Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091AC8D0CD4811EFB98EDC6E762E951A.roa
File: 091AC8D0CD4811EFB98EDC6E762E951A.roa (raw, json)
Hash identifier: 67Lc/X9ouXK2+INCcoivxFA+17vH65vbIISrUG8SVuQ=
Subject key identifier: 50:6E:6D:58:F5:6C:B7:69:CA:2B:F8:07:81:83:C2:C3:AF:66:60:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091AC8D0CD4811EFB98EDC6E762E951A.roa
Signing time: Tue 07 Jan 2025 22:37:55 +0000
ROA not before: Tue 07 Jan 2025 22:37:51 +0000
ROA not after: Mon 13 Dec 2027 22:37:51 +0000
asID: 17561
IP address blocks: 156.245.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65191 (0xfea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 22:37:51 2025 GMT
Not After : Dec 13 22:37:51 2027 GMT
Subject: CN=677dacc2-14b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:2f:40:1a:2a:ce:18:3a:7a:8d:e6:a5:f4:
9d:18:5f:49:4d:f1:3c:ee:c5:5c:bd:4d:b7:7b:21:
98:77:67:ce:46:de:e6:d8:6d:32:3b:9d:11:c1:17:
69:6c:55:a3:07:ef:15:9a:f0:70:7e:67:40:fc:10:
15:39:c0:73:d3:23:01:2f:95:51:47:7d:c7:9f:33:
47:c6:8f:03:eb:91:e5:ce:67:e4:9b:c4:0e:db:ad:
df:65:6a:3c:83:95:1a:88:ba:7a:ee:29:ff:eb:bc:
36:62:b5:33:7c:27:44:15:2e:e0:89:d9:9c:20:e5:
57:0d:a6:50:1d:f8:b2:59:b8:d6:4c:a8:72:f1:3b:
be:7a:fe:50:56:c2:31:61:3b:2f:37:6d:50:ba:9e:
11:b2:a0:7b:5f:e1:16:b6:06:91:1d:e2:22:c9:01:
8d:fc:d3:6f:2e:a6:1e:43:fe:83:f2:ff:b8:fd:30:
0c:c4:f2:9d:e2:4b:18:d9:92:9d:98:19:58:1f:d1:
72:93:a4:e4:d6:2d:5b:9e:6b:45:db:53:dc:a1:a4:
d7:c8:36:a5:1e:79:bc:b0:48:bb:96:c4:40:ac:07:
c4:eb:2d:22:51:d6:22:73:d2:b3:1c:11:08:1f:d8:
cc:48:ea:89:32:d0:92:14:67:e3:bd:76:a7:0f:27:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6E:6D:58:F5:6C:B7:69:CA:2B:F8:07:81:83:C2:C3:AF:66:60:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091AC8D0CD4811EFB98EDC6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:37:a6:34:f1:61:c4:19:0b:93:41:f3:94:df:61:45:f2:ef:
b9:f9:1c:0b:2b:66:ab:f0:0e:21:49:5f:5c:3a:16:69:04:d9:
c1:b9:27:3e:d5:59:58:32:b8:cc:17:e1:74:b9:76:b2:21:65:
b7:59:0a:d3:77:79:67:8d:e1:4e:5b:05:6c:0a:af:d2:89:82:
00:b1:f9:b4:fa:21:dc:ef:9d:8d:c0:98:03:41:d5:98:f8:81:
3a:a8:e3:18:66:af:b7:ee:ab:6e:fe:18:c1:22:36:ad:6a:6e:
4e:0e:71:54:ba:74:59:0d:9f:c7:f0:03:4a:5a:b3:92:d3:b8:
e2:e9:50:ed:bd:15:8f:ea:e9:bf:27:0a:5a:52:94:72:1d:81:
6d:63:c4:8a:73:e4:15:9c:9c:3a:40:ca:26:0d:c8:cf:9c:bf:
7b:14:2d:33:d3:53:15:53:0c:af:e9:03:3f:29:3e:b4:1a:1b:
4e:5d:b2:22:86:3a:ef:05:9c:79:d9:95:15:9b:a5:cc:9f:80:
ca:05:b2:6d:13:eb:f1:a8:9c:83:1a:65:6e:8e:89:0c:3f:de:
b9:7f:88:0a:06:f3:bf:81:62:f6:f0:f2:7b:f9:91:9b:33:d5:
d9:b7:6c:3e:c9:7d:c9:d8:2c:dc:9a:3e:6f:aa:3a:d0:38:ec:
4f:b5:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:54 2025 by rpki-client