Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEB3B6ECCCE211EF82781172762E951A.roa
File: EEB3B6ECCCE211EF82781172762E951A.roa (raw, json)
Hash identifier: g9QgIxNOKh7XwYliGOeFC3IDIL0WKReYcKQoKlJObXQ=
Subject key identifier: 60:2C:7A:FF:20:DD:E6:54:6E:85:81:1E:D5:A9:12:A3:7E:8D:5D:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBB3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEB3B6ECCCE211EF82781172762E951A.roa
Signing time: Tue 07 Jan 2025 10:34:11 +0000
ROA not before: Tue 07 Jan 2025 10:34:07 +0000
ROA not after: Mon 13 Dec 2027 10:34:07 +0000
asID: 17561
IP address blocks: 156.233.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64435 (0xfbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 10:34:07 2025 GMT
Not After : Dec 13 10:34:07 2027 GMT
Subject: CN=677d0323-2cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:e2:d1:e6:96:5c:1e:f1:5f:31:67:ad:1f:
41:76:bb:84:39:b1:53:70:84:f8:5b:fb:f5:aa:7d:
26:88:6e:c2:08:dc:f4:f6:10:c8:d8:17:f2:4c:00:
24:71:5a:91:e8:de:42:19:0a:79:63:5b:32:7a:90:
21:00:8e:bc:db:e0:8d:58:a5:04:92:67:9a:66:d1:
83:05:7c:e6:a9:cf:4d:98:79:25:1c:35:12:94:7b:
47:31:bf:6b:7e:60:a5:19:99:66:64:b4:ea:a3:37:
7c:ed:80:5e:d0:ec:cd:c9:9b:83:68:27:3e:7a:03:
9e:5b:a7:74:a3:b9:5f:0f:b4:d4:c0:fd:fa:cc:a6:
52:59:bd:d6:9f:72:7e:d0:c3:3e:6f:e9:d3:73:de:
a8:e7:e1:85:2c:74:fc:47:6f:11:20:42:4c:65:6e:
5a:c7:b0:24:f2:b0:2f:78:9f:83:d0:f7:4e:80:56:
09:34:11:f2:18:79:99:aa:cd:4c:4e:34:de:07:b9:
93:07:d6:6f:a0:1a:d0:4b:33:32:9c:dd:91:22:23:
12:5b:a8:c8:66:93:44:bc:23:46:0c:7a:a5:61:3e:
89:b3:77:15:95:8a:bf:bf:8c:3c:a1:be:82:59:70:
62:ab:78:e6:36:75:d8:fa:b4:59:71:a7:3d:9c:1c:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:7A:FF:20:DD:E6:54:6E:85:81:1E:D5:A9:12:A3:7E:8D:5D:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEB3B6ECCCE211EF82781172762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b4:fc:49:0e:0e:45:04:f2:ff:bc:6c:4d:64:2c:5a:13:de:
63:ba:27:21:08:07:09:92:e1:39:5f:24:25:ad:ee:a5:61:4c:
6c:f8:3e:71:42:52:33:45:8f:67:5e:dc:5f:10:89:01:93:2b:
75:3e:b9:f4:07:92:84:95:27:df:71:fd:de:e5:80:9f:2d:be:
b4:49:3d:8e:cc:2e:a5:97:e8:8f:ff:2e:d7:e0:51:2c:8d:8d:
df:0b:0e:89:46:52:0e:57:4b:d5:50:ee:70:75:14:05:19:aa:
57:f2:dd:8a:78:75:b3:51:e5:2a:2f:23:b3:b1:3f:11:71:27:
47:dc:7f:6b:70:90:76:5d:2a:fb:8f:75:27:62:d0:c3:e9:36:
2e:28:90:ea:5b:e2:be:00:dd:41:0c:e4:7f:83:d5:98:48:43:
60:48:5a:d6:36:7e:a2:87:e8:51:3c:2d:3f:60:ef:d5:bb:77:
15:27:2b:f3:d9:e1:a6:06:c9:6c:2e:ba:b2:22:22:1f:5b:b1:
3c:84:05:69:59:bb:7a:b8:f2:1b:9e:7f:ea:18:5f:6b:46:5b:
64:59:21:a7:8e:12:60:e5:61:67:bc:1e:bf:a4:ff:51:dd:d0:
66:bb:42:6a:82:3f:e1:9c:48:c8:39:6a:f1:7d:4b:a3:5e:74:
8c:d9:a8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:51 2025 by rpki-client