Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDC18BFAC98C11EF9FBA5B4D762E951A.roa
File: EDC18BFAC98C11EF9FBA5B4D762E951A.roa (raw, json)
Hash identifier: NTUwhnYujijXZ0xXf5CfFbi3X6vHMFcvyg6AQijQQtY=
Subject key identifier: EA:84:69:F7:EB:FC:5F:0B:25:B3:45:72:DA:4C:11:3D:38:F0:D3:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDC18BFAC98C11EF9FBA5B4D762E951A.roa
Signing time: Fri 03 Jan 2025 04:40:59 +0000
ROA not before: Fri 03 Jan 2025 04:40:56 +0000
ROA not after: Sat 13 Dec 2025 04:40:56 +0000
asID: 984
IP address blocks: 156.233.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62911 (0xf5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 04:40:56 2025 GMT
Not After : Dec 13 04:40:56 2025 GMT
Subject: CN=67776a5b-80c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:e7:07:c5:fc:94:bc:12:cd:43:0e:ba:ac:
48:b1:10:68:b2:c9:e9:43:c7:7f:7e:75:48:fc:b9:
85:f5:2c:a0:b5:7f:4c:0b:7b:87:c4:d6:b2:52:5d:
66:31:b9:68:74:64:e2:79:3b:ab:08:bb:d8:72:40:
9e:4b:d8:2e:cb:72:e7:1f:1e:c8:a2:92:51:43:70:
5c:df:89:35:11:a0:24:68:76:8c:bf:79:dd:ca:62:
84:4c:3b:f9:9e:f2:32:c0:a9:6b:6a:44:13:e0:6c:
c9:31:24:c5:67:0f:16:9b:e6:6c:16:66:40:45:5d:
7c:99:5f:d9:44:0a:d4:4c:a6:aa:1a:a4:76:6b:58:
6a:6b:f3:19:fc:56:1f:17:fd:5b:fe:fd:9f:21:ac:
07:f4:21:a3:f6:0f:ef:0e:60:1c:51:7b:14:83:a4:
a4:13:f8:ff:97:aa:9a:57:7d:71:a6:b6:a5:b1:d6:
f7:80:1b:fa:1c:59:06:61:d0:f1:c7:62:37:25:33:
28:10:31:5f:5e:87:a2:5e:eb:eb:2a:e5:8e:7b:78:
78:cf:2a:c5:db:df:b9:bf:36:4d:c1:c6:e0:d3:44:
d1:8a:4a:61:81:f6:bc:52:d7:91:97:07:81:9e:bf:
f2:3a:5c:3a:e0:f8:af:e2:90:b9:b9:02:2e:0a:66:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:84:69:F7:EB:FC:5F:0B:25:B3:45:72:DA:4C:11:3D:38:F0:D3:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDC18BFAC98C11EF9FBA5B4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1a:03:0b:a2:b3:4f:15:2c:38:42:bd:94:66:5e:9d:bb:e2:
d3:c9:6d:7e:8d:71:44:14:16:43:20:ed:43:96:a2:d8:54:61:
ad:55:9a:2d:2e:44:94:b7:0a:80:cf:62:3e:0d:a4:1f:19:f8:
ea:47:21:71:36:c0:6d:e1:a4:79:4e:30:41:b2:df:bb:19:ff:
b7:1b:ca:4a:3f:26:1f:00:cf:df:a3:a7:38:0c:8b:b9:a1:45:
41:59:5c:a5:fc:7f:63:d1:c4:e8:2e:57:2c:b9:b4:76:b3:df:
d3:6c:a8:bf:cc:32:e1:17:ba:37:f0:7a:c8:aa:d2:57:1a:9b:
f6:f7:3e:77:e4:15:01:be:65:8c:66:f2:e1:94:6e:2a:49:5a:
f5:1b:69:5d:5e:51:46:f0:4d:cc:17:63:83:52:df:dd:56:73:
e1:56:c0:8f:ff:3a:fa:63:b6:c4:ba:51:47:a7:97:20:76:81:
83:eb:1c:e4:e1:54:f4:22:45:66:fc:37:1e:20:79:13:01:fe:
86:a5:ab:9b:37:68:c9:51:80:50:bd:5e:f1:2f:00:aa:f6:c9:
b0:70:98:f1:ec:76:a4:15:ba:4b:0d:0a:41:a1:e8:42:7a:0c:
cd:a4:03:3a:4e:ab:85:da:f8:78:79:e3:14:82:e3:8f:63:cb:
68:e1:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:48 2025 by rpki-client