Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F81D0126CD8611EF82684292762E951A.roa
File: F81D0126CD8611EF82684292762E951A.roa (raw, json)
Hash identifier: 8jkRLyg+uccrkOHREh8W+DrekKhr6kyBKd/tkJtJ7QU=
Subject key identifier: E8:A2:6C:AA:FA:F8:37:F4:51:C1:6E:08:FD:94:6E:12:88:01:AC:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010031
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F81D0126CD8611EF82684292762E951A.roa
Signing time: Wed 08 Jan 2025 06:08:24 +0000
ROA not before: Wed 08 Jan 2025 06:08:21 +0000
ROA not after: Sat 13 Dec 2025 06:08:21 +0000
asID: 984
IP address blocks: 156.252.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65585 (0x10031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 06:08:21 2025 GMT
Not After : Dec 13 06:08:21 2025 GMT
Subject: CN=677e1658-c229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:7e:6d:d6:bc:3c:59:6b:88:4a:eb:ef:12:
dc:73:12:ee:ea:1b:25:ee:86:ce:f9:57:e1:9e:9f:
ca:20:0b:62:14:c5:4e:53:57:3b:22:fc:97:8c:9c:
06:71:be:f1:c2:78:73:e8:b2:c8:04:cb:d3:62:97:
23:17:5f:28:0b:d9:c6:61:84:6c:91:89:3d:b5:90:
aa:96:38:c3:93:85:67:33:48:67:10:b7:37:ae:1f:
28:57:f5:51:30:ec:60:1a:8e:9a:6e:93:c8:7f:09:
8a:6f:6a:5c:86:e2:cf:8a:ae:08:a2:3c:18:3c:2f:
0e:ad:47:f5:be:98:ae:64:53:b6:98:bc:d3:cb:e0:
89:4f:8b:f6:6f:3e:05:a0:6e:d8:b4:04:47:e5:1c:
45:8d:ae:18:b6:f3:06:e7:76:e9:8e:69:83:7b:2f:
11:e4:de:98:94:c2:d7:ed:d7:36:8d:4a:5a:df:5c:
38:eb:30:9c:dc:e2:36:f8:b9:bb:79:06:e7:c6:8d:
f8:bc:ce:12:42:1f:f9:f0:7a:0d:02:a2:e8:17:3c:
e1:ef:bd:17:f8:54:63:bf:fb:67:94:56:d0:c5:96:
6f:2f:b0:33:00:13:8f:9d:24:31:fa:97:66:4c:3c:
36:5c:84:17:3f:c3:d8:a3:e2:54:04:5d:a8:dc:22:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A2:6C:AA:FA:F8:37:F4:51:C1:6E:08:FD:94:6E:12:88:01:AC:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F81D0126CD8611EF82684292762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.37.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ea:d7:31:88:00:c1:f9:83:3a:c5:49:59:9f:44:cc:32:87:
20:75:0d:6a:11:e0:09:06:0e:d3:06:fc:c6:68:ec:28:93:69:
82:65:80:61:c8:c2:8a:61:d0:f8:b5:57:e5:23:46:a3:aa:81:
57:5e:aa:1a:8b:77:41:79:29:49:b6:00:e3:ea:5d:c4:66:ae:
12:17:8d:47:5a:da:75:07:b5:f1:9a:5e:85:6e:c0:b8:5c:e9:
93:d9:22:51:b8:92:cb:5f:51:c5:c9:14:47:f9:f2:6f:17:ec:
87:a2:71:9c:cb:f4:0b:48:14:07:83:62:00:b7:e0:fb:7f:4d:
51:b9:0a:83:d1:a2:f3:ed:70:70:92:50:20:09:18:61:df:74:
27:b3:4b:6f:9a:28:82:d2:70:05:56:a1:8d:7b:2c:71:d5:5f:
e7:73:18:bf:e7:dd:30:c4:e3:99:ad:9e:0b:1e:f1:fe:ee:3c:
d5:44:4e:11:94:82:06:9f:e5:b2:66:3d:50:50:0a:0c:71:13:
3e:fb:a2:7b:f7:0c:da:d9:d9:d8:15:7b:de:b8:c2:3b:b8:4b:
48:0d:f7:74:cf:4f:8a:6a:a3:29:ff:f6:ee:37:8d:1c:6f:11:
e8:e1:37:81:3b:a1:bb:c5:ae:95:56:e6:88:06:ce:60:ea:94:
77:82:73:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:44 2025 by rpki-client