Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2E9EE0D30111EF8D0E9C56762E951A.roa
File: EB2E9EE0D30111EF8D0E9C56762E951A.roa (raw, json)
Hash identifier: Z3zHHWnpgzBUwF30eON9u8DVnQU4CGu2XpmE4hrxZFQ=
Subject key identifier: A8:AB:6B:85:E9:39:AE:18:D8:FA:EF:DC:40:08:69:4B:7A:86:AA:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0107F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2E9EE0D30111EF8D0E9C56762E951A.roa
Signing time: Wed 15 Jan 2025 05:31:07 +0000
ROA not before: Wed 15 Jan 2025 05:31:03 +0000
ROA not after: Mon 03 Jan 2028 05:31:03 +0000
asID: 17561
IP address blocks: 156.254.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67571 (0x107f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 05:31:03 2025 GMT
Not After : Jan 3 05:31:03 2028 GMT
Subject: CN=6787481a-1beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:76:af:c9:e9:36:d5:42:91:d5:3a:f6:ae:
de:5d:ba:df:1d:1b:7b:ae:76:fa:07:06:28:d3:c2:
49:35:f9:97:f8:d1:77:71:c7:dd:eb:fe:43:80:d8:
56:bb:d2:92:d0:8e:38:87:e2:a6:19:4b:fc:af:c0:
45:9f:df:e5:90:16:5b:2f:f0:84:f9:4b:e2:40:50:
20:46:8b:24:0e:0b:b3:14:c4:96:c2:1b:a7:2f:52:
5e:f8:d5:11:6b:20:14:60:f3:e1:08:bb:01:e3:88:
be:b1:f7:81:05:be:9c:c5:f4:16:2e:77:ed:65:4f:
29:40:04:34:78:94:58:39:46:46:5a:9e:13:14:7a:
d5:78:c6:b5:e8:2f:34:28:a3:31:a3:b7:65:26:5e:
0d:7a:80:6b:0d:6e:7b:44:4c:cc:ff:4d:22:0b:1f:
89:ab:61:26:bb:88:08:a1:09:6d:34:2d:e5:b8:aa:
35:5e:a0:25:d3:84:4a:a6:f0:8e:21:b3:c4:c0:fa:
76:a0:06:0d:50:06:88:ae:91:de:a9:ac:92:91:11:
3d:12:3f:1b:46:57:46:22:10:88:bb:79:44:44:e6:
4f:50:9b:66:ca:65:05:ef:03:d3:5c:a8:0b:8b:f4:
f9:ac:05:8c:e8:55:fe:83:31:6c:63:92:d1:7f:43:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AB:6B:85:E9:39:AE:18:D8:FA:EF:DC:40:08:69:4B:7A:86:AA:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2E9EE0D30111EF8D0E9C56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:16:60:4b:1d:56:2c:ef:c0:fb:bd:d2:2c:ea:56:6f:b9:6c:
fa:36:04:09:64:ea:65:34:08:69:b9:82:eb:ad:bd:f6:94:6e:
64:32:4b:1d:28:0f:6c:ad:77:b1:ab:5c:6f:48:ec:70:53:87:
13:99:c0:b9:f9:c7:62:62:b3:27:1e:68:e7:ab:ce:6e:bb:75:
54:ad:61:07:9d:6a:d6:7c:14:c5:6c:64:9a:fc:2f:cd:90:96:
ca:72:2d:15:91:bb:50:c3:f9:51:2a:0a:08:19:8f:1e:b2:70:
6a:d6:fc:61:ca:56:41:e1:d3:1f:fa:9a:c6:ef:7f:f4:25:57:
dd:0b:54:b2:de:da:c8:06:e0:1c:d8:bd:fa:9d:40:0e:3c:ee:
af:77:6c:ca:0f:44:61:2b:01:fd:9b:ee:b7:be:82:4d:f8:a7:
18:b0:a4:ea:73:25:8a:23:86:e8:04:d7:d0:9d:c3:4a:de:51:
37:49:cc:90:47:98:95:9d:a2:53:86:60:57:14:41:0f:7d:d9:
52:82:7a:2c:f8:c4:34:dc:38:eb:5d:a7:ed:3f:ac:17:1d:9a:
39:2c:ed:e6:02:24:fa:71:da:01:2c:67:84:8a:3b:7a:96:f5:
ff:45:64:c3:5f:3e:a9:ff:ef:78:69:7a:c5:89:d0:80:36:91:
ea:9c:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:58 2025 by rpki-client