Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19C56712CD6111EFB0158891762E951A.roa
File: 19C56712CD6111EFB0158891762E951A.roa (raw, json)
Hash identifier: YNx+Gx7kxfnjrNAdK0lnpwoXzuWbUW0YK+bBkNHD86s=
Subject key identifier: 30:72:39:CA:1C:E5:14:FE:FF:CC:A9:5E:78:E1:35:B7:86:FC:81:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19C56712CD6111EFB0158891762E951A.roa
Signing time: Wed 08 Jan 2025 01:37:20 +0000
ROA not before: Wed 08 Jan 2025 01:37:16 +0000
ROA not after: Sat 13 Dec 2025 01:37:16 +0000
asID: 984
IP address blocks: 156.247.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65331 (0xff33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 01:37:16 2025 GMT
Not After : Dec 13 01:37:16 2025 GMT
Subject: CN=677dd6d0-c685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:7f:7a:67:03:3b:91:47:c8:2e:73:63:87:
da:07:89:aa:91:71:df:cf:51:69:a9:4d:0d:f5:31:
85:d9:a0:a2:5b:d7:d7:6b:92:a9:6f:10:d9:46:d2:
de:76:b7:5c:13:61:c0:78:7c:7b:41:a7:17:77:44:
a5:4b:12:63:37:cf:8e:5b:29:a0:84:2d:56:9d:45:
5a:d2:dd:49:40:cb:d9:95:53:46:67:1b:a4:ee:e2:
a8:76:e8:e6:0b:6f:85:5a:a7:b4:7e:8f:c0:40:6c:
8a:40:99:1f:a2:60:83:99:80:6e:58:37:df:2b:41:
0c:2d:2d:c8:eb:41:51:5b:d2:03:b5:0d:f4:09:10:
d1:87:6b:16:d9:1f:7c:7e:e7:e7:ff:56:8b:dd:18:
9d:a3:c2:fe:44:ff:03:30:fa:d3:3a:45:57:82:b7:
8c:e6:5a:bc:f0:1f:15:c6:ba:71:9d:d0:09:27:a2:
93:75:66:42:5a:9a:8c:93:55:86:36:98:f1:1b:25:
97:dc:59:c5:34:4b:58:a2:fd:f5:6b:97:1f:55:a2:
a4:2d:d8:97:97:0d:3f:79:0b:eb:82:1b:19:97:10:
18:81:c3:fc:fb:bf:97:37:43:4f:ce:9c:4e:bc:76:
6f:63:6f:51:5e:91:3b:05:7d:ea:55:ff:33:11:eb:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:72:39:CA:1C:E5:14:FE:FF:CC:A9:5E:78:E1:35:B7:86:FC:81:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19C56712CD6111EFB0158891762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.98.0/24
Signature Algorithm: sha256WithRSAEncryption
59:1c:61:e5:1a:a7:1f:c9:ab:bd:91:90:d9:6d:0b:f8:e2:4a:
15:89:d9:62:ec:e7:73:00:18:34:c1:9b:fc:4e:f6:fb:4e:2c:
c3:d8:fe:b5:cd:bf:20:df:17:40:ca:3e:17:0d:2f:49:66:0c:
18:af:d7:ea:00:d8:b1:ac:d8:48:2b:97:17:c7:83:4f:f6:33:
1f:22:70:6c:23:84:88:f0:01:8b:f5:de:d5:1d:bd:f4:84:2b:
45:86:80:10:02:cb:67:df:96:0b:be:b2:ab:8d:99:0a:57:9d:
b7:bf:ae:48:68:1f:16:e8:82:63:34:6a:c7:f9:a5:06:6e:3f:
24:15:cf:c3:70:cf:c1:de:0e:49:d6:6f:86:53:dc:f4:9d:fe:
34:51:5b:da:86:24:4e:35:8c:59:13:48:c7:c3:2f:98:29:40:
2a:ac:6e:e4:f2:9a:47:36:b8:c9:1f:01:7c:17:a7:bf:52:e5:
1b:f2:1b:10:7f:7a:e8:5b:c0:4d:9d:50:07:cf:85:d2:f4:9f:
b3:e0:43:8d:90:54:0c:16:9e:ca:2f:80:88:df:dd:47:e4:c3:
19:ec:e0:1d:1b:22:82:f6:12:35:fd:df:14:fa:c0:0b:54:de:
a2:68:3e:f2:4f:82:68:11:5b:16:d5:e9:6b:4a:e3:39:00:e4:
fc:54:ab:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:26 2025 by rpki-client