Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05BB2F0AD24711EF81B202AE762E951A.roa
File: 05BB2F0AD24711EF81B202AE762E951A.roa (raw, json)
Hash identifier: uupIPo9t4nS/jm9PsTCO3CxzGPDr+hRcoBXFxrN+9pk=
Subject key identifier: 01:8F:2F:81:08:7A:F5:E9:DB:42:13:97:EA:C9:03:B9:BD:03:32:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05BB2F0AD24711EF81B202AE762E951A.roa
Signing time: Tue 14 Jan 2025 07:13:15 +0000
ROA not before: Tue 14 Jan 2025 07:13:11 +0000
ROA not after: Tue 18 Feb 2025 07:13:11 +0000
asID: 214413
IP address blocks: 156.243.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67288 (0x106d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 07:13:11 2025 GMT
Not After : Feb 18 07:13:11 2025 GMT
Subject: CN=67860e8b-16b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:fa:6b:4f:08:8d:c8:eb:93:58:c6:61:de:
e8:10:26:94:c8:b4:43:a1:92:57:db:83:6c:1b:42:
72:8b:65:d6:1c:c3:23:ea:37:b1:f0:9e:41:10:03:
d8:97:05:44:be:68:38:9e:a9:1a:28:9e:34:8c:96:
56:bb:94:f7:ca:5b:6c:72:78:be:41:a7:64:b4:e8:
33:d7:0c:d5:2c:e9:e3:c7:12:28:20:83:a8:ef:5b:
bf:3f:8c:6b:5c:66:c6:91:ad:58:86:36:f5:60:28:
b4:49:83:33:32:0c:11:09:9d:7e:7c:d2:a1:e8:e0:
d8:68:3c:fb:f1:9b:1e:a2:e7:45:dd:4d:9c:c2:d1:
39:7e:91:26:c6:26:00:f0:44:6c:c1:37:55:f6:8c:
04:82:49:b7:cf:ae:5c:58:4e:66:d7:36:a2:9d:da:
7f:1f:89:9d:3b:e2:57:fc:1f:51:58:c0:74:69:04:
2d:18:11:9c:11:b1:11:d0:6e:d4:ac:ff:fe:76:90:
42:89:92:c6:20:8b:ba:93:c5:ef:d4:70:10:ac:01:
6c:dc:a0:3a:f2:29:f6:2d:76:12:04:a6:51:1a:ee:
cf:c5:a3:c5:fd:8f:f6:00:12:c2:7a:85:3a:45:82:
0f:1d:1d:f5:25:ce:d8:df:2a:b4:8d:67:b2:25:77:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8F:2F:81:08:7A:F5:E9:DB:42:13:97:EA:C9:03:B9:BD:03:32:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05BB2F0AD24711EF81B202AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:40:46:6e:74:d8:1d:a7:48:be:19:30:fc:6f:e7:cf:54:e2:
a9:d2:04:df:26:e6:cd:75:97:1e:2a:d2:4d:ed:c0:91:31:18:
bc:3b:64:35:fd:ea:e1:4c:cc:a2:92:f5:93:04:0c:9d:38:49:
c6:7a:31:cc:22:25:60:68:56:c0:61:44:5b:69:81:38:ef:9c:
52:a3:73:50:b4:92:1b:de:28:da:dd:c5:e1:eb:6e:c2:7c:a2:
9e:ed:ed:36:46:96:01:20:07:a0:a1:e4:ce:9d:84:ce:3b:b5:
20:e3:b9:5d:f4:fd:d8:d7:a4:70:f5:bf:46:21:65:99:39:bb:
e3:61:3c:81:c1:10:9b:0f:86:63:56:e9:31:64:60:87:d4:95:
22:68:83:e1:a3:2a:f5:8a:fe:66:b4:a8:0c:77:4e:75:02:5c:
db:e4:64:a9:1a:3c:4d:5b:dd:5d:26:71:0c:de:92:1c:f3:f9:
75:52:3d:3e:90:3f:03:fc:05:e7:ab:ab:de:b4:f3:a4:21:3a:
a6:0b:8f:08:d9:1f:1e:e3:2a:1b:ec:d5:b6:49:b3:69:c8:e9:
3a:cf:a5:66:91:5f:4a:2f:39:a0:f8:a1:dd:95:6e:9b:e8:6b:
02:cf:a0:84:18:6a:f0:13:46:91:9e:bd:68:dd:cf:ab:35:55:
a4:3d:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:42 2025 by rpki-client