Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAB26390CE3B11EFB1832798762E951A.roa
File: EAB26390CE3B11EFB1832798762E951A.roa (raw, json)
Hash identifier: 3eqdpVVxiXbd5DhUK6i7EG7+137T1d1qcYy+nhj6nHc=
Subject key identifier: F3:24:1D:9B:E5:1C:5B:E5:50:12:A1:63:95:2E:B6:B1:72:58:EE:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01024B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAB26390CE3B11EFB1832798762E951A.roa
Signing time: Thu 09 Jan 2025 03:43:41 +0000
ROA not before: Thu 09 Jan 2025 03:43:37 +0000
ROA not after: Fri 09 Jan 2026 03:43:37 +0000
asID: 17561
IP address blocks: 156.247.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66123 (0x1024b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 03:43:37 2025 GMT
Not After : Jan 9 03:43:37 2026 GMT
Subject: CN=677f45ed-553b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:b9:33:f5:85:a8:1a:4f:ad:6f:65:c2:46:
9c:b8:05:00:29:39:b9:0d:77:de:e8:84:a8:b7:9f:
32:3a:fd:4f:46:0f:ba:09:a6:a6:f2:cb:76:0f:7a:
15:4b:0c:e6:df:20:c7:66:ee:40:29:ee:c0:34:f1:
30:65:4f:e8:2e:62:0f:3a:8f:9c:b6:d1:b7:08:66:
fe:6b:ea:91:d0:d9:f4:bf:01:48:bb:a2:61:7e:c3:
e3:da:88:19:a9:0d:a2:c8:d1:79:e4:ba:17:19:1c:
09:ee:60:86:2e:9a:2b:db:22:50:80:39:f4:dc:30:
63:1d:4f:79:01:cb:e3:bf:b2:57:f6:d7:ee:bb:e0:
c9:38:b4:7a:fb:08:5f:31:12:ac:8e:19:fd:14:d1:
1f:7c:5d:3b:fc:1f:a7:79:db:50:9b:d9:8a:e5:fa:
56:54:51:bf:bd:40:91:dc:56:b0:63:e1:d5:66:c4:
07:58:9e:4f:5f:d1:b1:d4:d2:96:2c:7b:13:5d:b5:
9c:43:a7:ba:d6:fc:73:74:01:75:ad:82:73:6c:6e:
1a:80:11:49:6e:a2:6a:8a:a8:9e:a1:06:e4:a9:53:
dd:b4:ac:28:5c:ae:a0:6f:1b:57:1f:6d:54:81:52:
d7:21:57:d1:41:9f:41:7a:8d:8c:e6:4f:4b:0c:85:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:24:1D:9B:E5:1C:5B:E5:50:12:A1:63:95:2E:B6:B1:72:58:EE:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAB26390CE3B11EFB1832798762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.57.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cc:ea:d0:2b:fe:ba:d5:9e:e4:96:22:47:40:d7:29:c1:9e:
6b:cd:b5:e8:9d:e6:3e:10:6b:75:d1:09:45:9e:d1:92:8f:85:
0c:84:64:86:38:12:c5:cf:f3:33:1a:96:7b:16:2a:ad:a4:32:
fd:27:b2:d5:27:81:53:4b:13:18:63:e0:47:9d:39:b1:9e:eb:
a4:db:b2:d8:c4:27:9d:b9:99:59:52:3f:95:0a:b3:75:f3:fc:
6b:cd:62:b9:0b:24:63:b7:4f:f0:bd:f1:16:4f:fa:9f:37:06:
88:09:aa:96:82:75:d8:ff:b2:59:70:ca:19:6b:7d:00:66:bc:
cd:08:ef:d6:d4:96:67:52:bf:e6:f8:51:4c:a4:25:4f:cf:f5:
85:ac:cd:ce:4b:49:b7:76:60:82:eb:f7:c5:3f:d4:af:2b:57:
97:e6:ff:b3:d8:27:f2:c6:17:b0:15:7b:01:2e:9c:30:6e:36:
f8:a0:0b:e8:9a:4f:cb:3c:35:2a:d4:a7:12:d7:7d:f1:9d:87:
c6:f1:28:d9:21:a1:18:23:23:d9:79:54:8c:25:78:63:5f:c7:
06:09:1f:83:c9:4e:d6:df:93:13:d3:15:38:90:8f:c9:62:71:
6a:34:2a:ce:33:ea:b8:db:bb:cf:e6:c4:ee:b5:43:13:50:e4:
99:be:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:17 2025 by rpki-client