Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AC8CAACC32711EFBD200985762E951A.roa
File: 2AC8CAACC32711EFBD200985762E951A.roa (raw, json)
Hash identifier: TQFMsUfP5Gl/rsVuy45zsUmGywJYtpaoRT+HlZaC78M=
Subject key identifier: 43:1F:9E:A7:88:88:49:B4:F8:C3:A6:AD:BF:6C:09:68:F4:26:B7:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AC8CAACC32711EFBD200985762E951A.roa
Signing time: Thu 26 Dec 2024 01:17:26 +0000
ROA not before: Thu 26 Dec 2024 01:17:23 +0000
ROA not after: Wed 10 Dec 2025 01:17:23 +0000
asID: 984
IP address blocks: 156.243.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60055 (0xea97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:17:23 2024 GMT
Not After : Dec 10 01:17:23 2025 GMT
Subject: CN=676caea6-9fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:ab:1f:14:2a:fe:ae:8d:ed:90:cd:c8:9c:
2c:9c:b4:05:bc:ce:77:5b:d9:da:9a:0d:56:aa:69:
ce:6a:26:5e:a3:47:68:bb:63:49:17:bd:7e:6f:20:
74:fd:76:60:5e:08:14:82:e9:8e:36:98:74:49:86:
98:20:fd:e4:c3:9e:ca:ec:13:a9:aa:50:d3:a3:ed:
bc:c2:76:56:1f:90:f6:bc:1d:1b:fa:b8:1c:6e:7a:
5b:58:c7:9b:fd:93:65:96:98:e2:89:af:e9:09:9f:
62:28:97:fd:92:30:32:1c:cc:f7:e6:05:ee:e3:42:
44:68:7f:4a:87:b0:9b:86:11:12:36:e4:fc:68:f1:
f2:e7:5b:f3:e1:55:1d:81:ef:25:5f:8b:55:ac:d3:
19:3c:33:67:44:4a:62:11:1e:d5:d2:97:5e:d0:4a:
7e:d6:09:0f:aa:28:63:34:50:77:28:b9:c2:e5:68:
c6:5a:fe:a9:36:bd:db:f3:48:e3:2c:d4:2e:26:16:
fa:f8:92:57:3c:8b:75:d3:6f:4f:12:c7:3b:57:1d:
af:56:53:5b:30:97:e0:1e:cc:22:be:86:f4:b6:97:
8a:84:40:db:89:4d:3c:79:53:dc:b9:8c:1b:8f:7b:
3d:d4:6d:16:38:43:83:25:ea:c4:ea:40:ff:44:08:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:9E:A7:88:88:49:B4:F8:C3:A6:AD:BF:6C:09:68:F4:26:B7:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AC8CAACC32711EFBD200985762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.139.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ba:22:86:38:e5:10:72:6c:15:86:05:67:1f:eb:b4:a7:ef:
a7:3c:26:36:48:c4:b6:a1:a8:23:e7:f9:d1:27:55:95:7c:aa:
e0:d1:a0:f8:a3:d7:de:07:17:7f:90:14:b6:6e:4d:08:35:0b:
71:bf:4f:e0:3e:3c:ee:68:81:fc:73:d6:47:c0:de:89:c4:3e:
25:2a:a6:c2:76:84:ca:59:9a:4c:0e:78:43:0f:95:9b:3c:35:
ee:52:5d:33:78:07:87:4e:e2:52:04:be:4d:c7:3f:eb:9c:3c:
83:b9:f8:d2:72:fc:21:6c:ea:4f:e0:86:85:a2:cc:eb:f5:83:
65:9f:4c:4c:c1:6b:e3:f2:a6:a6:2b:d8:80:17:0c:94:10:6b:
73:a9:fe:df:e6:e3:0c:4e:31:dd:47:6f:e0:89:7a:2e:6e:54:
3c:68:69:e2:53:3a:47:c8:cf:13:80:ae:53:a0:14:8f:e0:5e:
ff:75:d9:0b:3c:64:82:ce:3c:f4:fc:19:fc:90:4f:54:21:7f:
2e:b2:05:c9:fd:ad:5d:00:4d:81:30:d3:ff:ca:1e:99:47:bb:
c5:05:a0:34:6d:21:e8:56:7a:9f:0f:3d:36:97:d9:f7:08:ce:
f8:e1:59:f4:ff:f1:58:70:90:a3:f8:78:9a:f6:58:b2:b3:e6:
bc:6b:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:19 2025 by rpki-client