Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA1921CCD6611EFAC2014BC762E951A.roa
File: EEA1921CCD6611EFAC2014BC762E951A.roa (raw, json)
Hash identifier: qTm/JU3fseuSAG3TekfR06DOUPYgvcNY+9xIvnChbN0=
Subject key identifier: 1A:DB:37:09:E9:E6:AE:51:DB:FB:A4:DB:D8:74:B3:3E:47:6D:83:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA1921CCD6611EFAC2014BC762E951A.roa
Signing time: Wed 08 Jan 2025 02:19:05 +0000
ROA not before: Wed 08 Jan 2025 02:19:01 +0000
ROA not after: Sat 13 Dec 2025 02:19:01 +0000
asID: 984
IP address blocks: 156.247.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65353 (0xff49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:19:01 2025 GMT
Not After : Dec 13 02:19:01 2025 GMT
Subject: CN=677de098-f40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:d3:ed:a4:cf:ed:d3:08:d5:b2:06:59:1c:
50:41:72:e8:5c:b8:46:54:96:90:11:85:6a:3a:18:
6f:d4:d9:74:80:d9:c8:42:1c:bc:9d:8e:c8:a7:48:
b2:c0:ba:a9:c5:be:2e:f7:af:ff:77:fa:dd:7f:ec:
33:a3:ad:df:cd:91:e4:1f:35:d6:8f:ad:5f:41:cb:
a7:8a:9a:07:da:4e:7c:b4:bb:64:36:7e:14:4d:09:
ec:7a:3d:a5:06:76:6a:3b:b6:36:85:d3:d0:88:96:
2f:8b:fb:e9:69:9e:66:4e:26:ac:54:5d:eb:8d:82:
0c:e6:db:29:25:6c:19:16:78:5f:b9:23:d1:ff:03:
2a:3e:38:59:81:59:7d:13:3c:de:aa:e6:69:00:eb:
f3:ab:a1:4e:f2:2e:ff:01:36:05:a2:13:de:92:98:
d4:78:5a:ce:77:a0:1b:6c:3a:26:97:b0:77:90:df:
60:0c:3c:f8:25:cb:79:6b:7b:51:c5:1f:ec:b5:de:
ad:55:37:85:41:88:e2:59:40:68:04:41:21:72:e9:
95:a0:79:17:8a:35:ec:d1:8c:af:a6:05:13:9a:0c:
c0:aa:d7:f9:b1:43:55:a5:d1:c5:77:92:fd:6d:fd:
ee:d2:11:ef:8c:e6:d0:2c:e2:1d:45:19:26:48:57:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DB:37:09:E9:E6:AE:51:DB:FB:A4:DB:D8:74:B3:3E:47:6D:83:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA1921CCD6611EFAC2014BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a7:9e:c9:09:ba:1b:20:d2:8f:ef:38:8b:92:f0:19:85:91:
b5:21:3f:4c:ac:d5:b9:d4:e1:d8:97:fe:8f:06:1c:dc:2a:80:
87:29:c6:c8:0c:d8:53:c4:e5:1b:94:68:a2:26:4e:d7:03:df:
b5:41:00:00:40:1b:f6:a3:6c:2a:44:b2:fe:9e:10:66:66:cc:
67:16:9b:80:10:84:9a:f8:ac:4b:3f:d3:6d:48:07:57:a7:a8:
b0:5c:85:b2:17:eb:00:7e:e5:e2:0d:9b:cd:df:8b:3b:65:5c:
9a:22:57:28:d6:f1:f2:70:e7:f3:55:cc:a9:c2:ad:a6:f5:bb:
fc:0d:66:d0:dc:a4:9c:13:01:27:4b:9a:d8:1c:db:24:af:b8:
aa:97:1f:7e:08:4b:1d:53:a8:c6:c4:9c:fa:ac:b9:72:34:e9:
c3:d4:03:9e:4f:f8:7e:5e:e5:43:2c:02:24:a7:02:8c:57:59:
90:39:82:30:b0:26:66:14:5b:52:53:d9:b1:c1:20:9b:d3:ec:
02:c1:bf:5a:ea:a9:79:13:d9:46:d7:09:da:96:b7:53:ad:f2:
8f:78:a2:39:de:ca:77:4c:8d:a6:e3:3e:3c:aa:e0:d5:70:1e:
bf:8c:7e:54:6b:f7:c5:f0:ba:3b:f1:29:eb:f8:c2:f1:73:be:
3d:38:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:03 2025 by rpki-client