Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE55FC36D30911EF9D441A89762E951A.roa
File: FE55FC36D30911EF9D441A89762E951A.roa (raw, json)
Hash identifier: X5UUbODEIK21XksTd2j+71DPyGqpaH84hmreBxJ/STw=
Subject key identifier: 32:1F:8D:1F:26:7B:EA:9D:A3:0E:07:C9:A9:1F:60:03:A4:23:B8:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010825
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE55FC36D30911EF9D441A89762E951A.roa
Signing time: Wed 15 Jan 2025 06:28:55 +0000
ROA not before: Wed 15 Jan 2025 06:28:51 +0000
ROA not after: Wed 19 Feb 2025 06:28:51 +0000
asID: 14315
IP address blocks: 156.224.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67621 (0x10825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:28:51 2025 GMT
Not After : Feb 19 06:28:51 2025 GMT
Subject: CN=678755a7-bea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:83:8f:82:d3:ad:29:a8:ec:6f:93:3d:1f:
22:e6:eb:10:e5:da:97:b7:21:d9:c1:b7:5d:d9:12:
d2:4f:56:fe:6d:7b:d1:42:53:be:fb:77:8c:3f:e1:
66:9f:88:e4:62:04:63:b8:f9:50:70:3c:da:9f:14:
f2:b2:29:c2:f6:17:59:e5:bb:24:a1:42:a3:f9:40:
40:50:71:6e:56:52:17:34:7d:1f:9b:fd:8b:c6:ac:
4d:f1:8d:ca:d9:a7:ad:67:e8:be:14:e4:fe:ae:29:
d6:e5:e7:4d:09:9d:de:71:4b:68:3d:43:9f:5c:ec:
2c:35:0f:a5:e2:7f:16:5e:48:ff:ce:89:35:c9:89:
22:60:83:d2:39:fa:0c:60:20:4c:f9:8f:3e:47:22:
4d:60:b1:8f:09:13:e4:0d:d0:8f:67:4d:08:74:e7:
45:9a:5b:15:78:9e:ef:90:03:dc:d8:aa:e5:50:4a:
fd:c4:ed:d1:ef:b2:08:87:14:06:d6:3b:90:eb:86:
16:51:43:59:a9:ba:f4:ca:50:06:91:c2:2c:1c:46:
1a:5d:a2:90:a7:45:ea:38:02:83:03:7b:35:77:2c:
c7:2f:bb:75:05:04:1d:3d:a5:c9:1d:3f:2f:82:ff:
e1:eb:c8:79:8e:b1:be:b4:c7:5a:da:a5:93:56:3d:
63:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:8D:1F:26:7B:EA:9D:A3:0E:07:C9:A9:1F:60:03:A4:23:B8:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE55FC36D30911EF9D441A89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.68.0/22
Signature Algorithm: sha256WithRSAEncryption
55:5d:c8:7b:1f:9b:85:15:f7:ee:a7:83:78:9e:70:ad:e5:ad:
fa:b2:cb:d2:f1:f5:1c:0e:2d:7c:d4:a3:57:92:79:d7:ce:8d:
5b:c2:05:98:92:2d:85:8e:ca:1c:b2:ce:27:00:0e:39:89:b9:
32:8a:e7:c0:cf:3a:08:88:d6:09:78:76:57:10:d4:df:40:2e:
23:24:03:5a:0d:16:5c:43:0c:ca:03:13:50:05:a8:64:ce:45:
01:27:08:db:5c:b5:76:b8:d6:c1:01:3e:06:35:a4:2e:8d:c4:
0b:cc:ac:12:47:00:67:1f:8e:15:c4:6d:24:8a:0d:79:1a:20:
96:7a:05:49:62:1f:61:66:c7:65:eb:69:da:67:05:85:f4:5f:
5f:11:67:30:83:98:cd:18:e0:b8:c7:52:29:66:45:58:49:f7:
97:e9:46:e9:c8:e7:e5:c7:f8:e6:89:d3:a9:1c:30:eb:d0:46:
39:1c:12:1b:d3:3e:3a:a2:9f:f4:62:a8:e8:ad:49:88:ce:19:
33:c0:b2:6d:f5:3c:ed:0f:29:a4:06:83:8e:34:04:38:16:56:
f5:2d:c7:3c:71:07:63:4f:fa:90:0c:cd:b3:5e:9b:6c:9b:34:
23:79:61:24:dd:e4:4a:69:e8:2f:78:c6:c6:7c:de:2e:b3:79:
49:d5:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:01 2025 by rpki-client