Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF636872D31711EFB543F060762E951A.roa
File: EF636872D31711EFB543F060762E951A.roa (raw, json)
Hash identifier: WnboL7eBaLYmA+vF8y2ECWRVfdOLkmjv4mH/o/pw0LM=
Subject key identifier: AA:C1:D6:F1:B8:74:2D:7B:A8:58:03:0A:D6:7D:F0:95:8D:59:BA:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010879
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF636872D31711EFB543F060762E951A.roa
Signing time: Wed 15 Jan 2025 08:08:43 +0000
ROA not before: Wed 15 Jan 2025 08:08:39 +0000
ROA not after: Mon 03 Jan 2028 08:08:39 +0000
asID: 17561
IP address blocks: 156.254.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67705 (0x10879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 08:08:39 2025 GMT
Not After : Jan 3 08:08:39 2028 GMT
Subject: CN=67876d0a-0387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b9:e2:64:0a:bb:21:bf:74:56:99:b7:d7:af:
13:82:d4:9b:99:43:22:e5:57:be:a0:1d:6b:3c:34:
1a:5d:7f:d5:b8:35:24:c5:9a:4d:58:cf:1d:61:79:
fb:70:f3:ef:92:b1:96:0e:94:f7:b1:3a:e0:f0:16:
e0:08:8a:fb:89:3a:74:75:76:76:17:6a:80:30:89:
e9:4e:cc:27:f2:e6:1e:47:1f:1b:2a:30:9e:c9:c3:
7d:84:6f:be:17:48:18:2c:b0:74:bc:f5:e1:64:c7:
c8:da:c5:a6:ac:23:22:a8:5b:38:1f:7c:d4:60:f3:
18:c7:b5:10:cd:72:0e:d7:2b:2e:0f:fc:12:2f:37:
2e:45:c7:45:cf:34:37:da:1b:3a:cb:ec:2c:1d:b6:
6f:b9:88:ca:03:48:59:bf:08:28:20:09:ca:8d:fb:
d7:53:fb:00:db:81:cf:c4:72:e7:10:44:d1:2a:74:
2e:87:ce:da:8b:01:0b:55:2c:10:c5:62:7b:58:82:
82:91:57:53:f2:ec:78:94:a7:e8:4a:fb:b2:f2:71:
8b:04:18:e9:95:86:b1:07:5d:55:db:9c:9a:47:06:
3d:4b:79:01:c5:46:03:ea:a2:74:13:94:b2:33:fa:
b9:8b:c4:2a:ff:4f:bd:22:57:8d:55:dd:25:54:cb:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:D6:F1:B8:74:2D:7B:A8:58:03:0A:D6:7D:F0:95:8D:59:BA:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF636872D31711EFB543F060762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.82.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f0:87:bf:ef:be:3c:7a:ae:d0:fc:46:8b:df:78:58:06:de:
2a:f3:f6:96:a9:f5:44:54:e5:27:61:e4:fa:fb:ab:90:d5:2b:
cf:26:3b:15:cb:22:8e:54:91:4a:97:3f:65:29:1b:ff:5a:ae:
82:6c:eb:7a:e4:6b:e1:96:9e:d5:4f:d4:7c:36:a9:40:d2:46:
ad:26:e7:86:0c:ea:ce:04:e1:c0:af:9b:4c:f9:19:6c:8b:bd:
2b:8b:66:4f:b7:f2:66:1a:49:22:af:d9:1d:5e:08:1b:d5:e6:
7f:a1:0f:cc:37:34:92:64:50:ac:56:13:08:ec:2c:a5:e9:7e:
40:13:4b:61:dd:7a:cc:3c:b8:d1:0b:a1:50:0b:b1:96:cd:8e:
ea:32:f0:c2:a2:ab:50:11:af:63:a7:ab:a6:35:78:8c:dd:5e:
43:08:6d:b2:85:f8:05:15:c0:d4:96:de:7a:f5:b6:69:c3:9c:
60:6d:d4:38:dd:1e:25:1f:15:91:db:bb:89:c0:b8:33:81:d5:
8e:a4:c8:ff:9e:bc:60:3e:89:5e:89:c5:09:fb:11:e7:03:fd:
a5:a7:3f:3b:f0:35:46:ca:c2:0e:a9:d9:f6:90:c1:3a:79:6d:
54:c9:25:0a:f5:01:cb:20:07:d6:a5:4a:af:d5:83:35:82:a9:
bf:a7:82:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:01 2025 by rpki-client