Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6272FEECD6A11EF9B5A5D5A762E951A.roa
File: E6272FEECD6A11EF9B5A5D5A762E951A.roa (raw, json)
Hash identifier: 0B31mD6cdftTkq+ZTBADANxamyNZlZ2XG8BDzrg+ilw=
Subject key identifier: CC:D9:02:5A:B7:A7:44:10:31:5F:68:02:82:06:F0:E4:C3:37:F0:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6272FEECD6A11EF9B5A5D5A762E951A.roa
Signing time: Wed 08 Jan 2025 02:47:28 +0000
ROA not before: Wed 08 Jan 2025 02:47:25 +0000
ROA not after: Sat 13 Dec 2025 02:47:25 +0000
asID: 984
IP address blocks: 156.247.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65381 (0xff65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:47:25 2025 GMT
Not After : Dec 13 02:47:25 2025 GMT
Subject: CN=677de740-7ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:a9:0c:22:3c:52:3b:24:8b:47:5b:e7:d1:
82:21:e7:24:36:36:f6:e3:12:50:68:4e:6b:3d:c0:
3f:09:2e:ff:bf:ef:30:bb:41:b5:90:67:30:dd:61:
2b:f8:df:f2:f0:ad:3c:14:1c:03:d2:ba:c2:90:33:
4f:5e:e7:5a:f6:8d:00:bf:0d:7a:95:01:a7:45:18:
d3:04:57:11:a7:e6:2b:ef:1d:94:83:06:77:c5:8c:
d2:86:36:24:ea:5d:99:b7:86:b2:9b:e8:33:47:5b:
8b:07:21:c6:47:85:1d:33:0c:6d:5c:11:60:0c:c9:
79:4f:f8:24:5f:98:75:96:8a:30:87:e5:12:01:5d:
4f:fe:09:5b:17:c4:ce:bb:ec:96:2c:3c:42:ac:16:
1f:b3:82:e2:6c:c8:9e:5e:5d:e6:68:92:5e:d6:ac:
66:50:94:15:51:2d:8c:5b:a7:61:c8:25:5c:62:6d:
d6:15:0c:9d:1e:8d:3f:31:47:68:05:84:6c:7a:01:
56:f1:a9:2f:58:0f:65:4e:08:6e:e4:11:9e:88:f1:
26:50:4f:ec:e9:76:fe:6e:cb:9a:a4:9a:f9:85:af:
a1:aa:96:a4:0e:07:73:27:53:ba:e8:8b:d9:a4:d5:
17:2a:ae:c9:f4:09:0d:97:35:b5:df:a3:79:c4:cb:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:02:5A:B7:A7:44:10:31:5F:68:02:82:06:F0:E4:C3:37:F0:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6272FEECD6A11EF9B5A5D5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.127.0/24
Signature Algorithm: sha256WithRSAEncryption
58:41:13:67:b4:90:b0:3f:62:21:8d:df:bd:c4:a5:8d:94:44:
7f:a7:65:af:43:7e:6b:f8:21:1e:9d:32:b5:99:b5:1e:bc:c1:
8b:5a:84:29:d7:71:83:b8:94:d3:46:8b:3d:77:93:3a:ee:a3:
be:74:b1:2e:9b:09:3a:07:5e:f8:74:d9:01:9d:1d:ef:4a:42:
b2:f8:9e:60:b1:be:ae:d7:e2:d4:66:49:a8:e3:dc:2d:08:d2:
d7:4d:b3:e5:1f:a9:fc:2d:93:af:ef:4a:8a:df:92:3f:9a:05:
2e:6d:71:2a:09:5f:7b:9a:99:86:da:72:54:60:89:ab:bd:9b:
23:db:53:10:28:73:14:de:44:61:e5:14:bb:6f:3d:e5:4e:57:
29:12:4f:72:5c:d6:a2:bd:a9:18:f4:a3:91:3f:0d:1d:7f:3f:
11:ee:8c:f7:b7:26:23:28:df:c2:2a:77:27:66:c3:c3:98:b0:
f2:b0:2d:2d:45:c8:b6:b6:0d:af:21:4c:f2:01:fe:3c:07:c2:
c2:54:62:7c:ac:a7:23:ef:76:d7:c7:e0:14:a8:9a:f5:96:31:
56:e5:19:33:6a:4d:34:02:af:89:ff:c9:51:6f:4d:1c:4e:11:
16:8f:53:f9:af:26:2c:1e:20:45:1c:ac:07:07:09:eb:16:44:
03:35:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:41 2025 by rpki-client