Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6E652CACD4C11EFAEBAF28D762E951A.roa
File: E6E652CACD4C11EFAEBAF28D762E951A.roa (raw, json)
Hash identifier: be1brwaEIpH5+VAMLskS9kOGCvpdpYCAL4LG7ocgWis=
Subject key identifier: 4E:9A:C0:30:78:09:16:02:7A:9C:86:3F:D5:38:0D:B3:AE:6F:B2:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FECD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6E652CACD4C11EFAEBAF28D762E951A.roa
Signing time: Tue 07 Jan 2025 23:12:45 +0000
ROA not before: Tue 07 Jan 2025 23:12:41 +0000
ROA not after: Mon 13 Dec 2027 23:12:41 +0000
asID: 17561
IP address blocks: 156.247.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65229 (0xfecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 23:12:41 2025 GMT
Not After : Dec 13 23:12:41 2027 GMT
Subject: CN=677db4ed-8b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:27:c8:b3:8a:77:61:4b:8a:71:e6:92:42:
71:5a:9f:84:88:c3:2e:27:46:89:84:a1:33:cc:cd:
28:0a:2a:7f:a1:ac:cf:6f:15:24:a5:41:db:b5:ec:
77:79:81:06:df:db:89:12:4e:20:b5:0d:d1:26:56:
e3:b1:5e:8c:56:0c:87:61:0c:f9:e6:be:8a:e7:cd:
15:c1:5c:ca:3d:0f:5a:c5:04:55:c4:f7:73:0c:6d:
3f:4f:ab:25:81:2c:af:77:4a:74:28:f2:3d:94:78:
26:b0:9e:a8:cc:30:9e:12:e9:93:c4:c7:fb:7c:e0:
29:82:d6:d8:3f:7c:1a:18:b9:a7:1e:cb:43:30:a9:
aa:35:fc:39:5e:01:1f:b0:f8:18:38:c3:94:24:8a:
6a:3b:b2:7f:2f:6a:ea:c3:8f:fb:b2:11:70:26:c5:
d2:4d:c6:f3:bc:9a:45:91:ee:6d:83:f7:48:1a:d5:
6b:19:02:f9:05:ce:d1:00:28:13:cd:90:79:c9:d0:
99:f4:e8:11:7a:70:24:c1:68:12:de:76:5e:cd:b4:
f2:67:01:e2:22:1e:38:6f:1c:f7:87:a2:c1:30:65:
5c:8b:c0:84:2d:65:cf:3c:07:ae:3b:58:fa:aa:32:
3a:98:c2:24:37:3f:ae:1a:b5:fa:71:13:0b:db:0a:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9A:C0:30:78:09:16:02:7A:9C:86:3F:D5:38:0D:B3:AE:6F:B2:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6E652CACD4C11EFAEBAF28D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:cf:68:7d:c6:77:2f:01:6c:53:5c:58:0d:4b:82:b6:ff:d0:
ea:9b:cb:d5:ad:00:f6:f0:37:00:05:ed:7b:9e:4a:67:29:80:
82:c7:05:b7:f2:c8:1b:cd:27:e3:2a:70:54:10:da:c4:a5:f1:
35:64:ec:83:8d:90:e2:73:de:ed:f4:2f:e2:fe:a5:cd:53:cf:
1b:47:83:0f:7d:bd:5a:62:12:c6:60:78:b0:0b:f4:8e:df:f6:
49:84:ba:4c:76:ff:08:cb:8d:49:8f:8b:1f:9d:65:b4:15:07:
ae:e0:1a:a9:83:a9:4f:aa:be:ae:6f:11:56:21:bf:d4:70:23:
06:4f:9f:16:d9:33:0f:e5:c7:4d:04:c2:2d:72:f9:38:b0:68:
03:8e:75:cc:f5:bc:d8:27:52:e7:ad:ee:2f:02:cf:7e:db:9f:
79:1d:62:04:4e:fa:d2:9a:e5:44:e7:f8:8c:57:e8:c9:78:1f:
a5:85:f3:83:f1:d7:27:62:96:fb:b3:6f:5a:7a:55:91:7e:1a:
47:06:0b:db:34:47:7f:fa:b0:5f:19:52:d8:4c:31:67:90:53:
28:9b:57:12:76:52:19:f1:f9:83:bf:6a:c0:56:cd:6e:f1:11:
be:5b:c2:dd:fd:6c:a2:fa:3d:60:3d:98:19:44:4b:4d:04:38:
0b:21:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:59 2025 by rpki-client