Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE55BA6CCCF911EF8CA02182762E951A.roa
File: EE55BA6CCCF911EF8CA02182762E951A.roa (raw, json)
Hash identifier: 2qnLBQcfzf/ORQFWVvTVYe7cEMSIP5u8DWnz0wdzgcw=
Subject key identifier: 6F:75:CA:09:27:D8:E7:D3:21:C0:53:F8:75:68:14:D0:EA:CD:CA:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE55BA6CCCF911EF8CA02182762E951A.roa
Signing time: Tue 07 Jan 2025 13:18:49 +0000
ROA not before: Tue 07 Jan 2025 13:18:45 +0000
ROA not after: Mon 13 Dec 2027 13:18:45 +0000
asID: 17561
IP address blocks: 156.237.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64567 (0xfc37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 13:18:45 2025 GMT
Not After : Dec 13 13:18:45 2027 GMT
Subject: CN=677d29b9-cf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:3f:51:60:9d:92:94:ef:3c:c5:fd:9e:f6:
e1:e3:db:4c:95:a1:79:c2:28:61:b1:99:49:a7:98:
c4:d9:c7:56:1d:47:fd:14:a8:e5:a9:b9:9c:4d:5b:
41:65:7d:0c:9c:72:5c:d1:31:0e:a9:9e:af:a1:d9:
7f:30:d7:4b:c5:e5:f4:4a:92:24:93:9b:0b:7e:01:
9c:ea:2d:77:ab:79:20:1c:1c:b8:92:d4:fa:47:1d:
96:10:47:64:a0:4f:ab:1e:91:14:aa:c8:72:d7:12:
72:ff:1e:0d:fa:2a:5e:17:80:19:4c:97:1f:de:42:
5e:0e:a0:05:b8:3b:da:98:f8:f8:31:7a:7f:80:cc:
52:f9:e2:3b:2d:a4:f2:4e:ed:59:e7:33:1c:56:7c:
42:10:ac:fd:90:f1:c5:d7:2d:99:80:b8:d2:76:07:
8d:5e:57:0f:f6:ed:f9:69:84:59:38:27:0a:3e:1f:
27:b9:c8:2f:18:88:ce:49:5f:43:e4:38:86:ee:9b:
d6:73:1a:84:f5:9f:b0:0a:fc:bc:a8:73:01:9b:56:
14:9f:a5:dd:e0:c0:a8:95:70:fa:57:b4:d2:58:45:
28:22:21:be:36:f8:b6:ad:9f:4c:5f:42:22:f7:e7:
38:3d:35:34:b4:00:b6:f9:22:f9:52:ed:a0:59:59:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:75:CA:09:27:D8:E7:D3:21:C0:53:F8:75:68:14:D0:EA:CD:CA:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE55BA6CCCF911EF8CA02182762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.126.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:61:41:86:a5:f4:20:7f:7e:4b:c6:7f:54:8d:6f:43:85:a4:
b1:bc:d9:90:11:a4:7a:19:d2:c3:54:1a:f7:0c:47:bf:76:f5:
54:e2:67:6e:6f:e5:bf:24:71:68:28:ed:61:7c:36:5e:c4:f4:
e4:66:1b:59:75:79:a8:6b:be:f8:8a:2b:0b:38:22:e5:60:c9:
46:fc:91:8f:c9:5a:83:09:35:b7:16:2f:0c:de:b3:91:aa:31:
ab:8a:8b:87:40:73:eb:83:27:c3:ac:23:19:fd:24:77:d6:1f:
6b:e0:68:31:b2:42:62:74:db:e2:09:82:f8:5d:01:c4:4f:d3:
dd:d3:14:4f:0b:fd:66:8f:7c:43:95:b6:f5:ca:7b:e4:32:b6:
fd:1e:78:8a:11:47:9a:97:1f:82:9e:32:f4:c9:0a:c4:1b:12:
e8:4c:a0:20:cb:b1:dc:77:53:ba:84:13:f4:7f:f4:88:e1:79:
d4:40:83:e8:c4:3b:9b:1e:2e:17:5f:0e:7f:10:f5:26:45:d0:
47:15:24:42:1b:fd:a5:3e:59:3b:83:4b:12:0f:e3:e3:81:77:
2c:e8:15:78:2c:4b:b5:54:ba:2f:9f:51:42:55:1e:84:0d:74:
bc:ac:6b:5f:2f:b0:d4:8a:37:d4:ca:d5:a5:7a:35:52:5c:14:
cc:1d:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:12 2025 by rpki-client