Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4EC6B2ECE4211EF9A10AF44762E951A.roa
File: F4EC6B2ECE4211EF9A10AF44762E951A.roa (raw, json)
Hash identifier: YKvbFA5ONgvBgfY4iJmksnF/h4v3Ajp0JMBVVvUUk74=
Subject key identifier: C0:0D:3E:76:7F:6E:2D:1B:8A:18:6C:81:B5:CF:53:B9:87:0F:90:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01027F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4EC6B2ECE4211EF9A10AF44762E951A.roa
Signing time: Thu 09 Jan 2025 04:34:04 +0000
ROA not before: Thu 09 Jan 2025 04:34:01 +0000
ROA not after: Fri 09 Jan 2026 04:34:01 +0000
asID: 17561
IP address blocks: 156.245.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66175 (0x1027f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 04:34:01 2025 GMT
Not After : Jan 9 04:34:01 2026 GMT
Subject: CN=677f51bc-c73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:51:b7:72:39:ef:c4:99:84:ad:79:27:a2:
ec:08:43:01:da:70:0e:bc:94:cb:90:bc:e0:53:4a:
41:8c:66:0f:83:0d:b3:87:62:47:2f:51:14:26:c6:
33:bc:46:95:6e:0e:1b:5e:9e:89:55:23:5d:40:30:
0d:f0:5d:b7:d3:44:db:16:f7:e1:75:12:d2:e4:b5:
ab:49:19:64:75:96:99:61:14:dc:c4:d2:b3:da:bd:
bf:76:73:10:0a:ec:0a:16:56:74:e3:39:3b:8f:99:
57:50:ca:6e:57:c9:7f:60:d9:2f:a0:95:b1:0f:bf:
09:d6:12:ab:db:e5:a6:fa:5a:dc:73:9c:d8:82:c1:
94:f3:e6:ee:12:13:6a:fa:aa:c9:22:58:05:be:9c:
d0:ba:da:fc:b2:95:58:0e:6e:c0:b5:ca:9d:79:a9:
e3:df:91:de:82:5c:7b:9a:e9:68:83:a4:27:bd:ac:
ce:9d:16:be:8d:d7:89:8c:06:3b:cc:dc:72:fc:1f:
df:a0:73:62:d4:f3:a4:4f:4a:59:26:67:08:5e:91:
e7:8b:6e:33:6c:1d:e4:20:38:a3:42:f9:3c:06:9b:
90:d2:7d:94:a9:f5:65:46:60:a4:cf:53:5b:38:bc:
1c:3f:1c:ce:ab:e1:54:6a:89:70:6f:66:dc:41:ae:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0D:3E:76:7F:6E:2D:1B:8A:18:6C:81:B5:CF:53:B9:87:0F:90:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4EC6B2ECE4211EF9A10AF44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:49:65:1b:81:6c:f9:b1:f6:6d:53:a8:a4:52:c9:14:f9:79:
71:64:23:92:9d:9e:76:e1:75:a4:72:a8:11:ed:f6:4f:64:df:
92:7a:da:71:9f:d4:d3:a4:1a:dd:a1:d4:65:5c:52:2e:cd:79:
97:57:89:18:b9:57:d2:b7:da:43:c4:01:31:0e:b7:ac:b5:dc:
55:40:c9:28:9a:25:c0:5c:0c:52:12:76:da:f9:ec:bb:7d:df:
66:46:85:ea:a3:4e:40:89:bc:5d:8c:26:ef:4c:f4:a1:6e:c9:
08:60:66:00:93:b1:93:a9:bb:d5:ec:be:fb:a8:81:04:de:04:
b2:fd:48:82:d9:50:8d:f9:37:ff:b0:b3:a4:7d:31:0b:91:96:
54:ab:f0:12:2d:d3:a6:e8:3c:2e:6f:57:46:ca:37:e0:b5:5f:
d5:72:36:a0:50:26:04:74:31:75:f5:44:1c:d6:25:c8:d3:db:
e9:8f:f1:46:84:5b:61:e3:fc:92:51:2e:ee:ca:31:87:df:4e:
13:ac:4a:0d:e7:88:21:05:d0:31:50:dd:6b:37:35:a4:e8:a6:
7f:c7:00:d6:48:d7:b7:99:f4:63:b8:f4:8f:4b:a2:94:7a:b2:
9a:7d:1d:ad:e1:45:0f:06:ce:c4:82:c7:f9:eb:d1:cf:d3:3d:
44:7d:fe:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:48 2025 by rpki-client