Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269930ECC33211EF87537858762E951A.roa
File: 269930ECC33211EF87537858762E951A.roa (raw, json)
Hash identifier: Y9n4/vQ9S077tsg+/tfgKOQ3sbA6meySm2RnygnrWew=
Subject key identifier: 14:3D:97:D2:CF:6F:D7:0B:FC:9E:1D:F2:14:82:E1:6F:29:E5:0D:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269930ECC33211EF87537858762E951A.roa
Signing time: Thu 26 Dec 2024 02:36:03 +0000
ROA not before: Thu 26 Dec 2024 02:36:00 +0000
ROA not after: Wed 10 Dec 2025 02:36:00 +0000
asID: 984
IP address blocks: 156.244.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60187 (0xeb1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:36:00 2024 GMT
Not After : Dec 10 02:36:00 2025 GMT
Subject: CN=676cc113-ef7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:1f:ce:ec:b8:fd:b9:3d:3d:24:0a:94:5f:
c1:f3:97:ae:a2:d8:bd:19:74:cd:4b:fc:23:91:be:
ec:98:16:e2:fe:5b:02:02:a4:30:46:d1:54:ec:42:
e8:14:0d:ed:47:cf:33:f8:f1:eb:0e:51:46:02:a3:
44:0a:c0:dc:9a:90:35:60:56:8f:61:f3:92:e2:43:
cd:0a:57:a5:a8:44:42:d8:a4:08:25:0f:b2:3d:70:
87:70:92:4e:b6:23:18:9e:22:69:33:e7:02:94:b4:
5d:09:10:33:70:5a:a7:0a:49:cc:c6:c6:8d:02:c0:
6b:49:05:cb:f5:a0:a9:ee:d3:32:05:ce:08:d1:f0:
cc:ab:82:83:52:9c:1f:49:bc:c2:7a:34:7f:85:c9:
db:ab:68:c9:72:9f:dd:fc:2d:62:c9:fe:24:27:80:
f7:d9:4c:f6:89:e2:5f:c2:f6:46:51:3e:ac:f2:7f:
b8:34:c3:50:b4:82:c7:73:1d:38:6c:23:84:4c:3e:
69:62:22:2c:f6:8c:81:1c:7f:e9:bc:50:a1:9a:9d:
35:e5:17:65:3c:0d:9a:b7:d8:14:6f:8e:78:69:d2:
69:32:e9:d0:cb:3a:72:8d:b9:f1:af:db:a7:36:39:
02:5c:90:d3:cd:6b:55:ef:50:45:f3:cb:f3:0c:00:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:97:D2:CF:6F:D7:0B:FC:9E:1D:F2:14:82:E1:6F:29:E5:0D:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269930ECC33211EF87537858762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:08:38:33:71:c5:2b:3a:a1:37:1a:90:fd:3f:25:84:8e:d9:
4f:31:74:93:a0:19:4c:43:ed:3e:e5:e1:d2:8a:0b:de:d3:51:
b2:b5:7b:7f:80:9e:12:41:6f:9b:a4:72:7b:a9:93:3c:62:48:
5c:9c:b1:b1:65:c4:0f:e9:94:6d:a9:23:e5:7a:73:97:36:30:
98:f9:69:12:fe:7d:15:7c:61:ef:e6:81:90:ec:3e:9b:bf:65:
d7:c6:ca:6b:b9:03:e0:f2:90:4f:25:7a:4d:6f:8b:ec:49:38:
7e:9b:6d:c5:7b:43:8a:00:43:df:e7:df:fc:8d:a1:30:67:af:
5a:5d:b3:5b:9a:69:49:89:9c:16:5b:f8:e2:7a:e6:bd:0d:ae:
c3:5a:0c:0a:43:e0:63:a9:7e:a5:c4:7d:4e:5e:22:57:3c:ed:
5d:e8:c8:30:2c:48:72:55:97:d2:f1:6e:f1:fd:f5:24:d9:32:
ac:8d:19:1f:0a:5a:8c:d9:69:4c:87:6f:c6:d3:82:22:fe:b5:
3c:e5:f0:3e:c7:7c:0b:ee:99:a3:a6:31:42:46:a1:6e:d7:7c:
10:7e:c6:6d:39:d5:b1:90:a7:24:e0:03:1b:d7:bb:9f:d6:fb:
a0:7b:9e:4d:5b:43:60:f6:8c:a8:aa:7f:f1:2f:b7:f7:41:56:
b1:d6:82:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:36 2025 by rpki-client