Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20099C8AB5F911EF8EC24583762E951A.roa
File: 20099C8AB5F911EF8EC24583762E951A.roa (raw, json)
Hash identifier: 8ZHXtsX3Mxzt3k2/Hc4SvCdkwe0dEFjomF3Z+WpUEtM=
Subject key identifier: 0E:FA:A2:75:C1:70:F4:99:5B:5A:C2:38:18:39:F3:28:EF:F0:A0:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E13E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20099C8AB5F911EF8EC24583762E951A.roa
Signing time: Mon 09 Dec 2024 06:45:06 +0000
ROA not before: Mon 09 Dec 2024 06:45:02 +0000
ROA not after: Sun 30 Nov 2025 06:45:02 +0000
asID: 149014
IP address blocks: 156.253.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57662 (0xe13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 06:45:02 2024 GMT
Not After : Nov 30 06:45:02 2025 GMT
Subject: CN=675691f2-40d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:d9:2a:2f:f1:77:a9:6b:60:c1:f9:a8:dd:
98:c7:08:30:b5:b8:06:08:00:fd:b3:47:4a:d3:55:
e2:34:cb:00:15:2d:dc:85:4a:38:b4:0b:59:1a:5f:
ff:96:cf:ad:a8:9f:50:65:7a:72:39:b9:d1:19:58:
bc:dc:3f:c5:4b:0b:26:ce:7c:6b:6f:1d:ac:4f:0c:
97:9d:64:1e:29:0a:e9:2f:bb:aa:28:3b:22:81:69:
78:f2:8a:76:8b:a6:91:7b:61:7e:1b:b6:d3:9b:fe:
b8:9f:a4:4a:07:1c:30:25:ae:25:2a:11:8f:99:49:
76:8f:fe:c3:82:ac:d7:0c:18:2b:3f:3c:25:f0:44:
3e:7e:8e:78:39:a6:46:92:29:90:0b:e2:4e:4d:f2:
52:e1:6a:f0:77:3a:ad:a5:b4:78:49:0e:b1:b3:dd:
cb:28:bc:c1:16:df:71:ef:50:b7:28:86:b5:09:ed:
a5:18:45:0c:cc:0d:b6:1b:33:fe:10:95:b9:d0:5a:
2a:43:8c:2d:7a:8e:b8:3c:ff:c8:59:ab:65:40:19:
bd:a6:36:d7:ab:e1:6b:4a:28:9e:8b:1f:3e:76:63:
9b:89:27:63:df:f4:f1:f2:58:26:e5:26:14:08:5f:
ac:22:1e:31:d7:f6:ac:5d:05:59:7b:13:06:1b:2d:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FA:A2:75:C1:70:F4:99:5B:5A:C2:38:18:39:F3:28:EF:F0:A0:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20099C8AB5F911EF8EC24583762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.8.0/21
Signature Algorithm: sha256WithRSAEncryption
38:6f:88:52:c9:e6:7f:51:15:c1:f8:85:79:7b:f9:ac:98:4c:
6f:1c:ba:7a:e3:d6:ba:c9:1f:da:ca:43:35:ba:dd:93:04:59:
59:ec:2a:c8:40:10:cd:ee:73:e9:64:c8:4d:11:6c:5f:ac:75:
b6:a9:1a:1e:6a:b8:d9:d5:e8:a7:e1:5f:a2:cb:e2:0d:28:ec:
45:46:ac:a2:9a:ce:fa:5c:33:61:21:74:26:1c:42:a7:08:b1:
26:ac:70:05:8f:b8:2b:f5:b6:36:27:36:7f:17:92:58:66:79:
9a:0d:9d:ce:a7:75:41:c5:d5:45:d9:b0:49:e4:e2:90:6d:eb:
d7:23:69:34:6e:34:bf:32:6a:8a:e1:dd:65:15:ce:e9:64:69:
e5:ce:c3:1a:3a:78:8f:f8:41:1e:e2:a6:33:ea:19:7e:54:da:
4f:26:f9:ff:e0:c5:f3:0d:1e:00:b8:4c:23:5d:ba:18:c3:fd:
20:23:0d:07:4d:f9:7f:11:4f:77:a3:7c:53:48:3d:a7:9e:fe:
e4:ec:31:1b:94:be:8c:e3:7e:25:09:13:a2:b3:d6:0c:eb:00:
20:77:74:89:fc:42:0a:e2:77:c6:41:8c:b1:60:13:24:87:7b:
b5:00:f8:53:be:57:6d:85:99:82:19:8a:30:13:2e:e8:27:bc:
be:37:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:59 2025 by rpki-client