Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E505774C34311EF89478649762E951A.roa
File: 1E505774C34311EF89478649762E951A.roa (raw, json)
Hash identifier: 2wzD306rwf5Uq+FgpPa0pschXkrvslRpoS3QS/7sQTs=
Subject key identifier: B6:CD:5C:2A:A1:F2:EF:4C:7A:FE:60:DF:BC:3C:0C:75:D7:C9:13:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E505774C34311EF89478649762E951A.roa
Signing time: Thu 26 Dec 2024 04:37:31 +0000
ROA not before: Thu 26 Dec 2024 04:37:27 +0000
ROA not after: Fri 10 Dec 2027 04:37:27 +0000
asID: 17561
IP address blocks: 156.244.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60387 (0xebe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 04:37:27 2024 GMT
Not After : Dec 10 04:37:27 2027 GMT
Subject: CN=676cdd8b-6c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:3a:84:b2:43:b3:b5:94:1b:45:a4:33:59:
b4:12:43:41:89:d1:92:02:a4:86:ef:09:59:7c:eb:
21:1c:40:e9:58:0d:09:71:06:bb:fb:06:0c:71:69:
04:2a:cd:ac:f5:c5:a4:b3:73:7f:4d:c1:a6:92:ed:
a6:00:46:2c:e6:27:f6:00:6a:eb:0b:3c:48:ad:25:
b4:05:b0:1d:b5:dd:55:eb:11:51:e4:b8:1a:58:83:
7c:93:fa:28:42:b2:a2:23:5d:57:2f:b5:4d:95:7c:
a1:75:48:25:f2:de:1e:93:00:06:cb:5c:09:d2:59:
d0:bb:70:be:b5:e1:6e:d7:21:bb:0f:ee:34:44:ab:
29:7a:d6:dd:0e:76:41:fa:51:2d:62:87:35:b1:89:
96:2d:13:08:94:fd:a9:a9:92:13:4a:23:6b:bd:3d:
5c:c9:b3:92:01:8e:b8:b0:91:4f:94:27:06:df:de:
4f:df:76:9e:90:a4:40:3f:25:6d:ba:5e:f4:f1:ad:
d8:5c:56:72:26:83:64:eb:3c:f2:db:2f:14:28:52:
51:51:74:2c:39:02:ab:47:54:22:53:c0:f9:4a:d7:
09:78:ad:27:8a:13:c7:b4:69:77:94:7d:f9:de:92:
26:eb:b9:6a:1e:af:4d:da:21:0e:31:16:63:98:3d:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:5C:2A:A1:F2:EF:4C:7A:FE:60:DF:BC:3C:0C:75:D7:C9:13:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E505774C34311EF89478649762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:79:aa:26:67:ab:93:a4:84:e5:4f:54:eb:42:b2:51:bc:01:
ff:83:7a:cf:da:ff:d1:f9:eb:29:01:f4:f1:a4:ed:c9:db:6b:
48:8b:ca:98:63:20:49:3a:d7:2f:4e:41:14:4c:89:24:71:77:
4a:2c:d5:bd:77:37:36:79:71:25:ba:7d:a9:99:0b:63:1c:e8:
cb:46:b5:46:6a:3f:f0:40:d2:fc:8f:ea:67:5d:8e:56:fb:78:
a6:59:5a:0d:37:2a:88:ab:13:ce:84:8a:7a:bf:0a:d4:83:7a:
62:69:d4:f7:79:c4:c4:1d:7f:65:82:1b:61:e6:83:04:6b:d7:
0a:bc:e4:4a:38:ce:49:ea:5e:2c:80:12:38:d0:f8:b7:c7:cf:
34:74:8b:f0:f7:25:25:e7:59:87:45:53:c0:2e:3b:16:52:b1:
56:85:3f:0d:be:11:91:78:43:cd:78:98:34:6e:0d:a2:45:1c:
18:00:13:55:77:c7:42:8d:69:9e:5c:d1:f7:5f:29:cd:39:89:
a7:77:5b:58:e2:03:1d:9d:1a:ce:a1:3c:81:46:53:62:4c:6c:
96:e0:c7:bd:1a:4e:86:ba:59:f6:4a:8e:27:65:c8:c2:d3:a3:
3c:4d:10:e8:7c:ee:72:39:1b:5f:3e:2b:d5:ec:a7:3d:69:f2:
70:27:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:36 2025 by rpki-client