Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B1B91CAD2F411EF9B58C97E762E951A.roa
File: 1B1B91CAD2F411EF9B58C97E762E951A.roa (raw, json)
Hash identifier: UrTfQ/BeNx8B6JDxI2Q4ca4O2n0dI6QhQm51XSFAxPU=
Subject key identifier: 18:65:94:B4:A7:FC:91:69:6C:9C:97:E5:09:A2:FC:80:27:54:C8:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010795
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B1B91CAD2F411EF9B58C97E762E951A.roa
Signing time: Wed 15 Jan 2025 03:52:14 +0000
ROA not before: Wed 15 Jan 2025 03:52:10 +0000
ROA not after: Sat 03 Jan 2026 03:52:10 +0000
asID: 984
IP address blocks: 156.249.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67477 (0x10795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 03:52:10 2025 GMT
Not After : Jan 3 03:52:10 2026 GMT
Subject: CN=678730ee-6b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:40:62:cb:02:de:21:19:57:78:62:ce:00:
4d:18:70:50:58:d9:6b:ae:b3:8d:75:5d:4c:b2:7b:
e9:80:fc:71:4e:e4:dc:68:d0:96:f8:3a:50:d9:77:
f9:74:eb:07:e1:43:cb:76:a2:ea:04:c8:c5:f4:45:
2c:cb:8c:b7:64:b7:08:20:ad:c6:81:5a:a8:99:df:
b7:e4:cf:72:4c:b9:fb:5c:5a:19:a4:45:2d:74:be:
d1:8e:a9:67:75:25:86:25:69:cf:1c:ee:14:41:95:
71:35:e9:d0:30:06:6e:ff:15:cc:44:e6:2d:97:6c:
67:d7:bc:cc:80:04:c3:8e:26:69:cf:6b:41:33:50:
09:74:5c:95:e9:ed:4a:84:b2:61:f5:94:91:2e:5d:
90:17:53:61:f2:74:95:87:fb:c2:e2:76:6d:69:f7:
6e:f3:09:2f:16:63:fa:3b:79:76:80:84:c2:41:48:
c5:b6:7a:48:c6:66:2d:fe:85:c0:67:58:8d:c1:2a:
ab:f9:dd:1a:26:ef:34:46:83:29:21:4a:94:12:ff:
91:f7:71:25:89:dd:ff:18:f0:92:37:37:3a:9e:5e:
d0:04:dd:26:04:94:d4:05:bd:7e:0b:e7:61:c0:ce:
6e:7f:40:06:10:d8:a5:5b:de:07:cf:2b:ed:1a:ee:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:94:B4:A7:FC:91:69:6C:9C:97:E5:09:A2:FC:80:27:54:C8:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B1B91CAD2F411EF9B58C97E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d6:c5:bb:6d:3f:7b:b3:e6:07:dc:0a:8d:3b:ed:51:21:e2:
58:f3:7c:24:88:05:ac:80:61:6d:2b:fa:74:83:99:f6:97:9c:
a2:48:e4:52:50:1a:30:28:74:ed:64:26:2a:07:7e:bb:14:63:
e1:eb:53:bb:ad:b9:72:23:14:40:38:1a:b0:50:99:64:98:48:
cf:b0:53:7a:c7:50:f4:8d:0a:15:a9:11:7b:af:6d:bd:a2:12:
75:f3:2a:8f:bb:71:11:89:40:8f:67:15:26:30:c1:c2:37:5b:
ce:3d:05:f6:78:a5:36:7f:39:51:22:fd:40:e8:1b:45:42:23:
94:fd:b5:e3:37:16:b3:0f:9b:09:cd:49:60:0c:42:a7:2a:9f:
39:dd:19:d4:1c:33:c0:82:38:16:56:3f:fc:35:7e:c2:8c:40:
8a:29:4d:b5:65:da:0a:12:f7:4a:c3:aa:59:d4:34:0d:bd:05:
ff:3f:83:54:1f:f3:da:a0:97:d0:da:b9:94:e3:f5:e6:cc:f4:
b4:e0:29:43:73:0f:b9:50:7c:2e:b4:a1:d6:ef:d4:8b:eb:1b:
4b:48:06:a0:5c:dd:42:fc:0a:27:2e:1d:fa:0a:9f:56:a2:b6:
a1:de:dc:b2:52:8d:27:13:ba:61:7d:e0:2b:76:af:58:95:92:
d3:af:3d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:54 2025 by rpki-client