Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E99AA030C98111EF899CDF85762E951A.roa
File: E99AA030C98111EF899CDF85762E951A.roa (raw, json)
Hash identifier: X2JRnF+zUNaM7RRTuZBVLeG7/kAiA85qZP4VgvFpZnM=
Subject key identifier: FA:C2:EB:28:76:54:06:E0:09:A3:0A:25:15:54:AE:34:C8:A3:F9:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F557
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E99AA030C98111EF899CDF85762E951A.roa
Signing time: Fri 03 Jan 2025 03:22:08 +0000
ROA not before: Fri 03 Jan 2025 03:22:04 +0000
ROA not after: Sat 13 Dec 2025 03:22:04 +0000
asID: 984
IP address blocks: 156.230.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62807 (0xf557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 03:22:04 2025 GMT
Not After : Dec 13 03:22:04 2025 GMT
Subject: CN=677757e0-3ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e4:88:9d:fb:eb:21:a4:93:19:28:a3:e1:8d:
6f:58:6a:14:60:de:47:2e:4d:ac:e1:aa:68:d4:7e:
13:a1:9a:8a:d3:03:65:13:ce:20:b1:02:c1:0a:27:
49:c3:5e:4f:b8:da:eb:96:0a:2e:4a:fc:25:6c:63:
b3:b6:81:85:63:96:80:58:1d:bf:84:1c:0e:88:93:
0e:ff:32:a1:19:b2:e6:ad:c6:e0:26:71:80:57:cb:
40:c0:94:b7:8c:cb:d3:0d:39:61:1e:37:4d:6c:be:
01:eb:59:9a:f1:ce:ed:b9:58:16:ad:fd:52:ac:e4:
3f:cc:07:a3:be:1c:ba:0d:a7:42:d1:11:82:4c:50:
7e:d1:84:01:8a:2a:35:f0:8d:71:a0:e3:e6:a1:e3:
10:c4:d7:68:eb:43:5c:c7:28:3c:3a:cc:9f:a0:54:
2d:b8:86:bf:2b:41:17:b8:bb:44:3a:34:b4:aa:86:
cf:b7:bb:5a:66:75:58:94:57:3e:cd:b9:d4:a8:ae:
f3:40:bd:8b:8f:b1:05:92:47:91:f2:86:6e:0a:18:
cc:d4:18:7b:f6:e0:57:20:4e:a0:cf:9c:04:05:74:
d6:44:ca:91:41:26:8f:08:51:1a:05:a2:c8:5e:7e:
d2:e9:2e:13:5e:49:37:36:a2:5f:ae:48:19:d5:3f:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C2:EB:28:76:54:06:E0:09:A3:0A:25:15:54:AE:34:C8:A3:F9:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E99AA030C98111EF899CDF85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e5:67:e3:38:ed:4d:0a:bd:27:ae:39:43:34:62:cd:6f:bc:
54:d9:e1:af:82:00:80:59:66:8e:5c:8e:29:4d:db:2c:13:a9:
5e:b2:43:db:f5:15:2d:14:59:76:f4:73:d9:66:9a:e0:31:7a:
9d:20:18:18:84:0a:c6:c2:f0:c5:60:bc:29:42:1a:76:59:66:
38:ab:76:63:32:1e:f5:13:6d:dc:fd:50:49:98:74:2a:2b:99:
e6:c5:d7:87:a5:37:d9:12:76:2a:68:5f:d5:20:f9:18:12:b1:
07:ae:e5:53:34:5c:14:57:84:b1:1f:e3:63:6e:1c:97:df:31:
e8:cd:c6:ce:d6:93:80:ae:e4:b7:8a:da:17:2e:eb:1f:8f:6f:
9f:69:27:49:74:fa:a5:fb:6a:c3:08:f3:85:05:2c:8f:f5:83:
a1:2b:60:a1:dc:18:91:6b:68:78:ac:26:a7:f1:33:43:da:89:
e6:83:9e:4b:3b:49:18:5f:91:4f:78:1e:64:45:ed:36:cd:e1:
f0:a2:a9:d1:42:7a:ee:a3:07:35:b3:89:2d:73:bd:da:1a:ca:
3c:d9:82:a5:88:3a:bd:d9:3d:1c:b5:42:9b:88:2d:c2:de:db:
6f:6b:7e:09:d3:1c:56:9a:60:31:39:7f:36:84:60:ee:ae:b1:
5f:4a:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:33 2025 by rpki-client