Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B249DECBD611EFAA95DDBD762E951A.roa
File: 00B249DECBD611EFAA95DDBD762E951A.roa (raw, json)
Hash identifier: sBd7Jsq9+gGbnSsz3hGjtafiv4/UQLycpQE/QYGrbeM=
Subject key identifier: 23:1F:F4:09:3F:29:65:77:FF:7E:2B:CE:F8:3E:AB:C7:9F:49:7B:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B249DECBD611EFAA95DDBD762E951A.roa
Signing time: Mon 06 Jan 2025 02:29:07 +0000
ROA not before: Mon 06 Jan 2025 02:29:03 +0000
ROA not after: Sun 09 Feb 2025 02:29:03 +0000
asID: 11404
IP address blocks: 156.237.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63446 (0xf7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 02:29:03 2025 GMT
Not After : Feb 9 02:29:03 2025 GMT
Subject: CN=677b3ff3-771a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:71:2c:d3:5d:b9:be:44:38:9d:e0:f2:d5:
c9:21:5c:e1:9d:b4:eb:b5:aa:38:99:a7:05:32:37:
f2:ad:0b:eb:62:cc:08:a3:16:a0:bd:ef:bb:b0:90:
f6:93:51:60:2b:d0:60:40:9f:04:a1:9e:c1:2e:9d:
3a:42:c4:82:6e:40:5a:fc:b4:25:a5:53:15:4c:0e:
0b:26:42:1e:48:13:19:0a:98:e3:55:7c:5d:dc:da:
da:de:f0:03:65:0c:24:d3:7a:ec:38:06:3a:66:7d:
97:35:b8:11:43:79:a9:c4:fa:05:b7:38:19:9c:67:
80:4b:e8:2a:06:4d:d0:3f:54:50:c8:80:1a:d4:dd:
0d:8d:98:57:8c:1f:b6:8e:03:3f:9f:21:6e:66:ed:
83:e2:d3:da:d7:5f:06:3b:12:7f:9b:26:9f:65:45:
6d:61:c2:65:55:fa:b6:94:5d:23:7e:b5:b6:5d:3e:
20:1f:28:e4:7a:e8:ad:57:c8:8a:4e:44:19:c3:6a:
21:58:ce:4d:30:18:ba:25:7b:23:c8:86:0a:87:9f:
69:33:4d:38:46:76:d0:c2:0a:19:73:b8:27:b5:fa:
57:e1:a0:19:c6:09:ea:4e:f9:ff:a9:6c:1a:07:d0:
db:4a:ef:c5:b9:b3:a2:0c:96:45:af:a8:c4:b4:c0:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:F4:09:3F:29:65:77:FF:7E:2B:CE:F8:3E:AB:C7:9F:49:7B:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B249DECBD611EFAA95DDBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:1a:34:b9:4f:88:94:01:4d:71:33:35:be:ae:c7:87:ba:26:
42:c7:a4:10:1a:dd:b9:38:9c:5e:9c:10:58:fa:0f:26:f6:ad:
69:31:63:1d:9a:6e:27:96:eb:e9:4c:09:cc:0a:ba:95:8c:de:
ac:6e:e9:bb:be:47:37:61:9a:d7:63:95:6e:30:ce:9b:8b:24:
16:98:9c:b1:26:54:2f:7c:00:5f:68:a7:b6:a1:10:ee:8d:28:
a0:e1:3e:82:e1:04:83:52:8a:a4:7b:7e:25:f0:7a:93:a5:57:
23:a9:d9:ed:a0:7b:7c:10:15:cf:6d:d1:b0:92:f1:9b:72:38:
4e:a8:86:7e:e0:30:40:38:73:9d:40:27:1e:5f:55:3f:c4:ac:
15:5a:ba:20:79:64:2c:43:36:7f:56:6a:2a:3c:89:7d:2f:a6:
d6:0d:99:6b:65:ce:f0:12:0f:95:7a:b9:af:ad:cf:84:77:aa:
fc:c7:55:3a:86:df:4d:98:4b:bc:c9:99:61:ca:78:1c:e7:22:
fe:fe:67:7b:6b:4d:c0:7c:1c:58:bb:fe:2a:81:cf:e9:40:da:
7f:ad:e5:2b:31:ee:f9:06:8f:98:d7:79:be:d0:98:ea:0c:97:
cb:70:ec:da:0c:b0:b5:21:b1:07:2e:d1:7d:6f:63:59:2d:26:
b9:2f:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:07 2025 by rpki-client