Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D1BC06CCEB11EF8F9AC7A6762E951A.roa
File: 26D1BC06CCEB11EF8F9AC7A6762E951A.roa (raw, json)
Hash identifier: ILiReTuRryT0nUP9V1/ztjxCdyKTzde3iHefiV4KpV8=
Subject key identifier: F0:35:7B:C1:09:56:E0:C3:06:26:E1:D8:0B:A9:AB:E6:71:A3:49:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D1BC06CCEB11EF8F9AC7A6762E951A.roa
Signing time: Tue 07 Jan 2025 11:33:01 +0000
ROA not before: Tue 07 Jan 2025 11:32:58 +0000
ROA not after: Mon 13 Dec 2027 11:32:58 +0000
asID: 17561
IP address blocks: 156.236.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64507 (0xfbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 11:32:58 2025 GMT
Not After : Dec 13 11:32:58 2027 GMT
Subject: CN=677d10ed-22ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:1a:53:70:4c:d8:c2:a6:15:47:0b:7c:b2:
81:bf:10:b9:ce:4f:f1:2a:9d:1a:73:ad:47:c8:5c:
92:5d:9c:a0:6e:cb:e7:fe:95:61:5b:76:f6:8f:ce:
7b:ab:fc:ff:95:ee:d3:97:cc:3e:2b:52:45:e9:44:
1a:14:74:8b:72:5b:44:20:e4:5b:76:ea:d7:3d:45:
8d:30:1d:04:4e:0b:46:3d:95:50:6f:27:f4:ef:5a:
32:8c:05:e6:a8:12:3c:e5:0a:14:92:a9:f1:0b:b3:
46:99:d1:7a:24:6a:e0:9e:c2:60:67:21:f2:1f:d7:
ff:5a:0e:7c:b7:ce:19:cf:38:a3:31:9a:01:08:50:
f9:15:6f:97:6f:ab:6a:ed:10:0d:9f:e6:11:02:6a:
79:05:f5:7b:0e:b8:39:5f:86:b8:3b:b4:d4:58:29:
dd:76:8e:a3:64:e2:c5:ff:6c:71:a7:4f:f9:9f:c8:
af:7a:d5:e2:b5:2b:93:1b:18:b3:07:3f:50:26:2a:
77:1b:ad:7a:ba:27:bc:d6:5f:da:dc:59:a2:16:29:
3d:23:b1:8b:8e:19:52:b3:0e:d5:69:5e:8f:4f:e3:
a2:1e:38:1f:4e:7e:11:f5:df:92:d2:2e:52:77:96:
70:44:9c:4a:76:e2:e3:17:a4:4c:ad:e2:13:89:e0:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:7B:C1:09:56:E0:C3:06:26:E1:D8:0B:A9:AB:E6:71:A3:49:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D1BC06CCEB11EF8F9AC7A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:7b:b1:e9:5a:56:4c:79:f2:85:b3:f1:46:9d:ef:bc:48:94:
c3:e8:d4:51:ac:fd:04:f2:42:8b:45:65:91:06:ea:57:0d:77:
fe:9b:c7:4f:7f:b6:0f:2a:30:58:da:1b:18:2f:e7:90:d7:ae:
d3:27:8b:10:52:17:00:47:25:6e:18:bd:bf:f2:83:bf:c0:bb:
0e:26:eb:9f:54:fb:cb:61:0f:ee:68:e9:1a:30:e6:f3:fb:0b:
29:00:46:5e:af:ad:72:e1:e4:97:bc:49:3a:3b:8e:55:0c:38:
69:41:95:c1:90:2b:5d:a7:e1:ac:8d:97:ad:3d:2b:59:d6:fb:
2c:aa:f5:2c:52:a9:73:31:98:11:ee:f1:20:e0:b0:ca:1c:ca:
58:04:d5:d9:91:89:0f:4c:b2:44:b9:08:2e:21:3d:07:2d:93:
9a:c3:4f:56:40:b1:06:49:77:66:82:63:17:6b:98:ba:d0:e4:
b3:25:29:78:20:90:c0:2f:f9:39:b5:25:0e:1c:a0:60:52:8d:
c5:98:8c:bf:14:07:17:c5:67:fc:f6:c9:41:4d:c0:cd:4c:5e:
12:26:1d:45:a8:b4:82:a1:1d:52:a3:e1:0f:06:51:59:f7:36:
62:11:df:26:87:32:53:de:d9:b4:e5:36:e8:f2:7b:42:c2:5c:
ff:d7:e2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:09 2025 by rpki-client