Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED35BBE4CE4511EF8F762C58762E951A.roa
File: ED35BBE4CE4511EF8F762C58762E951A.roa (raw, json)
Hash identifier: F1U8RXPxwJoC3O/tfxhTj/JXhXy8O0Ex28RNOKr7FnM=
Subject key identifier: 39:19:27:B6:B2:D6:BF:0D:F8:EF:D8:13:C3:E3:FB:4E:E0:60:1E:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010295
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED35BBE4CE4511EF8F762C58762E951A.roa
Signing time: Thu 09 Jan 2025 04:55:20 +0000
ROA not before: Thu 09 Jan 2025 04:55:16 +0000
ROA not after: Fri 09 Jan 2026 04:55:16 +0000
asID: 17561
IP address blocks: 156.245.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66197 (0x10295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 04:55:16 2025 GMT
Not After : Jan 9 04:55:16 2026 GMT
Subject: CN=677f56b8-1aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:b8:43:84:c5:3b:2f:5e:59:03:b1:ca:32:
5d:41:81:0e:16:da:bc:48:bd:0b:d2:ff:2b:78:fb:
92:2f:a1:17:b9:7b:e5:11:ab:78:85:cf:46:f3:b0:
f9:67:18:c1:17:d8:8b:d3:07:e3:c3:5a:31:4a:7c:
7a:8f:ad:62:cd:c9:47:af:7b:4b:5f:aa:27:e2:95:
fd:21:ca:c1:24:a0:76:ce:c0:95:f5:7b:55:50:ca:
0d:ba:6b:8c:c8:df:8c:1d:98:f1:5b:9f:43:1f:67:
6a:20:d5:29:f7:d4:35:34:4d:bd:ad:8d:97:8a:27:
e4:d2:59:ca:68:5a:88:9f:cd:c5:5b:c0:b4:62:71:
7b:63:e8:49:67:79:f6:08:89:2d:66:14:e1:1d:09:
23:ae:12:7d:49:23:ab:74:38:95:5d:1c:b8:e7:33:
96:7b:c9:5e:63:0f:b5:af:7b:e5:a6:e8:09:98:0e:
2b:e1:14:2c:c2:3e:cf:c0:76:0a:b4:50:9d:03:c1:
20:20:8f:f2:6e:ca:de:3e:3d:a8:c4:52:a6:18:89:
d2:16:c7:2f:62:56:09:fc:5c:8a:84:97:71:cd:bc:
05:93:77:3a:86:cc:5e:84:f1:2e:a1:f3:c8:79:89:
3b:08:a6:c5:21:26:20:7e:c1:43:88:6e:46:8a:af:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:19:27:B6:B2:D6:BF:0D:F8:EF:D8:13:C3:E3:FB:4E:E0:60:1E:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED35BBE4CE4511EF8F762C58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.126.0/24
Signature Algorithm: sha256WithRSAEncryption
64:06:77:56:3c:fb:70:0c:68:28:a5:93:58:b2:5d:53:a0:12:
c1:f5:34:fd:e5:44:3e:d4:35:32:07:0d:0d:1b:9e:c6:8f:90:
eb:80:9a:6b:7f:a6:35:8a:d9:01:f5:5f:f8:53:ab:e4:56:b3:
b9:3b:bd:e4:97:f5:39:bc:ee:65:a1:fc:a5:b4:0e:d1:46:89:
77:92:4d:2d:ae:05:e4:36:7b:c6:52:b5:bf:a6:43:90:83:2e:
6c:68:95:99:56:49:dd:09:9f:70:e8:f6:c0:9f:45:b4:5a:7d:
3b:38:87:b6:37:49:7e:44:52:c4:4f:c6:2b:e7:d8:3c:96:03:
14:af:ec:a0:8a:1f:fd:64:a5:33:0b:c7:3c:62:44:23:b1:f9:
5a:02:7a:c8:d6:ea:3f:48:60:6b:72:4b:20:43:49:f8:6d:94:
d8:00:e4:b0:5f:0c:f3:f8:78:58:ac:6f:bd:08:e4:e8:0f:f9:
6c:5d:c8:b4:3d:94:67:ee:19:43:a7:1d:16:ed:f4:22:6c:57:
9d:bb:db:60:f3:f6:09:2b:56:da:0b:4c:a9:26:34:30:3f:dd:
f3:45:1f:66:43:10:52:9d:76:35:63:a2:08:59:e3:b4:b6:4b:
8b:3d:ad:97:07:62:ba:84:8b:ed:cc:c7:90:69:33:85:51:07:
55:f7:f4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:37 2025 by rpki-client