Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E65CDAAACCFB11EF80D90D90762E951A.roa
File: E65CDAAACCFB11EF80D90D90762E951A.roa (raw, json)
Hash identifier: GUubx6pPpoIqVmWRM9hOTzrvIxCEu96ZuEKE/9eclNs=
Subject key identifier: 57:9C:FA:D2:9B:B0:F6:D4:FB:12:A6:E1:09:8F:94:B6:E8:CC:66:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E65CDAAACCFB11EF80D90D90762E951A.roa
Signing time: Tue 07 Jan 2025 13:32:54 +0000
ROA not before: Tue 07 Jan 2025 13:32:51 +0000
ROA not after: Sat 13 Dec 2025 13:32:51 +0000
asID: 984
IP address blocks: 156.238.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64583 (0xfc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 13:32:51 2025 GMT
Not After : Dec 13 13:32:51 2025 GMT
Subject: CN=677d2d06-72b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:19:5b:1b:be:dc:8f:53:04:08:f9:ca:0e:
e4:47:f2:b1:6f:ee:4c:4a:47:79:17:24:cd:5c:56:
b8:0b:6b:23:17:ba:66:91:70:2d:6b:db:6e:6f:6a:
c6:8a:38:f1:de:3a:6a:16:c3:a5:53:75:f1:a6:77:
c9:6e:38:bd:a7:2f:de:1f:44:69:e9:9d:ca:ab:63:
c1:f6:f3:e1:14:d1:0e:49:24:9b:85:3f:59:21:78:
60:40:b8:8a:75:a0:72:a8:42:fa:3c:bf:69:2b:70:
3a:3a:b3:bd:11:6f:f5:b2:ff:8e:4c:f5:f1:1f:a6:
87:22:e6:56:b7:a3:6e:52:40:a0:fa:c1:df:89:41:
3b:4f:36:6b:0e:68:13:f4:b7:f1:cf:31:92:8f:6b:
f5:1a:c8:fb:2e:f1:2b:12:14:41:1b:f9:e5:de:90:
81:f8:9a:b7:3a:9c:ea:7c:5b:b5:9f:10:dd:bb:ef:
68:a9:ea:ee:88:fa:f7:b0:8a:45:f7:4d:57:3e:35:
b1:20:bf:1a:ca:d3:5f:f2:a6:ee:01:ee:94:99:ed:
bd:9a:34:19:62:b4:03:22:4f:ab:c6:27:36:36:84:
95:ab:6e:98:94:79:91:32:06:73:90:fc:0e:0e:67:
39:43:e8:57:96:cf:f8:e9:ac:fc:26:1c:ae:e1:14:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9C:FA:D2:9B:B0:F6:D4:FB:12:A6:E1:09:8F:94:B6:E8:CC:66:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E65CDAAACCFB11EF80D90D90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.88.0/24
Signature Algorithm: sha256WithRSAEncryption
18:bf:67:f4:c6:f0:d1:f9:1f:d0:8f:e7:0c:e7:fb:a3:43:de:
66:1c:18:38:03:dc:1a:5b:5c:eb:7f:cd:d8:59:3f:6d:88:1a:
d1:ff:b1:4d:90:a3:c2:3e:24:2c:e2:e2:de:46:9c:18:e3:f2:
0d:b0:24:b3:c3:9e:dc:1c:18:aa:99:86:73:5e:7b:aa:21:7d:
31:96:3f:2b:e9:ae:bb:a5:94:8a:50:af:a2:cc:ab:07:ba:e5:
f5:5c:4a:16:75:5f:98:17:ce:87:f1:7e:de:63:87:29:f9:35:
0c:9c:52:a2:f4:22:95:65:02:62:78:8c:b0:6f:38:bb:2a:09:
d9:60:88:ed:1c:11:f5:c2:28:6f:b7:84:58:8d:5f:2a:44:29:
fc:c0:ea:00:b7:c3:42:bf:59:75:f1:27:19:34:9c:da:15:3f:
c2:3e:22:48:ff:28:15:a4:6c:de:a2:25:2d:8b:69:55:89:4b:
06:50:96:54:93:fe:05:89:9d:f2:fa:ee:05:65:ac:86:39:d9:
67:2a:6a:54:66:98:29:35:0f:3a:71:8d:9e:fe:8d:1b:79:67:
5f:17:c6:00:2e:80:e0:fb:7c:31:24:d6:05:fb:0e:70:1a:c2:
dd:c4:98:f9:09:05:e5:30:65:9d:b1:da:0e:4f:d2:f7:11:48:
8f:01:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:27 2025 by rpki-client