Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/293EEC4ACD1111EFA8370396762E951A.roa
File: 293EEC4ACD1111EFA8370396762E951A.roa (raw, json)
Hash identifier: B81878LZm5hl2O4Y44YksbR7slrDIqGPFU6KPOikYJg=
Subject key identifier: F8:C6:20:60:47:87:A5:69:22:7F:BF:CC:84:47:9B:F9:B2:BF:ED:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/293EEC4ACD1111EFA8370396762E951A.roa
Signing time: Tue 07 Jan 2025 16:05:06 +0000
ROA not before: Tue 07 Jan 2025 16:05:03 +0000
ROA not after: Mon 13 Dec 2027 16:05:03 +0000
asID: 17561
IP address blocks: 156.240.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64755 (0xfcf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 16:05:03 2025 GMT
Not After : Dec 13 16:05:03 2027 GMT
Subject: CN=677d50b2-59c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:d7:e1:da:dc:8a:ae:6d:b4:5a:09:62:1b:
7e:f7:81:4d:cc:64:00:e3:77:40:15:5c:01:fd:e5:
76:d7:cb:53:77:9d:56:87:f5:bf:e5:a9:2d:21:57:
08:d4:06:62:03:5d:88:19:78:14:30:51:47:18:4a:
b9:3b:a6:3b:96:a7:c4:c7:d7:8c:de:59:db:33:a2:
c8:d4:40:93:38:04:2a:7d:f6:17:5e:fc:22:e8:3e:
4e:a7:74:1a:f7:92:fe:70:c7:a7:02:a2:63:f1:3b:
f9:5d:72:e7:f2:11:c1:73:4c:fd:71:97:0b:f4:e8:
71:a4:69:27:9b:63:34:98:27:2a:15:b6:36:cd:7d:
b8:44:5a:3a:1b:bf:4f:f1:26:8d:af:6f:2e:43:7d:
96:d1:5d:8c:ab:f0:fb:5b:14:04:2a:4d:59:25:1f:
46:76:4a:49:5e:01:73:ea:ef:ad:25:63:9b:ca:5f:
37:6e:f5:14:36:cb:9a:f9:b3:84:5b:0e:8f:7f:64:
ee:54:f5:4c:ac:73:65:3f:a3:a3:77:3a:10:0c:28:
5f:dd:23:ce:c7:16:0f:d1:8d:14:f0:06:45:43:38:
a4:0c:ef:c2:e1:50:86:a0:be:8e:16:b2:d8:bf:60:
ca:07:6b:bf:09:92:30:62:1c:33:6c:75:83:30:8f:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C6:20:60:47:87:A5:69:22:7F:BF:CC:84:47:9B:F9:B2:BF:ED:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/293EEC4ACD1111EFA8370396762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.56.0/24
Signature Algorithm: sha256WithRSAEncryption
06:98:d6:e0:84:6d:b6:c4:94:76:48:c1:88:3e:ea:e8:11:03:
65:9f:a6:7a:e5:84:01:90:58:9f:32:3f:2c:41:07:fe:84:8e:
a3:ba:e7:12:01:27:6a:fd:23:13:3f:fc:eb:c4:21:5d:dd:1d:
a9:92:ad:5c:27:5e:42:4b:a1:41:6d:70:53:49:cc:3f:db:63:
b9:7d:6a:1b:cf:f1:54:dd:d7:92:07:b0:dd:03:1f:03:df:f6:
ae:b0:a6:63:f6:96:05:6c:7e:7d:f2:3c:c2:f7:d3:f2:0d:8c:
a7:7c:ba:d6:49:a7:5d:fd:6a:e1:a4:fa:68:8b:65:36:52:fb:
2e:dd:a0:20:c5:61:01:be:1a:66:8f:63:c8:49:f8:da:b1:dd:
b5:0f:f3:1c:2a:f5:79:82:e1:c6:9b:53:47:13:f2:28:ed:25:
3d:12:2b:82:43:a7:54:f8:90:ee:ac:28:eb:b9:0c:bd:f6:83:
59:a6:60:fc:4f:fb:27:01:34:a2:4e:af:14:df:09:5e:0c:22:
05:25:99:d8:3d:35:ae:20:bc:1e:27:81:06:6d:f6:85:13:b1:
18:16:6b:59:8d:49:d4:26:e8:3d:18:1a:26:20:ea:3c:29:82:
50:35:79:aa:f5:a3:e6:ca:2a:68:88:b7:a8:68:bc:07:1e:52:
da:13:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:38 2025 by rpki-client