Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7ED5A24CD8811EFBDA1409D762E951A.roa
File: E7ED5A24CD8811EFBDA1409D762E951A.roa (raw, json)
Hash identifier: 6eECxDj5wog1UL950CuveVbBe4oyldo709DwvJyq0gE=
Subject key identifier: 48:21:77:38:45:69:51:D7:98:82:D1:11:FA:3A:FA:70:97:76:BC:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010041
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7ED5A24CD8811EFBDA1409D762E951A.roa
Signing time: Wed 08 Jan 2025 06:22:16 +0000
ROA not before: Wed 08 Jan 2025 06:22:13 +0000
ROA not after: Mon 13 Dec 2027 06:22:13 +0000
asID: 17561
IP address blocks: 156.252.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65601 (0x10041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 06:22:13 2025 GMT
Not After : Dec 13 06:22:13 2027 GMT
Subject: CN=677e1998-f7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:e0:8f:a1:bd:50:5e:f5:ec:b7:ef:7e:7b:
0c:9b:03:24:32:02:4f:24:48:35:c5:c7:05:33:0b:
47:8a:b2:a6:7f:63:57:77:a6:a7:ed:c0:77:b6:2b:
02:ee:95:d5:1e:ff:33:a1:2d:c0:06:ec:92:03:a3:
46:b5:e7:17:ae:8c:a7:74:51:e0:bb:e2:20:53:41:
ba:b8:c1:9c:b8:5a:58:69:b8:95:3d:9d:fa:50:8c:
91:30:f7:26:7f:66:7c:41:0a:71:8a:23:4d:cc:79:
79:1a:27:3b:37:9e:cd:ac:3f:a6:7d:61:f8:58:a3:
e7:5d:5c:5b:16:17:05:d3:02:b0:92:4a:9d:74:d6:
bb:36:fe:e2:7a:ff:79:7d:99:2d:cf:72:70:79:f8:
eb:ba:e5:f4:d8:a7:2f:ec:b9:18:d3:15:6d:0b:79:
b7:c1:d2:ae:22:fa:0e:25:ca:1b:cb:42:78:84:b2:
cc:46:68:56:57:9a:97:a5:93:78:05:32:07:be:9f:
52:a5:bb:6c:6b:7e:2e:05:38:0f:14:25:34:eb:08:
89:8b:53:4e:01:da:c1:7d:a4:de:3b:29:71:6a:63:
2b:a6:ae:7e:c8:38:72:de:e8:28:df:3d:f8:d5:78:
da:03:d7:3b:49:2e:20:98:26:a5:1e:7d:e8:7b:96:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:77:38:45:69:51:D7:98:82:D1:11:FA:3A:FA:70:97:76:BC:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7ED5A24CD8811EFBDA1409D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.47.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f6:dc:68:32:bb:06:8b:19:54:0a:82:49:36:10:33:ce:53:
30:77:34:db:41:c0:20:cc:20:d7:1a:fd:b8:d2:20:b6:e3:c5:
1b:f4:68:2d:a3:e1:b8:56:6c:ac:48:35:8d:b3:ea:08:74:01:
f3:c5:59:84:2b:f3:1b:a3:6a:a5:b2:68:e8:2e:b0:74:a9:f6:
e5:5a:0a:25:56:98:96:55:79:4a:91:3f:90:6d:ad:e2:0e:2f:
bb:67:dd:00:03:42:e5:01:0d:1c:0a:8b:90:8c:fb:3f:97:37:
76:8e:9d:8f:fe:66:c0:ed:7d:ab:dc:5f:df:95:7d:af:3d:04:
45:af:41:e3:e9:4a:0a:e3:b2:be:ec:6b:a8:d7:81:6b:14:35:
26:1c:58:89:f3:77:c4:3c:fb:23:47:c7:b5:3d:55:3a:4f:e3:
08:a3:bf:0d:e5:11:1a:11:18:47:cd:90:64:f1:2c:f5:8d:63:
d7:ea:dc:9c:d5:a5:45:2a:43:4e:ad:6d:51:ad:96:77:58:56:
e6:87:6e:11:12:a6:b6:53:23:ce:69:06:e1:55:28:b2:ef:8f:
bc:ab:26:be:29:9b:31:b8:1f:d7:58:42:1b:a5:f1:cc:3a:7e:
fe:58:09:df:2f:ff:9a:4b:39:c5:1d:bd:a9:4b:4c:66:73:b9:
30:e1:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:23 2025 by rpki-client