Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18712708CD9C11EFBFB64795762E951A.roa
File: 18712708CD9C11EFBFB64795762E951A.roa (raw, json)
Hash identifier: 5iiRVA0KwEMbFYA9j/wtr3s2/l5CzIDcBviRsdtRelA=
Subject key identifier: 8F:B2:A2:21:8F:88:44:21:BE:67:DA:19:56:8D:2C:EB:47:47:C1:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01008B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18712708CD9C11EFBFB64795762E951A.roa
Signing time: Wed 08 Jan 2025 08:39:38 +0000
ROA not before: Wed 08 Jan 2025 08:39:34 +0000
ROA not after: Tue 16 Dec 2025 08:39:34 +0000
asID: 984
IP address blocks: 156.249.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65675 (0x1008b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 08:39:34 2025 GMT
Not After : Dec 16 08:39:34 2025 GMT
Subject: CN=677e39ca-1047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:38:ed:22:33:a4:89:e7:04:0c:91:13:41:
88:5a:b8:77:a3:61:95:fc:24:26:a7:c2:62:93:3d:
ac:4b:cd:16:ae:d0:a3:2e:49:2e:14:d3:52:50:a5:
37:66:59:80:5e:7b:ff:b0:61:1f:32:25:47:30:88:
48:29:a5:66:bf:97:96:55:3c:5a:ee:9e:91:4d:9f:
d1:7c:e3:87:a1:f6:7b:a8:04:13:80:b0:ed:4f:fd:
a9:70:04:6d:46:ba:e9:7e:e5:19:31:d6:81:42:5e:
38:55:7f:fd:11:67:6c:6d:91:0c:85:7e:d8:3c:b6:
a1:ea:2f:7b:e3:0e:a4:7f:d0:a8:eb:9e:d4:0e:df:
6e:56:81:9f:67:a2:5d:9a:a4:b0:e4:bd:48:7c:70:
b7:9a:e9:4e:b6:66:fb:b1:92:b3:ad:a3:6c:66:c7:
ff:3a:f3:fe:6d:92:13:f5:16:39:be:bf:82:c3:c3:
95:95:60:2f:65:55:8e:29:51:08:bb:98:37:3a:23:
3c:c1:2a:7f:c3:4f:6f:8d:18:2f:56:31:82:2d:73:
d4:8e:f8:8c:6b:6d:88:6a:4a:7e:2d:36:26:f1:f9:
fc:1a:b3:1b:38:c4:8e:df:2c:1a:17:29:27:e7:6f:
ff:c4:cb:68:ff:db:19:df:8d:b7:fe:6f:f1:87:c4:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B2:A2:21:8F:88:44:21:BE:67:DA:19:56:8D:2C:EB:47:47:C1:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18712708CD9C11EFBFB64795762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:30:6a:8f:94:f5:c5:ae:15:f8:a8:56:5b:b5:8a:6c:46:bf:
4a:3e:1c:e8:6e:f0:44:58:f4:68:d9:53:c3:c0:d6:d4:13:9a:
49:49:fe:bd:1f:c4:ca:12:4a:3a:e7:9c:7b:94:63:00:09:7d:
be:84:92:90:77:99:54:9b:8c:b3:66:c5:69:0d:80:1e:14:30:
f2:13:28:1f:d0:a3:b1:97:5d:67:64:d4:73:8e:24:50:86:20:
79:10:46:1e:eb:ed:ee:7e:eb:5a:48:c5:e3:29:c9:6e:11:1c:
99:32:c4:60:ec:29:1c:d1:88:10:d6:d9:59:f8:f6:05:f5:7b:
ef:9e:86:27:d1:c5:0e:c0:1f:f6:a3:1c:b9:14:23:48:28:7f:
ad:b3:1b:62:94:03:e7:68:a6:24:da:96:b8:1e:8d:4f:07:c0:
b3:a1:d8:5f:1c:66:53:b0:67:74:32:f8:79:f4:9a:cd:c0:2d:
ce:b0:e7:c9:20:6d:99:57:47:a9:32:c9:54:19:55:ca:d1:44:
ca:a1:31:a7:8c:50:cf:86:c8:26:d5:ca:48:03:d2:1b:79:f6:
8d:07:b2:95:a6:46:52:18:37:ea:03:a4:b4:44:43:64:0c:71:
fe:52:b5:f3:ad:9f:34:13:3d:d3:2e:8f:ef:c0:33:46:69:55:
f3:48:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:52 2025 by rpki-client