Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/162AA6B0CD7711EFA295B8AC762E951A.roa
File: 162AA6B0CD7711EFA295B8AC762E951A.roa (raw, json)
Hash identifier: 1gpboZaMmI9glPa0xVvipLPOmGPcK8CLvJRW5Flk7sA=
Subject key identifier: A1:43:CE:D9:D9:0E:E7:DC:80:82:8C:2D:A6:2B:66:75:12:6A:70:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/162AA6B0CD7711EFA295B8AC762E951A.roa
Signing time: Wed 08 Jan 2025 04:14:43 +0000
ROA not before: Wed 08 Jan 2025 04:14:39 +0000
ROA not after: Mon 13 Dec 2027 04:14:39 +0000
asID: 17561
IP address blocks: 156.250.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65465 (0xffb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 04:14:39 2025 GMT
Not After : Dec 13 04:14:39 2027 GMT
Subject: CN=677dfbb3-a118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:5c:75:94:d1:d7:51:59:79:a0:26:84:23:
38:a0:11:14:00:f9:97:73:f5:69:40:02:38:2d:ad:
bb:a2:fc:d6:da:b0:59:86:0f:51:d8:a5:37:74:37:
39:77:3a:3b:53:7f:13:57:22:5c:30:f0:20:c0:47:
9a:90:2f:b5:6e:d6:54:99:16:e9:43:58:a9:1b:b9:
40:4e:ce:86:df:19:62:a9:3e:0f:05:c3:10:8f:01:
a2:d9:98:ee:67:6f:2a:c6:2a:af:00:a5:2d:bb:c3:
3e:bf:16:c8:bc:5e:67:01:3c:30:eb:91:7e:4a:92:
e0:eb:0c:fe:e4:72:0c:dc:e9:14:31:ad:f4:f3:f1:
72:88:7d:22:ee:24:08:16:fd:81:3b:fe:47:27:be:
29:64:b4:bd:a9:f6:06:0d:e9:a4:e6:79:00:92:08:
13:56:b7:e2:9f:ce:a6:06:83:a9:ce:1a:94:1b:ef:
16:bd:c5:44:99:5a:f1:89:b9:9c:9f:cb:47:29:2a:
85:4c:29:8a:5c:dc:be:a2:f8:7f:37:b6:7c:f9:27:
e3:b4:89:9e:9d:88:cb:e0:8d:e1:01:85:dd:e3:c8:
2b:5f:e1:fa:ac:7a:47:00:27:d0:0c:e0:b1:ad:2a:
44:63:69:13:94:81:e7:e4:4c:7f:32:23:c7:c1:a5:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:CE:D9:D9:0E:E7:DC:80:82:8C:2D:A6:2B:66:75:12:6A:70:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/162AA6B0CD7711EFA295B8AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4c:e1:a8:e7:85:fd:e2:48:be:d1:99:33:cf:d2:56:b8:9c:
e2:27:06:ec:13:8e:e9:fc:bd:ff:7d:4f:c2:e9:3f:36:6b:cf:
dc:93:0a:bb:9c:b7:fc:1b:de:5d:16:d8:22:cb:0d:29:57:f7:
2d:3b:ab:a5:e8:60:77:1b:63:74:28:35:55:24:be:a0:a0:03:
23:c3:73:29:44:67:9c:56:d9:b2:3f:be:c2:04:82:09:96:4f:
72:0d:5e:2b:48:e9:b3:87:60:4b:87:59:e2:c9:27:9a:93:7f:
9d:bc:0f:b6:d6:f5:a1:8f:b0:d7:48:b9:54:e5:7f:71:46:73:
41:49:57:34:af:43:0b:c8:2f:90:01:ab:58:15:21:0b:5e:3f:
2a:74:56:6e:5d:e9:3d:e2:98:fa:c1:84:bd:aa:92:75:a0:1e:
28:a3:f7:41:85:df:26:52:5e:08:58:0e:55:67:fb:73:18:a4:
0f:8f:3d:6a:af:cb:ff:91:89:d1:c2:c8:60:04:ae:98:2c:62:
12:d3:fc:ba:6f:a8:f6:23:59:03:f6:4c:bd:d8:91:f3:35:d9:
25:65:d9:0d:d5:d4:ba:67:e0:a3:74:c6:d0:85:09:ec:2d:07:
5e:97:6e:c9:3f:14:57:26:f2:3b:f2:09:17:25:60:62:33:fc:
8b:3c:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:46 2025 by rpki-client