Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269B09FCC33D11EFA0A49FA3762E951A.roa
File: 269B09FCC33D11EFA0A49FA3762E951A.roa (raw, json)
Hash identifier: HoDQCWym5TzqvmAUORr5TNBvxJLO4Pp6BIM1t3Ucb8M=
Subject key identifier: 10:55:C7:C9:C8:E7:75:2A:04:24:D6:A5:71:44:63:52:2B:5C:3F:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269B09FCC33D11EFA0A49FA3762E951A.roa
Signing time: Thu 26 Dec 2024 03:54:48 +0000
ROA not before: Thu 26 Dec 2024 03:54:44 +0000
ROA not after: Fri 10 Dec 2027 03:54:44 +0000
asID: 17561
IP address blocks: 156.244.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60317 (0xeb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:54:44 2024 GMT
Not After : Dec 10 03:54:44 2027 GMT
Subject: CN=676cd388-fb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:8e:09:db:66:1a:d1:48:ae:04:44:41:2f:
ca:93:63:7b:f2:03:bb:54:da:74:cc:91:30:bf:f7:
56:74:55:0d:e8:5c:2f:aa:d5:da:2a:66:77:76:78:
47:b6:21:fb:ab:8b:b5:26:33:f5:ae:5a:df:0d:a3:
5d:43:01:59:39:a5:7d:cb:f2:67:85:11:de:e0:e7:
16:68:e4:93:b3:c7:8b:0c:58:02:34:7c:a1:c6:24:
6b:8f:fb:16:bd:5d:3e:35:e2:31:22:72:59:82:f1:
f1:34:18:83:a1:d5:51:f4:83:16:38:85:9b:34:ae:
66:09:f2:5f:cb:80:3d:24:c0:f9:11:2e:95:64:cf:
d2:12:1e:ab:e3:78:89:30:67:ad:58:30:7e:19:3a:
85:43:89:f4:6d:1a:c4:29:80:04:1b:19:06:b1:1a:
23:04:d2:f3:40:ee:f3:14:fc:90:ac:c4:98:9b:e9:
90:ae:0a:fb:b6:53:dd:d5:cc:17:bb:d5:49:54:ee:
a3:45:fd:b2:53:fc:99:e3:99:0b:c7:7a:b6:e8:c5:
3e:e0:8d:ed:2a:88:bf:ce:b7:ca:ce:5b:69:f6:00:
8a:97:d7:d9:98:fc:79:30:1e:6f:34:07:98:9a:99:
44:a8:ec:41:da:64:e8:46:04:31:fb:48:40:77:a9:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:55:C7:C9:C8:E7:75:2A:04:24:D6:A5:71:44:63:52:2B:5C:3F:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269B09FCC33D11EFA0A49FA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:9e:30:25:bc:f9:b4:10:61:74:25:31:83:1f:9f:4a:14:c2:
a5:7a:23:6b:21:23:62:55:cf:ad:52:5d:e0:c5:12:8b:ce:c4:
f0:64:1a:d5:da:87:71:c2:60:e6:eb:dd:47:7f:d6:97:5e:57:
c8:b0:2d:3c:db:d3:73:94:d8:a9:f6:2f:a7:f1:6a:fa:75:f3:
4a:4d:bf:c9:5e:1a:60:f7:c8:f5:2b:5e:9f:e9:63:76:22:b0:
0d:40:ba:3b:f3:99:83:2c:2c:a6:15:69:a2:0b:cb:d2:c2:1e:
be:7a:f7:ed:76:4d:37:cd:9f:bd:bd:21:b1:e9:02:5d:ca:17:
80:42:c8:fe:14:48:2d:39:42:f3:68:7d:2c:04:81:60:6c:62:
f8:14:cd:01:58:f1:a0:f8:7b:4b:f7:99:03:9b:f0:d6:7b:97:
66:4e:9f:aa:27:fa:fd:a5:0d:2a:ef:13:f2:86:25:3d:ca:87:
bf:3b:f8:41:8d:09:8e:27:34:63:fa:0e:63:7c:28:43:82:18:
0e:ca:cf:e0:af:4e:0a:00:8e:48:d2:dc:b7:db:cb:14:fc:30:
a5:45:db:3a:34:64:ad:16:d0:07:5a:2d:56:8d:47:ca:be:32:
e9:26:f2:f3:96:a9:43:64:bf:78:6b:57:bd:5e:43:a9:60:3d:
f2:69:04:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:51 2025 by rpki-client