Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE91661ECDAF11EF819EB693762E951A.roa
File: EE91661ECDAF11EF819EB693762E951A.roa (raw, json)
Hash identifier: u/Cwk3NWcjukjotMCiKATAzlX7n6uvjC7p6kbdHXBLM=
Subject key identifier: 32:58:0E:EC:32:70:BC:F0:A0:83:33:A8:46:4D:56:1B:30:94:44:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010177
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE91661ECDAF11EF819EB693762E951A.roa
Signing time: Wed 08 Jan 2025 11:01:38 +0000
ROA not before: Wed 08 Jan 2025 11:01:34 +0000
ROA not after: Sat 13 Dec 2025 11:01:34 +0000
asID: 984
IP address blocks: 156.255.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65911 (0x10177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 11:01:34 2025 GMT
Not After : Dec 13 11:01:34 2025 GMT
Subject: CN=677e5b12-862f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c0:3d:fc:c7:88:45:bd:e2:f8:1c:28:85:b8:
a2:62:32:07:24:af:5e:09:f6:13:51:d7:6f:fb:5c:
64:a4:34:bd:fb:7f:48:c9:e0:93:d3:6c:7c:e6:4e:
44:5f:0f:85:02:18:e3:37:c4:98:03:f2:ea:a9:fc:
ee:ac:6e:07:5e:5e:44:1d:ec:b6:5b:84:94:92:12:
59:6d:03:86:e2:e4:4b:3d:fa:c3:06:3c:76:42:31:
73:0e:dd:47:fe:a8:37:77:8f:cb:8c:f2:2a:5b:73:
63:ad:01:a7:d9:cf:79:60:a7:2f:b4:03:9d:de:c1:
66:0f:a0:62:f3:dc:c2:ca:e9:fd:36:41:d1:91:37:
d6:1f:30:e9:a2:f3:71:44:bc:e6:11:6b:36:2a:67:
06:90:be:cf:00:a8:bc:f6:29:bf:4c:8f:9d:19:63:
03:80:ad:fe:cf:d2:f1:97:52:88:4a:b2:68:c5:f1:
ea:10:ee:94:ad:4e:57:51:19:e1:e6:cb:e1:91:07:
e1:0c:aa:15:15:b9:0b:30:a9:d5:2d:5a:87:a8:a6:
4f:df:ea:e0:9f:94:af:06:3e:08:ad:cb:0e:a3:fb:
46:b9:be:ee:d2:be:7a:d0:7c:a0:de:97:d7:37:a0:
8f:d1:88:21:0c:48:59:8c:6c:19:bd:d5:bd:4e:68:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:58:0E:EC:32:70:BC:F0:A0:83:33:A8:46:4D:56:1B:30:94:44:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE91661ECDAF11EF819EB693762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.63.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5e:8c:2a:d0:0e:01:e4:48:03:0a:a5:f8:ec:c6:02:70:62:
38:58:bf:2c:e9:47:4c:37:a0:01:61:28:ee:6f:1b:7c:60:b5:
ff:0a:9e:7e:13:61:b2:46:9e:71:3c:22:f4:38:e1:31:86:cb:
3e:02:10:09:5b:f3:39:68:9a:cf:cd:41:fb:fe:24:f2:ed:4c:
fe:ec:43:52:fc:b8:61:21:1e:31:3e:89:90:ed:42:c4:8f:fd:
0b:c8:5b:cf:45:49:fd:d0:8e:f2:4c:31:df:0d:1e:2e:7b:a0:
26:60:78:8c:bc:0c:65:c1:2e:d3:03:c0:4c:1b:90:96:0b:81:
90:18:50:6f:33:70:46:e2:87:1f:7f:2c:d1:06:e6:63:2c:46:
06:c8:4e:cc:3d:51:53:97:d8:5a:45:d4:92:64:1a:7f:ac:34:
37:1b:d4:ed:2a:a3:63:fb:f2:7a:de:e8:99:81:41:25:d2:3a:
81:d8:4d:e6:7e:60:8b:4a:a2:6f:9d:c9:07:c8:c7:ab:8c:2e:
7c:cd:cd:bf:53:6b:83:20:0b:48:a8:01:4b:bb:ed:f2:32:f4:
9d:6a:da:fd:0a:21:ec:46:36:a1:b3:78:fc:68:9a:a6:98:0a:
06:97:92:57:f5:50:47:94:13:5f:fa:ff:1e:ae:53:93:c5:01:
18:4f:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:11 2025 by rpki-client