Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F885B558CD3711EF80903789762E951A.roa
File: F885B558CD3711EF80903789762E951A.roa (raw, json)
Hash identifier: f0bdnmaNnPB4a3Dp5j79VBoP1cJEk1TTqJQQ0MsIU+Y=
Subject key identifier: 10:04:25:21:4F:C7:D8:73:3B:53:85:FE:8E:7E:D4:28:EB:1B:CE:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F885B558CD3711EF80903789762E951A.roa
Signing time: Tue 07 Jan 2025 20:42:55 +0000
ROA not before: Tue 07 Jan 2025 20:42:51 +0000
ROA not after: Sat 13 Dec 2025 20:42:51 +0000
asID: 984
IP address blocks: 156.243.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65065 (0xfe29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 20:42:51 2025 GMT
Not After : Dec 13 20:42:51 2025 GMT
Subject: CN=677d91cf-dc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:87:10:26:d4:79:e6:e6:bd:d5:f5:33:4e:
32:e6:9c:4d:51:84:52:7c:5e:c1:b7:9f:60:c8:2d:
7f:5e:09:28:1b:5e:01:4e:a4:9c:25:40:c7:1e:d9:
9d:35:94:b5:65:e8:b2:3c:a6:8e:ef:fb:39:20:50:
d6:e2:26:73:15:ae:61:94:93:34:5f:29:d5:08:58:
55:88:35:ba:b6:aa:b1:46:3a:3e:8b:9d:02:e3:0b:
c2:a9:6c:8e:f5:48:f8:3b:1e:6d:d1:4e:c3:d1:f1:
0f:df:ae:3a:2c:15:62:e2:99:63:9e:66:43:eb:61:
32:a3:fe:ab:a0:89:da:8a:61:56:9c:f3:94:2f:1e:
c5:c2:f0:da:89:76:57:fd:cb:9b:c5:84:ee:4e:4d:
b8:d4:a4:db:cd:97:3d:88:7c:d7:99:23:6e:a8:75:
19:8e:d4:99:ed:e8:0a:77:a1:f3:74:6b:f7:cf:2a:
04:a6:64:7e:ee:4a:ee:9b:7b:3b:94:28:fd:3f:a0:
3d:07:8a:75:ba:5d:fe:6c:ae:6a:ae:af:75:a6:eb:
85:05:0d:b2:73:3a:fa:12:56:fb:c6:18:96:c4:c5:
21:61:4f:63:c7:92:d5:da:c6:71:4f:31:30:55:dc:
72:cb:4a:b8:0c:a9:bd:3a:fc:b4:0f:87:cc:e9:eb:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:04:25:21:4F:C7:D8:73:3B:53:85:FE:8E:7E:D4:28:EB:1B:CE:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F885B558CD3711EF80903789762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.61.0/24
Signature Algorithm: sha256WithRSAEncryption
85:28:39:e1:b0:e2:d7:46:7b:36:17:7a:27:2c:c3:92:48:03:
2a:21:8d:8e:9e:00:df:03:83:55:1f:0f:d7:d1:7f:65:e2:58:
26:4c:0c:7e:0d:bf:88:1b:9e:3b:87:c1:4c:21:fc:c6:b9:f0:
8c:81:98:ef:c2:40:79:d8:2a:30:fd:c4:a7:21:0f:c2:00:91:
62:c5:d6:9b:a9:83:f1:10:94:ed:e1:14:1b:09:9a:64:e8:4d:
61:cd:45:52:e1:c3:6e:31:2c:28:cf:bd:31:49:cb:30:98:75:
db:7b:bc:66:ec:34:29:f4:5b:27:50:39:6a:76:98:36:40:da:
4d:e0:0a:33:15:68:a3:f9:b1:cb:2d:10:e5:58:3f:60:16:49:
b8:b6:35:b7:45:11:e9:89:84:c5:77:ed:51:b0:a9:e9:fb:52:
57:9f:ec:ae:96:eb:81:49:d3:1e:42:00:ce:59:19:33:58:0c:
e9:e7:b1:3d:55:a0:ef:e7:43:3d:7b:b4:9e:52:ad:53:9d:f3:
9c:5d:5f:d1:51:03:80:6a:96:2c:df:59:83:12:de:12:fd:d0:
f7:0c:36:e0:97:6f:80:ea:2d:49:cf:c4:9d:7e:af:52:63:ee:
07:3e:f0:11:42:84:83:9b:0f:a2:2a:3f:04:ae:a9:9d:e5:7e:
58:c9:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:50 2025 by rpki-client