Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F75470DCD30611EFAC68FB75762E951A.roa
File: F75470DCD30611EFAC68FB75762E951A.roa (raw, json)
Hash identifier: LYrsukafaD+ocaIFBloaaz5EmMbAvaV7nFFRBZMSBt4=
Subject key identifier: 7F:C1:90:EF:05:79:41:4A:8F:84:DB:73:8A:28:A8:A1:B6:6A:66:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010815
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F75470DCD30611EFAC68FB75762E951A.roa
Signing time: Wed 15 Jan 2025 06:07:14 +0000
ROA not before: Wed 15 Jan 2025 06:07:11 +0000
ROA not after: Mon 03 Jan 2028 06:07:11 +0000
asID: 17561
IP address blocks: 156.254.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67605 (0x10815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:07:11 2025 GMT
Not After : Jan 3 06:07:11 2028 GMT
Subject: CN=67875092-5636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:91:51:cd:1c:94:8c:c3:10:70:c3:94:d5:
44:8f:93:17:71:b7:14:1d:c2:73:30:e0:fd:06:ba:
74:14:8b:74:ef:bb:b4:4f:d7:9f:7a:17:22:a3:5f:
e0:19:e4:21:36:10:46:05:61:94:63:4f:e7:7e:0e:
f4:54:e8:a4:55:7c:ec:a4:0b:6b:08:48:91:75:bf:
1e:4c:26:70:82:f3:c2:8c:54:40:8a:42:1c:64:a2:
9c:05:cc:39:d8:62:a8:5f:60:bc:38:2e:c0:ac:e5:
84:cf:e9:bf:75:20:46:3d:c4:e1:d2:29:92:3e:23:
21:17:14:3d:c7:5d:6f:c3:d7:05:27:84:d9:f0:2d:
47:ef:da:47:7f:2c:40:19:63:a9:df:68:bb:ce:e6:
ce:73:a9:cf:3e:6e:06:94:dc:c4:32:31:c1:7c:8d:
91:36:f5:5a:23:5b:67:4d:f2:1b:07:e9:d9:e7:71:
20:01:37:65:23:16:23:ef:38:09:d4:64:ae:34:40:
1a:8c:d8:13:69:64:30:c6:98:67:ee:20:70:2e:71:
e1:d0:f5:f0:f1:8b:75:a5:64:de:18:c1:05:68:8d:
26:ad:ae:b2:a5:82:17:7f:ac:63:42:b5:4c:01:ba:
dd:42:74:8c:b7:68:7b:92:19:c2:74:4a:03:4f:99:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C1:90:EF:05:79:41:4A:8F:84:DB:73:8A:28:A8:A1:B6:6A:66:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F75470DCD30611EFAC68FB75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:95:43:3e:66:4b:c9:67:89:70:94:91:b1:8c:cc:c5:ed:ab:
cb:7b:9d:4e:35:c3:68:dc:2f:7b:75:27:27:7e:46:a0:9e:d7:
c6:92:46:30:b2:9e:7a:7d:1d:27:fe:6d:e6:a5:b6:f3:ed:67:
ff:78:a7:3b:06:a4:c5:fa:da:4c:63:65:88:01:a9:34:d7:6b:
8b:d5:10:04:f2:28:22:5b:05:bc:6f:3d:9c:b2:5a:03:2d:ac:
1e:b7:8c:6c:25:9d:a9:11:1d:9c:0a:51:37:cb:90:5a:3c:05:
96:1e:2a:78:34:d9:09:d7:66:79:d1:1a:6c:e8:7e:b1:6d:72:
61:b9:6a:1f:1d:6f:67:70:b9:a1:85:40:b1:37:a3:ba:2f:1f:
86:a0:5a:5e:be:e1:7e:c2:f3:d5:3a:6d:01:0a:88:e5:6f:c5:
f7:64:d7:85:2f:03:39:93:3c:33:8a:40:c5:14:7d:de:c0:9a:
9f:63:14:50:6a:2f:b9:82:b1:4d:63:cc:f7:e6:68:9c:65:10:
fb:1e:33:e7:4a:43:21:75:14:2b:57:9e:43:a3:63:a0:97:e1:
24:d9:69:d4:9a:ad:a2:74:68:a4:bd:da:dd:7d:2a:ab:7d:e0:
52:91:c8:4a:27:7b:48:b9:71:e1:88:f1:f0:d4:40:62:72:23:
59:c9:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:34 2025 by rpki-client