Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14D9242CCCAE11EF9AD339A5762E951A.roa
File: 14D9242CCCAE11EF9AD339A5762E951A.roa (raw, json)
Hash identifier: +HAVG3c7ZUBClzjkzTltU53eNP+S9nqOEzLzc9HDx2I=
Subject key identifier: 19:C9:CA:E6:44:F1:92:64:E0:89:AC:D3:74:50:CC:54:57:DB:7D:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14D9242CCCAE11EF9AD339A5762E951A.roa
Signing time: Tue 07 Jan 2025 04:15:52 +0000
ROA not before: Tue 07 Jan 2025 04:15:48 +0000
ROA not after: Sat 13 Dec 2025 04:15:48 +0000
asID: 984
IP address blocks: 156.232.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63968 (0xf9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 04:15:48 2025 GMT
Not After : Dec 13 04:15:48 2025 GMT
Subject: CN=677caa78-cc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:68:f8:db:0d:62:d4:74:7d:bd:7f:96:d8:
73:c4:b9:43:f0:93:c7:b7:5a:3a:d3:f8:7d:32:4f:
aa:99:63:b7:08:ce:02:ef:04:4c:f0:db:29:40:08:
8b:dc:68:ea:93:01:c0:c7:89:f5:2b:22:bf:4f:19:
52:65:cb:dc:9a:1b:42:b3:25:d0:de:09:84:53:29:
c4:ed:7d:4b:dc:b2:b7:bf:fd:71:ef:9f:77:ad:93:
5d:fd:75:5c:6b:97:ae:45:05:d1:10:33:50:64:82:
d9:10:09:ac:05:e6:58:c3:69:66:3b:d1:f4:92:24:
b4:ac:b9:0d:a8:b7:14:ec:c0:04:58:35:7a:a3:e7:
62:98:48:32:0d:9f:74:44:f5:2e:3b:98:96:52:c2:
42:84:e5:a2:b3:fc:e0:d1:d2:0c:3f:86:c3:6e:b2:
04:3e:3a:98:78:cd:a7:e1:b4:b5:05:f9:13:ba:bd:
ff:38:ff:0f:6a:a8:10:f8:33:a9:15:e3:dd:c6:cf:
24:62:20:05:10:91:86:08:1b:60:f4:39:30:81:ea:
38:1f:f6:61:05:66:b1:46:d9:64:83:97:41:c8:39:
f1:da:3d:9a:63:06:fe:18:08:01:32:d9:b8:1a:e4:
1d:80:06:2c:5d:ae:72:51:51:c6:48:de:75:4a:27:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C9:CA:E6:44:F1:92:64:E0:89:AC:D3:74:50:CC:54:57:DB:7D:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14D9242CCCAE11EF9AD339A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6a:2b:97:e6:da:f0:ca:08:32:8a:67:46:13:5d:29:92:b9:
8e:88:b8:65:4e:a2:44:ff:d5:f1:ea:e9:bb:05:07:6e:b8:73:
c8:67:a0:81:53:1a:8c:6a:ca:93:06:46:3d:ad:f4:62:26:14:
85:3a:68:d0:42:f4:52:11:d6:1a:0d:84:60:46:40:97:47:0c:
9d:e9:4d:cb:47:3c:51:e3:b5:88:d3:d1:30:fb:ce:8f:5a:6c:
ea:0b:ae:07:ac:51:93:ab:2a:c3:b0:df:0d:cf:eb:39:a8:32:
46:99:93:19:18:e3:9f:9f:0e:3c:65:2a:a3:3b:bd:a5:3a:a4:
27:1b:b4:a6:13:9f:be:38:91:df:b5:93:7a:73:33:4e:e2:e7:
4b:45:a3:d1:6d:5d:ad:60:3d:89:c8:2c:9e:fa:e7:f1:54:4d:
22:73:1e:01:41:3b:47:5b:0d:e2:54:57:a5:1a:d3:06:0a:f2:
50:6a:6b:d7:f8:3a:03:b4:ff:0e:c2:cb:1b:ab:7c:e0:ba:ae:
54:4d:a9:4d:a5:73:12:ba:a3:3d:32:7c:c1:e6:6c:d4:1c:6f:
d7:ac:2f:65:ad:be:40:89:e4:16:e4:58:c0:57:3b:77:69:a6:
2a:ff:5b:44:0b:f4:f8:ba:73:73:64:03:ca:25:29:f9:76:5b:
38:ac:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:32 2025 by rpki-client