Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FA09040CCE411EFBEA6C478762E951A.roa
File: 0FA09040CCE411EFBEA6C478762E951A.roa (raw, json)
Hash identifier: NjMvDk56PreVUnXQnN5zmaxuo6c/xKW1pHxiG25u6F0=
Subject key identifier: 20:DC:4C:15:51:11:96:73:22:F7:88:A0:AD:F4:1B:AC:01:DD:FC:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FA09040CCE411EFBEA6C478762E951A.roa
Signing time: Tue 07 Jan 2025 10:42:16 +0000
ROA not before: Tue 07 Jan 2025 10:42:12 +0000
ROA not after: Sat 13 Dec 2025 10:42:12 +0000
asID: 984
IP address blocks: 156.233.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64445 (0xfbbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 10:42:12 2025 GMT
Not After : Dec 13 10:42:12 2025 GMT
Subject: CN=677d0508-0317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:db:0d:d7:36:0d:e4:cb:b5:2a:09:26:ea:
92:fb:67:fa:ee:3e:34:a5:2e:2c:e4:09:21:84:04:
6a:a3:96:bf:bb:64:95:f8:3c:31:44:5e:b8:fb:40:
c6:5e:b0:0b:13:6f:c5:43:cd:12:e4:af:20:4f:5b:
bc:7b:b6:6e:16:3c:58:69:da:4b:4d:bb:c7:4f:fc:
aa:ab:94:9a:38:b4:d1:0f:d6:84:79:c6:ba:02:c9:
71:8d:2a:83:bf:99:40:ae:99:10:95:7f:55:bb:e0:
44:1d:cd:65:47:80:86:5f:d8:25:1a:01:a2:78:bd:
28:fb:aa:2a:3f:2e:07:9e:da:48:fc:cb:d8:2f:11:
55:a8:c7:a9:ce:77:6e:58:3f:b7:d5:52:83:dc:cd:
2d:9e:03:7f:2a:e4:da:b5:f2:ed:05:1f:ce:75:7c:
af:8f:8d:a9:a1:d8:f9:8d:95:f6:49:2f:54:7d:7f:
6b:0e:2f:aa:1e:37:0a:60:7f:6a:6a:78:69:e2:1c:
ed:7f:5f:14:65:f0:d5:cf:93:95:46:92:79:fc:a9:
93:f5:1b:c2:9b:2d:8b:dd:72:81:68:86:90:3c:d4:
5b:99:8c:0d:8e:0f:9e:6a:a5:16:e5:65:18:5d:d0:
82:76:88:f3:41:6c:85:8b:a7:45:95:e4:22:88:c2:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DC:4C:15:51:11:96:73:22:F7:88:A0:AD:F4:1B:AC:01:DD:FC:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FA09040CCE411EFBEA6C478762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.243.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8c:f1:af:db:e1:4e:ac:08:cb:90:a8:39:a9:d6:48:1f:aa:
fa:51:fd:4f:48:a6:d4:e1:ab:82:b8:60:32:59:38:9d:17:19:
a9:09:f9:2a:4c:4d:96:56:0a:45:04:b2:b9:59:a5:a6:9f:42:
24:eb:00:e2:fe:56:34:70:59:85:2e:90:73:dd:35:d8:5a:1f:
6d:4c:d3:4c:48:cf:3d:50:4b:05:a4:92:32:74:1b:e4:d6:39:
65:7d:47:fe:dc:ba:48:15:70:f7:01:a4:02:93:22:51:f3:c3:
4b:a6:db:55:f1:68:2f:9e:ac:21:60:86:f9:eb:e9:91:2b:48:
36:4d:b4:72:27:06:ed:58:c6:4e:b0:90:3f:2b:d4:71:51:f2:
60:b7:ab:3e:1d:c1:99:7e:d0:0f:01:2b:3b:a6:a4:4b:34:68:
d0:15:81:ca:b1:64:b6:55:0a:87:d6:87:62:0c:47:dc:93:4c:
7c:cc:9f:a9:8f:5e:a9:56:4b:32:d1:1f:ce:fa:2e:69:10:a4:
42:5c:ca:97:20:0d:0e:69:fe:fa:64:e5:0b:04:7e:72:28:a9:
a6:ee:9e:cd:9c:ad:e4:0e:6e:6f:88:93:74:50:9e:da:8f:0b:
fd:a7:e7:9f:14:49:a3:14:7e:4e:4c:65:c8:0c:40:c5:60:a4:
ad:aa:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:23 2025 by rpki-client