Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33126370B3D311EF977B6E7A762E951A.roa
File: 33126370B3D311EF977B6E7A762E951A.roa (raw, json)
Hash identifier: RB93Agm+6qsbSPnXtdTnTjcOlLRT9g8Zqfx2HELgcWQ=
Subject key identifier: A9:D2:A9:16:E5:4C:1A:95:38:F2:1A:B2:A6:39:62:8D:70:20:D7:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E02F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33126370B3D311EF977B6E7A762E951A.roa
Signing time: Fri 06 Dec 2024 13:08:35 +0000
ROA not before: Fri 06 Dec 2024 13:08:31 +0000
ROA not after: Sun 30 Nov 2025 13:08:31 +0000
asID: 209242
IP address blocks: 156.243.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57391 (0xe02f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 6 13:08:31 2024 GMT
Not After : Nov 30 13:08:31 2025 GMT
Subject: CN=6752f753-93f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:a2:ac:f3:db:e9:3c:ac:64:16:73:e3:d7:
70:76:f2:4c:ff:e2:42:8c:1e:07:1a:a7:fa:89:c0:
f9:54:da:1e:d4:98:2a:0c:6c:21:37:f5:37:2f:c3:
d6:45:0d:c6:6f:9c:09:6d:d0:48:ce:0e:1b:52:2a:
ea:54:0a:b7:82:e6:fb:b3:81:c7:99:84:b4:57:97:
98:a2:00:66:40:8f:34:19:77:98:03:7d:49:85:f7:
33:c4:e9:cb:15:cf:90:28:69:67:7b:98:78:c1:10:
b0:70:75:7f:ca:c9:22:c2:bf:58:af:a6:2d:f0:5a:
45:a0:dc:83:d1:17:dc:30:33:0e:8f:c1:7a:f5:18:
8c:03:de:7b:8f:9c:40:dc:01:3e:ab:23:1f:fb:a3:
b2:30:99:a2:67:1b:56:e2:c2:bb:e2:05:26:ae:a7:
23:56:13:30:7a:57:d3:2e:20:02:e9:7b:89:23:07:
3b:59:bc:ec:fa:02:8c:53:fd:49:d0:a2:60:1c:de:
20:0b:7a:70:fd:88:1e:99:ce:9c:e4:44:fd:eb:5e:
1c:6b:80:12:d3:bd:5a:4f:1b:3f:95:0b:c9:5b:65:
0a:0a:2f:ae:ea:66:e7:5e:78:3b:ad:59:ec:56:86:
8c:93:b3:04:c6:38:50:c6:ee:6b:35:92:02:d8:e1:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:A9:16:E5:4C:1A:95:38:F2:1A:B2:A6:39:62:8D:70:20:D7:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33126370B3D311EF977B6E7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:48:53:b9:bb:cf:e3:13:b7:53:ad:e3:d8:e0:f0:df:89:90:
cf:d0:c2:d8:49:4b:4f:11:37:3b:08:99:b8:e4:8b:b8:63:c6:
25:2f:cd:64:07:0a:77:c2:68:5c:f6:5d:04:78:49:2e:9d:6a:
ca:30:ad:08:72:4c:87:28:5f:48:c5:6f:ac:a0:c2:ce:54:93:
9f:40:55:9f:75:63:d0:57:b0:34:3f:be:ce:22:4e:51:21:92:
72:6a:df:1c:e8:41:31:cc:b8:98:4a:97:7a:59:47:00:15:6b:
c0:93:b4:f4:9f:00:97:69:0f:ed:39:07:8c:f5:ef:bf:03:0f:
3b:ae:51:47:e9:42:15:b8:b7:72:ce:2c:ba:1f:de:50:6e:90:
bb:ae:64:09:df:19:16:a5:fa:9c:d7:7f:82:e4:94:fc:b7:bb:
b5:a3:db:be:f0:03:5c:5e:29:f8:a1:fc:84:54:2f:ac:1a:2d:
26:43:6c:4f:c5:60:4e:f9:ad:91:87:44:f6:8f:52:6a:93:18:
41:7a:f6:b9:0a:5b:08:d4:16:b3:73:b3:73:90:16:71:3c:5c:
df:9b:e2:91:dc:a8:9d:4d:63:c6:c7:ce:18:66:cb:8b:13:8a:
e3:9b:59:2f:4f:c3:92:99:88:07:f3:c3:a9:6d:e1:9c:c3:17:
3a:58:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:39 2025 by rpki-client