Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E350B96ECCE511EF990C6785762E951A.roa
File: E350B96ECCE511EF990C6785762E951A.roa (raw, json)
Hash identifier: NV8vYfpGUgC2vYo9EnJqS99lQhU5i3Mld7etzEM7elI=
Subject key identifier: AE:F1:08:57:A4:FC:85:D2:99:D2:A4:A9:95:A9:3E:E7:68:22:30:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBCD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E350B96ECCE511EF990C6785762E951A.roa
Signing time: Tue 07 Jan 2025 10:55:20 +0000
ROA not before: Tue 07 Jan 2025 10:55:17 +0000
ROA not after: Sat 13 Dec 2025 10:55:17 +0000
asID: 984
IP address blocks: 156.233.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64461 (0xfbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 10:55:17 2025 GMT
Not After : Dec 13 10:55:17 2025 GMT
Subject: CN=677d0818-c2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:3d:36:06:8d:45:14:2a:59:35:57:00:92:
10:4b:9d:94:a1:e2:8e:97:8d:b8:83:bf:62:0b:b9:
2b:ce:39:95:b8:cd:15:86:f1:69:a4:66:7c:08:b4:
8c:35:92:49:98:61:a8:57:1f:59:a6:8b:89:1c:d8:
a6:ad:73:d8:4b:3e:ed:34:a2:ec:ce:ee:1b:20:71:
92:77:a1:4d:85:e0:10:08:10:b5:72:63:05:ef:81:
ca:e8:ef:0e:de:a4:9e:4a:32:7f:80:d8:8a:5b:3b:
93:99:b0:85:e2:aa:89:9e:f4:bb:37:dc:d6:74:26:
7b:da:96:d9:43:b1:b9:53:16:c5:ae:45:37:9e:98:
d6:b4:40:37:9e:f5:9e:0d:30:a7:79:68:23:6d:9d:
37:23:8b:3c:39:5b:0c:9a:4d:4d:60:e5:2e:48:51:
82:f5:bf:4a:80:76:8c:4d:3f:cd:33:e4:28:68:7d:
b3:27:80:c9:f1:ab:46:0c:cb:74:68:32:74:ef:ec:
9e:02:ee:a3:3b:53:61:eb:96:ba:8a:49:1f:ab:2f:
dc:7e:20:c1:1d:10:6b:c9:d8:22:39:1e:4d:ab:71:
51:6e:a5:b5:be:63:71:df:0a:8b:1d:b5:44:6e:4b:
9f:d2:7d:3f:6a:83:6f:f9:6b:de:6a:0b:a3:31:c9:
66:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F1:08:57:A4:FC:85:D2:99:D2:A4:A9:95:A9:3E:E7:68:22:30:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E350B96ECCE511EF990C6785762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.251.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7f:fa:ef:aa:6b:09:a8:1b:1a:4f:3a:f3:e4:2e:e3:0a:97:
f4:01:e7:20:8b:4a:3d:82:e8:52:2c:e7:06:67:cb:21:f4:e3:
fc:2e:0d:84:ed:f3:8b:ef:0a:29:1d:b9:20:c7:b5:63:5e:53:
39:3b:ca:ca:0c:64:4d:d7:91:d1:cf:dd:64:67:29:35:29:d0:
23:e3:72:c4:58:83:51:9e:d9:f9:ab:85:ab:ee:a4:1b:d1:55:
7c:32:da:55:27:bb:8e:36:e4:44:1e:e2:0b:fa:c4:9d:14:a1:
5f:72:7e:65:70:79:61:70:0a:3f:71:8f:f9:18:06:17:bb:d3:
8f:92:94:5a:92:e7:5b:35:41:91:b4:b4:1d:3a:f5:bf:a3:fa:
7e:98:c0:a1:c9:89:6d:cf:0e:4c:f2:9d:58:20:c0:b7:9a:5f:
33:28:b3:4c:01:39:3d:38:61:b2:bd:cf:20:77:29:23:ed:ad:
2f:29:52:e5:3d:d0:2c:62:de:11:39:46:38:6d:31:df:a4:08:
af:bd:cb:fb:ca:7d:51:c8:43:7c:67:a7:ec:9e:ff:7f:7b:da:
80:ca:9f:32:30:23:91:65:d4:2d:66:53:82:18:bb:27:d9:1d:
77:0c:91:34:b4:4a:0c:f8:98:da:12:42:6d:4c:ee:a8:1f:82:
10:e5:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:13 2025 by rpki-client