Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDE62810CD4311EF9E9E2455762E951A.roa
File: EDE62810CD4311EF9E9E2455762E951A.roa (raw, json)
Hash identifier: tZIM1iS8atxape5B3St6YvXdp/bHFMBEH2uz42hnGc4=
Subject key identifier: 7F:C5:36:76:40:2D:06:42:50:87:45:39:C6:0B:60:29:F9:AF:DB:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDE62810CD4311EF9E9E2455762E951A.roa
Signing time: Tue 07 Jan 2025 22:08:31 +0000
ROA not before: Tue 07 Jan 2025 22:08:27 +0000
ROA not after: Sat 13 Dec 2025 22:08:27 +0000
asID: 984
IP address blocks: 156.243.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65159 (0xfe87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 22:08:27 2025 GMT
Not After : Dec 13 22:08:27 2025 GMT
Subject: CN=677da5df-4d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:94:aa:11:10:50:31:1d:72:dc:6e:be:86:
b0:7d:f0:6a:70:15:ae:35:e7:99:9c:e1:85:51:cf:
b0:67:08:f5:92:1d:da:03:50:02:fc:4c:08:da:be:
72:6a:3e:7a:2d:24:52:10:02:1a:41:e3:f2:92:7a:
76:12:cc:9a:62:80:91:f8:79:53:dc:74:7c:70:f8:
57:98:dd:73:aa:27:be:07:b2:03:5f:e2:59:26:76:
0a:72:39:36:c6:04:a7:70:69:97:c2:55:5d:bd:9e:
2a:d8:83:f2:e0:3f:33:97:d1:07:b5:4c:2d:c4:ca:
30:55:59:1d:42:fa:11:d3:1b:8d:ae:ec:5a:e1:02:
c8:eb:96:a4:d8:28:87:4a:34:80:da:52:5c:80:e8:
2b:60:1a:5e:fe:29:81:ee:81:40:00:8f:eb:94:91:
56:27:54:96:b5:2e:b5:4d:b2:c3:b2:90:b0:0b:e9:
62:88:d5:53:07:32:d7:53:17:df:dd:ab:ee:1e:da:
64:98:24:5e:9b:52:b6:c2:55:60:28:d0:b8:d6:c8:
92:01:03:99:2a:8d:22:81:2b:50:fa:04:be:fb:db:
b5:57:f0:55:bc:b8:01:14:58:0c:4b:75:87:94:72:
cc:d3:28:ee:97:62:5c:44:fb:fd:5f:87:b3:39:a1:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C5:36:76:40:2D:06:42:50:87:45:39:C6:0B:60:29:F9:AF:DB:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDE62810CD4311EF9E9E2455762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.110.0/24
Signature Algorithm: sha256WithRSAEncryption
50:86:84:70:cc:2f:34:d2:f6:dd:31:49:c8:c8:b8:6b:44:8f:
fb:36:66:8f:58:4b:be:d7:f2:17:fd:4a:fd:09:c5:65:b8:8c:
5f:66:7a:ea:63:6b:f0:0f:a8:95:cd:4b:32:65:e9:57:95:5b:
f1:36:52:63:9a:fb:9e:eb:85:a5:ea:53:60:36:3d:27:ec:1a:
62:df:26:8c:be:d3:be:a4:2d:06:c9:4c:9e:53:70:90:51:a6:
57:ef:eb:e8:31:25:28:ba:ab:b5:0e:40:e1:ba:a4:32:6f:30:
c7:0e:63:9c:8e:1f:8f:87:f8:06:04:b0:36:0e:a2:eb:de:d2:
35:93:2b:fa:67:5f:d0:79:e2:98:44:c2:c3:0b:f0:87:cf:27:
b4:f9:d0:d3:35:c5:c6:cc:c1:97:95:9c:26:61:1f:3d:f1:63:
3f:b0:b8:3e:89:e2:36:29:01:5c:60:33:55:b6:ba:a1:2a:1a:
13:dd:29:a5:a8:c3:ad:1a:6f:0b:31:8e:50:8a:30:8d:10:b0:
bb:7f:32:2f:79:9e:5b:61:f3:3b:35:bb:94:89:8c:bb:72:72:
27:e9:2b:f2:a5:ec:3c:73:91:03:c1:c2:5d:bb:eb:a0:df:77:
1c:8c:c2:06:7a:62:1c:ae:b1:f3:97:3d:77:a6:2d:ef:d8:6d:
5f:e3:51:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:45 2025 by rpki-client