Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3DAAA60ABA311EF8146C968762E951A.roa
File: E3DAAA60ABA311EF8146C968762E951A.roa (raw, json)
Hash identifier: UAA/jnnOWm9CblSg8DViXxEYTy801hcC01yyaQzdFbs=
Subject key identifier: E6:7F:E3:0E:D3:5D:82:5E:9A:52:5F:AE:A5:C9:F7:89:09:11:67:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DA9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3DAAA60ABA311EF8146C968762E951A.roa
Signing time: Tue 26 Nov 2024 03:09:46 +0000
ROA not before: Tue 26 Nov 2024 03:09:42 +0000
ROA not after: Fri 26 Nov 2027 03:09:42 +0000
asID: 17561
IP address blocks: 156.252.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55965 (0xda9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 26 03:09:42 2024 GMT
Not After : Nov 26 03:09:42 2027 GMT
Subject: CN=67453bfa-a3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:ec:96:fc:21:e7:87:ef:7a:4b:18:19:8f:
9b:97:00:83:c9:52:ef:f9:28:74:b0:68:b7:5e:09:
23:fa:db:9d:7e:01:54:5d:9d:10:48:78:fb:a6:93:
95:10:c4:cc:28:48:81:7a:2e:f6:d8:ad:17:af:ea:
0d:31:49:2f:ae:fc:b8:1b:98:4b:09:23:69:2d:41:
65:1d:ca:c7:d8:e9:a7:42:84:ca:24:a3:49:36:49:
36:9f:9f:47:68:52:31:b3:12:46:3f:b4:cb:56:12:
34:c6:46:49:0a:41:cc:a7:2f:ad:bc:2f:b4:d8:0d:
27:83:b9:99:02:2e:70:85:73:a7:0f:06:1f:26:bf:
99:cc:bc:de:5d:92:b3:af:1a:a8:44:5f:b5:9c:c6:
f4:4d:9a:42:30:b1:27:b1:0d:80:76:ac:72:c5:96:
1e:a4:f0:64:a7:97:ef:08:5a:d8:08:c0:db:0a:6c:
42:05:46:30:63:f8:3e:e3:c4:cd:a9:be:95:a3:76:
a3:87:a8:27:2b:7f:57:3b:8e:05:84:12:f1:6f:ae:
0e:4e:02:6a:5f:f5:8d:fe:50:39:66:ab:85:19:8b:
d2:3c:6e:bb:a5:1d:e5:a8:f7:f7:df:53:92:cd:59:
a5:c3:0f:a8:1d:38:c8:75:18:d6:92:6d:c6:c2:60:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7F:E3:0E:D3:5D:82:5E:9A:52:5F:AE:A5:C9:F7:89:09:11:67:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3DAAA60ABA311EF8146C968762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.128.0/17
Signature Algorithm: sha256WithRSAEncryption
22:85:95:2c:36:d4:0e:25:32:86:b1:dd:7c:d4:1c:76:41:2c:
fb:e5:c0:df:b8:fd:fe:d3:b6:38:ec:b9:bd:02:22:f8:71:57:
32:66:3d:ef:d5:69:91:a4:b0:8c:b0:c7:f9:89:cc:40:79:20:
d7:5a:cd:cf:f2:ee:bb:ce:32:bb:aa:6c:29:a0:21:b1:df:03:
0e:b2:1a:4b:32:2a:e5:98:f5:9d:35:94:16:66:79:21:e9:c0:
b9:f6:1b:e7:27:d1:eb:04:53:95:fa:ef:12:87:11:6b:96:1a:
98:2c:d7:89:44:fb:6f:04:ef:20:11:c8:90:39:3b:0b:be:c0:
87:15:f3:a0:a3:de:86:b2:49:2e:45:82:f0:be:ea:fc:a8:3d:
24:ed:6f:da:bd:9e:8c:20:d6:ec:2c:48:24:34:ae:31:5b:13:
1c:3d:c6:a7:d1:e8:31:e4:12:e5:d7:03:28:46:61:0f:2f:00:
e9:a1:c1:8a:8a:c5:fb:fc:c2:bc:71:1d:62:65:2d:3b:17:76:
c1:cf:1c:ab:a0:cc:4c:90:5e:d0:ce:84:05:d9:63:3d:a0:4a:
e6:9f:d4:4e:1e:74:ca:9c:24:4c:c6:9c:bb:09:c8:b6:07:6f:
f9:c8:c1:f7:a3:d4:59:8c:62:7a:c3:28:d1:be:97:34:be:5a:
bf:9f:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:33 2025 by rpki-client