:96:c4:e8:1f:86:
f9:84:2a:ae:e6:29:6f:2a:84:a7:a4:8e:c6:77:33:6b:27:2e:
ef:33:b4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:27 2025 by rpki-client