Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1049F3ECC96011EFB0154999762E951A.roa
File: 1049F3ECC96011EFB0154999762E951A.roa (raw, json)
Hash identifier: KecZohatWG/grRElXIzytM+O/u1eU6+5Otid/fTI+H0=
Subject key identifier: F9:24:2E:11:EE:F4:21:43:02:93:4C:E6:67:36:77:77:0F:B0:00:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F456
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1049F3ECC96011EFB0154999762E951A.roa
Signing time: Thu 02 Jan 2025 23:19:50 +0000
ROA not before: Thu 02 Jan 2025 23:19:46 +0000
ROA not after: Mon 13 Dec 2027 23:19:46 +0000
asID: 17561
IP address blocks: 156.226.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62550 (0xf456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 23:19:46 2025 GMT
Not After : Dec 13 23:19:46 2027 GMT
Subject: CN=67771f16-5064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:a6:72:be:d0:45:74:2a:b9:8b:86:e6:e7:
68:92:7a:99:82:2e:ea:27:3c:8c:ba:6c:a5:98:9b:
19:2f:2d:5e:66:07:a7:e8:4d:1e:d7:69:e0:f9:ea:
71:13:12:be:93:3d:83:c2:33:b3:83:bf:9c:fd:6f:
34:38:86:44:fc:33:6c:50:4a:32:22:12:d8:f5:d0:
79:2b:0b:ba:86:e2:30:72:5f:38:9d:53:ed:c1:24:
a1:66:f4:e3:0b:7e:8f:1d:a2:1d:79:6f:41:9e:3b:
98:6b:32:9e:80:c9:02:22:62:b9:35:d6:f5:bf:dd:
05:9d:6c:3d:08:78:e9:2e:a9:af:2b:dc:d5:cb:bb:
c2:f5:78:b9:fd:39:d9:1a:59:df:f2:0d:d2:bf:03:
65:e4:34:51:e9:05:8d:4a:3b:c9:a9:ab:f1:51:25:
fc:06:28:1b:0e:b3:b9:fe:1b:f6:d4:a2:30:f7:db:
20:8b:ec:52:be:88:9e:0d:cd:d9:99:c0:ee:be:45:
ae:20:05:05:75:41:d0:b2:2f:97:2d:78:ce:90:68:
61:36:74:cb:49:cb:f4:eb:f4:72:fe:e9:9b:8b:30:
d5:5a:08:90:7a:99:e6:d3:8a:8b:e6:ff:ac:69:c9:
17:33:13:75:2b:21:51:de:78:0f:05:dc:97:36:2c:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:24:2E:11:EE:F4:21:43:02:93:4C:E6:67:36:77:77:0F:B0:00:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1049F3ECC96011EFB0154999762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.221.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ce:f2:99:25:22:48:9c:3b:0e:ca:18:d4:84:66:7e:72:75:
59:a5:a7:c5:6d:06:69:91:50:74:1b:26:7c:9c:5f:3f:4e:4b:
b9:f4:5a:6f:3f:c8:30:f8:1f:a3:51:d5:5a:ea:39:df:99:33:
fd:ea:19:ff:64:3a:3e:24:b1:c1:f8:cb:e3:07:16:6a:06:5b:
85:5c:32:9c:52:25:5a:bd:7e:29:3c:aa:5f:0c:8b:c6:9c:08:
0e:a2:ad:80:32:17:ff:3e:54:23:02:d8:66:eb:3c:75:19:28:
95:66:62:45:49:0e:dd:fe:32:79:aa:2b:06:f3:91:76:73:24:
a4:be:54:42:92:d7:b0:95:25:11:d3:ec:54:6b:1a:94:86:59:
1f:8a:41:7f:7d:25:85:a3:5b:a7:7f:75:0a:58:cd:1a:2a:91:
fd:76:22:b1:44:82:0b:d8:3c:39:f1:00:ef:5f:ad:d4:b3:52:
cf:f5:d6:72:50:e2:1b:f7:ec:c6:92:95:95:10:e8:31:83:3a:
39:a1:7e:63:81:43:3a:53:a0:4f:5f:c2:bc:2f:df:63:ac:19:
3f:8c:c1:3a:99:5d:4f:d9:1f:fe:bd:ed:19:21:1a:1c:9c:c0:
cd:27:07:09:95:ac:ba:79:52:85:96:f0:a3:21:44:1d:fa:27:
19:8f:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:45 2025 by rpki-client