Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E662CC88CCDA11EFB3CFABBE762E951A.roa
File: E662CC88CCDA11EFB3CFABBE762E951A.roa (raw, json)
Hash identifier: uMnrP+s/OLiYkFr1McjZw9JmFIjLY2n4070887D1c/c=
Subject key identifier: EF:3C:F3:B5:D5:CF:E8:4C:98:DB:2A:EF:8B:5D:B0:0C:B9:57:9D:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E662CC88CCDA11EFB3CFABBE762E951A.roa
Signing time: Tue 07 Jan 2025 09:36:41 +0000
ROA not before: Tue 07 Jan 2025 09:36:37 +0000
ROA not after: Mon 13 Dec 2027 09:36:37 +0000
asID: 17561
IP address blocks: 156.233.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64341 (0xfb55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:36:37 2025 GMT
Not After : Dec 13 09:36:37 2027 GMT
Subject: CN=677cf5a9-f269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:66:b4:19:6b:ec:62:de:a5:d3:50:34:08:
a9:84:b7:b9:b9:c7:47:30:bd:91:85:66:5c:91:c2:
7b:24:0d:41:56:27:65:95:5e:73:cc:b5:eb:e1:17:
11:b8:5c:f3:b8:0a:2c:85:4b:d1:64:d2:bd:63:ec:
b5:c3:a7:15:57:71:14:b5:56:bc:ec:89:16:44:02:
c4:09:87:b0:c5:b4:9b:07:bd:fc:69:13:88:c6:91:
b3:40:8c:48:7e:ae:a6:b4:aa:cc:97:1f:b0:b2:7c:
65:7d:ff:4b:b4:76:29:51:9d:d2:9a:fe:ef:9b:43:
69:f7:c8:3c:b9:84:73:69:5e:05:b8:d0:8c:d2:a0:
04:40:2f:2c:eb:0d:4e:9a:65:fe:39:bb:a3:e6:f7:
0a:d4:d0:50:96:19:56:49:dc:d7:96:1c:1a:24:e8:
03:a6:9f:08:d6:e3:cd:27:6b:9d:44:5f:9d:cc:9e:
a9:18:bc:70:18:94:1f:ca:f7:38:59:2f:e2:0f:04:
54:af:ff:96:cb:72:a0:65:55:25:78:b3:f4:af:da:
15:52:73:ae:e6:a4:0f:e6:66:37:14:12:5d:82:71:
8f:de:80:37:6b:a1:95:68:b2:f5:06:42:99:68:eb:
e6:71:61:43:82:dd:32:cb:71:93:3f:52:b9:cc:04:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3C:F3:B5:D5:CF:E8:4C:98:DB:2A:EF:8B:5D:B0:0C:B9:57:9D:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E662CC88CCDA11EFB3CFABBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.199.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b0:66:76:26:67:ac:a1:af:68:76:3b:50:b6:0c:9f:50:e3:
ff:98:54:02:0a:68:22:e1:7a:da:d6:92:ff:0c:9e:36:c2:49:
61:08:64:75:2a:39:fa:6a:06:17:61:9c:8c:32:3f:fd:40:3a:
4a:1c:c2:ed:49:d8:7e:bb:c8:c0:1e:f3:b5:7a:80:bc:43:78:
b9:ac:6e:2f:1e:79:e5:cc:bc:83:24:a5:cf:14:bb:f3:66:74:
5d:d8:13:84:1b:df:87:cf:65:33:05:2b:10:be:4c:9c:f0:5e:
d1:d2:d9:83:db:4c:4c:df:06:09:42:18:90:49:8b:8b:bf:b8:
a7:c2:0d:fd:9f:f7:0f:e7:1b:e3:16:d5:73:ac:5c:50:8f:72:
1a:ab:d0:62:48:a3:32:37:94:90:09:c3:32:4b:ad:9c:78:22:
2f:8c:75:05:00:89:49:d0:bc:46:9f:e2:85:46:5c:48:67:74:
91:83:f3:ef:26:c0:1c:75:44:00:14:42:28:47:ff:25:5f:f5:
fc:2b:58:07:5c:e3:bb:12:f7:6a:b9:2e:b4:ba:ca:98:99:ed:
4a:c6:77:e9:ab:b2:5e:ee:b9:bc:46:83:fd:a4:e4:6d:7b:ef:
b4:b3:62:fe:54:42:91:94:c2:fd:19:e9:2a:ab:ae:b3:77:9c:
23:c7:88:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:12 2025 by rpki-client