Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E51CFB8ACD7711EFB0DD14B3762E951A.roa
File: E51CFB8ACD7711EFB0DD14B3762E951A.roa (raw, json)
Hash identifier: UYGZsu9+2cew98udUEdH+GzKhKyKxXGsMhVd8Is3rZI=
Subject key identifier: 1B:4E:22:06:AF:A6:15:C9:75:2F:42:4B:35:5E:EC:BB:A5:3E:41:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E51CFB8ACD7711EFB0DD14B3762E951A.roa
Signing time: Wed 08 Jan 2025 04:20:30 +0000
ROA not before: Wed 08 Jan 2025 04:20:26 +0000
ROA not after: Mon 13 Dec 2027 04:20:26 +0000
asID: 17561
IP address blocks: 156.250.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65471 (0xffbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 04:20:26 2025 GMT
Not After : Dec 13 04:20:26 2027 GMT
Subject: CN=677dfd0e-0af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:98:3c:40:12:7f:01:f5:65:74:84:0c:19:
cf:6d:1b:c8:be:1d:e9:32:0f:34:f6:a9:5b:75:01:
70:53:c0:74:ed:b6:a3:2e:52:14:b2:40:16:60:7b:
d8:a3:fd:e8:c3:09:c7:32:63:8c:f4:45:71:03:2e:
5e:6e:f6:3f:32:63:4a:7c:c5:7d:3e:1f:2c:ce:77:
92:09:1d:44:2e:82:49:01:c6:ef:46:30:9e:68:69:
db:ba:29:e5:36:9f:50:26:57:c1:0e:c0:49:81:82:
14:1d:86:b3:93:23:b1:56:35:3d:46:89:c9:bf:f3:
bd:81:a7:46:e3:13:a8:62:85:b5:c2:d7:8d:49:8e:
84:bb:e1:32:86:0a:c5:d6:25:c3:67:41:82:65:a3:
60:42:be:d0:3b:1c:a7:85:b2:c5:28:11:71:24:01:
1b:6d:8a:6f:e0:42:6d:49:9d:7a:cb:22:a8:58:32:
8a:84:96:4c:60:ce:9e:2c:f1:02:40:a0:61:60:e8:
68:90:71:fc:06:8f:63:59:05:8a:68:71:0d:c3:ba:
93:93:32:8f:3b:ae:f6:4b:8f:83:49:c4:41:1d:41:
b1:e4:aa:20:7a:e2:13:de:3f:e5:91:75:64:2e:78:
3b:d5:c0:3d:5e:0e:74:0e:d4:47:16:21:bf:34:9b:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:22:06:AF:A6:15:C9:75:2F:42:4B:35:5E:EC:BB:A5:3E:41:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E51CFB8ACD7711EFB0DD14B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.36.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:83:67:85:9f:29:e0:3f:ca:98:cc:f2:31:f7:58:0f:43:f8:
97:7b:aa:bc:f6:48:68:f8:b1:3b:be:37:cf:61:42:fc:c9:7b:
cd:12:16:37:cc:7f:6b:9a:8c:f1:29:99:cb:d2:96:a1:4f:71:
57:2e:5e:08:98:33:32:00:82:a4:ce:c4:cb:d5:40:82:4b:00:
67:cc:f2:8c:c1:12:c9:4b:06:73:46:b5:52:f2:40:82:2b:a9:
42:32:25:69:09:3b:c4:40:fb:a4:09:d5:15:21:71:bb:71:c2:
3b:be:10:64:e6:2b:6f:07:7f:f4:e6:3c:e1:9d:ca:7c:03:71:
d8:f1:05:70:47:d2:b3:cc:27:df:2d:f8:57:94:e2:e8:2b:63:
23:03:07:c6:36:48:29:d4:f4:0c:91:75:5c:e5:c7:c5:b1:48:
37:79:f6:d5:af:75:92:d2:96:ce:e9:24:44:8c:31:76:4c:2d:
57:7b:85:1b:4e:5f:36:bc:eb:f7:34:3a:50:9a:11:ed:be:00:
bd:23:d0:53:73:50:6d:6e:b2:89:3c:60:be:cc:0c:b6:80:1d:
cc:34:69:07:9c:43:d0:83:c7:be:26:fc:77:ca:e8:fc:a6:78:
51:14:37:02:e0:b5:08:d9:f0:66:b2:80:81:e3:ca:19:2e:98:
92:46:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:56 2025 by rpki-client