Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7CC66F4C98F11EF9C3EE55E762E951A.roa
File: E7CC66F4C98F11EF9C3EE55E762E951A.roa (raw, json)
Hash identifier: /89L04bqEpcIyCAIy1/aDHAIeB8duaH6H6YPTg5v/54=
Subject key identifier: 85:5C:3B:DF:30:A4:50:12:05:F5:70:FE:80:C4:3B:35:DE:80:16:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7CC66F4C98F11EF9C3EE55E762E951A.roa
Signing time: Fri 03 Jan 2025 05:02:18 +0000
ROA not before: Fri 03 Jan 2025 05:02:14 +0000
ROA not after: Sat 13 Dec 2025 05:02:14 +0000
asID: 984
IP address blocks: 156.233.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62937 (0xf5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 05:02:14 2025 GMT
Not After : Dec 13 05:02:14 2025 GMT
Subject: CN=67776f5a-7cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:da:dc:e6:ea:87:45:ea:12:12:ff:f3:10:
26:75:6c:f7:4c:aa:3e:15:f5:e3:aa:87:c0:19:f5:
30:e0:fe:69:12:00:15:0d:fc:90:bd:ec:cb:43:e8:
3e:cd:96:7e:5b:da:96:f7:9a:b1:d3:38:59:bd:52:
28:40:fd:72:93:4f:51:2f:17:6c:33:0b:58:58:4d:
f8:ed:1f:f8:4d:ab:3a:a5:b3:28:d5:02:c4:39:3c:
61:d8:bf:aa:8f:7f:ac:2b:89:de:57:55:5a:54:38:
31:94:e6:a8:3b:03:88:b1:e7:a0:b9:ba:9f:cd:0f:
7b:dc:e5:af:2a:77:96:43:34:53:15:a3:d5:f6:42:
08:80:ad:c8:df:09:ca:ee:55:f2:83:0c:52:ce:54:
f1:6b:c6:5d:a7:2c:40:87:ce:b0:13:18:4a:c1:51:
c2:37:d6:ed:b4:d1:cd:50:92:de:67:dd:25:4c:ed:
f7:ab:db:3e:fe:d8:d8:80:fb:26:13:59:c3:ae:20:
16:e3:e9:e9:c7:44:c5:f6:cb:63:ec:d1:53:42:15:
e0:91:cd:71:e6:44:86:45:bb:ab:f6:ef:c6:54:aa:
26:12:50:51:6d:51:23:4c:76:ce:bd:a4:24:fb:41:
b4:44:b2:25:a6:7d:fb:c3:3d:fe:c1:6e:00:b8:87:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5C:3B:DF:30:A4:50:12:05:F5:70:FE:80:C4:3B:35:DE:80:16:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7CC66F4C98F11EF9C3EE55E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:83:7e:e5:b7:0e:67:8d:0c:90:9a:71:fb:21:85:39:e4:47:
22:88:76:05:2b:93:af:17:cf:b8:e1:0f:b3:2a:d6:c4:b6:b5:
1d:0a:3d:95:03:a6:f9:47:90:3a:db:e7:37:08:f2:fb:bd:54:
bd:0d:49:4c:01:c0:77:4f:17:f5:52:cf:6a:7a:dc:66:45:91:
60:b6:99:a6:bd:02:f4:f8:20:d5:d2:c4:b3:8c:14:ab:85:08:
28:3f:b1:d5:0f:ef:f8:09:e7:28:ec:5b:52:dd:bb:5b:9c:90:
a8:a0:b0:ad:b2:89:b2:ec:2e:5c:51:35:a1:1a:ac:c5:04:a2:
24:b4:53:7a:de:5a:6a:10:55:ec:2b:be:82:ab:2f:42:7f:12:
82:cd:f0:10:bf:4e:9d:f6:20:1c:0d:3d:a4:41:07:39:1c:a5:
41:36:40:e7:04:52:98:ba:47:d2:db:50:6d:47:55:93:15:f5:
21:75:2c:53:c8:d0:d3:ed:c2:77:9d:e5:1e:36:5e:11:60:eb:
f2:b7:ba:01:f1:d6:14:44:27:b8:fd:7a:21:f9:83:51:b8:5a:
80:46:a8:95:16:fc:09:65:0e:f1:52:65:c9:86:d7:36:10:23:
f2:0f:6c:2e:c7:80:08:14:e8:77:60:32:13:5b:a9:ff:15:c5:
9e:84:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:19 2025 by rpki-client