Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0464C8F2CD9A11EF947DD488762E951A.roa
File: 0464C8F2CD9A11EF947DD488762E951A.roa (raw, json)
Hash identifier: rLti0DdFA2VnOG3DbO99EP7CstEh8ZJJIu74lX1WfwU=
Subject key identifier: 7B:22:8F:5A:67:90:BF:9B:3A:A0:38:07:53:79:4C:7C:E0:73:65:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01007B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0464C8F2CD9A11EF947DD488762E951A.roa
Signing time: Wed 08 Jan 2025 08:24:45 +0000
ROA not before: Wed 08 Jan 2025 08:24:42 +0000
ROA not after: Tue 16 Dec 2025 08:24:42 +0000
asID: 984
IP address blocks: 156.249.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65659 (0x1007b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 08:24:42 2025 GMT
Not After : Dec 16 08:24:42 2025 GMT
Subject: CN=677e364d-1a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:66:60:5e:3c:3e:09:3d:82:c4:13:ed:a6:
37:12:01:5f:04:ab:07:f4:bc:ff:ce:c3:77:fc:6f:
83:6a:0f:ac:20:ad:a9:3b:f2:7b:62:de:d0:7e:bf:
18:72:74:51:67:79:45:b7:78:a0:00:2c:31:33:e3:
93:69:e4:b7:8a:d1:6b:80:68:30:97:48:1a:5d:47:
a3:15:30:44:f9:3f:2c:16:4a:7d:a8:92:1e:74:20:
83:9c:3d:29:4b:5d:90:19:37:fc:33:69:13:6f:29:
8d:1c:23:33:bb:7a:e4:79:d3:9a:ea:93:52:b4:9a:
4b:2a:a8:19:3a:39:99:63:5c:33:60:7a:b3:3e:9a:
a4:e3:ab:24:b5:5f:89:e8:de:d5:15:ac:fa:ad:08:
28:5e:81:6d:1b:b5:ef:27:89:71:bc:80:75:05:b1:
e5:b1:7b:2f:ea:81:3a:0c:09:be:51:60:36:d5:b2:
40:ec:50:b9:c2:1d:a7:cb:b9:fe:19:85:eb:de:e1:
58:f5:4f:cf:51:21:0f:64:22:70:4c:91:5d:b6:d9:
33:21:9b:1c:6d:aa:dc:c4:ce:d2:79:d5:7f:75:a3:
c8:f0:f2:ab:13:20:b0:1a:06:53:64:ad:f3:d9:ae:
60:78:3c:0d:38:ea:e4:d3:ea:ea:61:de:19:37:57:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:22:8F:5A:67:90:BF:9B:3A:A0:38:07:53:79:4C:7C:E0:73:65:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0464C8F2CD9A11EF947DD488762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.80.0/24
Signature Algorithm: sha256WithRSAEncryption
60:90:3c:00:d6:57:02:3a:f2:da:1a:45:c7:93:42:b3:3c:a3:
11:ef:66:eb:b1:55:21:78:83:87:6d:92:a6:4f:67:6f:c8:d5:
ac:dd:c0:78:53:b6:d8:b6:86:73:c6:a2:7e:e1:40:b7:84:db:
41:de:df:55:0e:d5:45:e4:4e:8a:a1:38:6b:05:e1:66:cc:bf:
d2:53:fc:68:ef:5d:3f:fb:1f:82:e3:67:58:8c:45:24:1a:7f:
d2:70:a8:ba:01:53:f2:09:ab:87:b9:61:e7:ff:e3:a7:b2:72:
94:6b:28:a7:cd:e5:58:25:a3:14:3a:89:4f:e8:86:24:72:f5:
be:7d:5d:75:f7:3b:96:c3:50:51:10:e2:12:a4:06:09:21:d8:
85:05:ee:38:55:fa:1f:e8:e4:89:7a:96:30:f9:b0:c4:42:75:
1b:dc:00:4b:49:99:45:ad:1b:75:df:f1:71:5c:f3:59:52:9c:
12:9f:33:28:1f:4c:77:f7:89:5d:f4:24:7d:f1:80:27:07:58:
44:bb:ae:17:d2:cf:b3:a1:88:c4:ff:50:1c:11:31:a6:d7:bc:
08:dc:72:1f:ed:26:e6:2f:96:28:cd:d3:41:6b:6e:da:8e:87:
37:92:8b:da:4d:f8:81:15:5c:80:9c:b5:cc:49:ed:00:d2:93:
0f:5e:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:04 2025 by rpki-client