Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB10AEAC34111EFB7C69BBC762E951A.roa
File: 3BB10AEAC34111EFB7C69BBC762E951A.roa (raw, json)
Hash identifier: xDBhBP8PKls4T4MZe8C9xKcUe8LxO5GkauWnLfC86Rc=
Subject key identifier: A9:F8:B7:8D:AB:87:7A:C0:49:6C:3C:35:D2:7C:D7:15:24:03:51:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBCD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB10AEAC34111EFB7C69BBC762E951A.roa
Signing time: Thu 26 Dec 2024 04:24:01 +0000
ROA not before: Thu 26 Dec 2024 04:23:58 +0000
ROA not after: Fri 10 Dec 2027 04:23:58 +0000
asID: 17561
IP address blocks: 156.244.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60365 (0xebcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 04:23:58 2024 GMT
Not After : Dec 10 04:23:58 2027 GMT
Subject: CN=676cda61-1724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:95:48:2b:05:32:56:68:f1:6a:4b:45:d2:
a9:e8:50:e0:a2:e5:1c:2f:27:b7:b4:3c:b0:2e:c6:
cc:0d:ba:c6:11:f0:6b:34:63:db:19:77:69:a2:f1:
bc:13:c4:0d:e9:64:43:d7:9f:7d:fb:07:93:31:50:
98:0a:da:3d:ee:da:f0:d9:66:aa:5c:56:24:c8:67:
ed:0b:c9:e2:51:72:af:e2:fb:e3:ed:93:06:4c:23:
95:a0:9c:04:eb:e0:7e:be:02:1f:ca:9e:a9:26:a5:
0d:82:ba:62:8b:f4:5e:ce:79:59:4f:4a:08:0f:dc:
48:92:ab:ad:8c:6c:65:b3:b6:de:72:23:a9:00:8d:
79:21:f8:9a:7a:97:35:ed:4b:ae:5e:c0:6e:2b:f6:
e6:33:0d:a6:97:3b:a7:18:63:bb:1b:3a:e7:e1:94:
69:56:79:7a:6d:07:6b:d0:41:96:b1:b0:60:dc:13:
f0:af:d0:2e:a9:98:60:38:6b:f9:20:16:94:74:9e:
b5:0f:4c:cb:1d:ee:a0:24:e4:9e:ed:84:9a:b5:09:
20:27:2d:df:28:64:ec:04:eb:d9:26:bb:57:2d:df:
7a:20:e4:e1:1a:8f:05:80:bd:66:6e:1b:e5:24:a5:
fc:51:b7:d7:47:4e:d9:72:87:ee:fd:5c:3a:80:ad:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:B7:8D:AB:87:7A:C0:49:6C:3C:35:D2:7C:D7:15:24:03:51:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB10AEAC34111EFB7C69BBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.226.0/24
Signature Algorithm: sha256WithRSAEncryption
05:05:49:5c:47:b0:02:db:70:e9:84:a9:96:12:67:55:1c:7c:
86:26:61:ba:01:d8:00:56:c1:c6:62:bc:c7:60:a7:d9:ce:6b:
97:fd:f0:b5:8d:de:74:46:75:57:78:dc:45:f0:ed:7e:d6:ba:
e0:5e:6f:59:fa:df:46:7b:cf:53:6c:ae:3d:0f:10:72:19:e5:
70:3c:e6:2e:a1:39:53:12:b7:ad:c6:6a:e7:5b:19:12:37:af:
8b:3e:73:2d:af:06:ad:c5:c1:f7:b9:f4:ff:90:43:a3:bf:90:
15:b6:6a:b3:0e:90:a2:2b:6e:89:dc:bc:e5:79:cd:72:fd:c3:
e8:d8:ef:ed:0a:12:f5:0d:e9:07:89:ce:78:e3:95:24:30:52:
ff:d3:e8:af:7c:b8:43:55:9f:42:60:4e:d4:7d:d8:aa:56:3e:
98:80:b1:02:39:12:6a:c6:9a:b9:9b:4c:d6:27:ca:68:34:e4:
4d:d1:46:4e:76:0f:b9:93:03:26:9d:e7:ca:36:38:aa:12:31:
30:0c:ae:07:de:6f:6b:0b:52:b4:97:55:a7:0c:fd:4b:2b:b7:
fb:98:42:a2:fd:54:93:ce:ee:ee:e9:59:22:b4:34:e6:01:14:
e7:90:2c:26:6a:9d:af:89:cf:d3:07:8e:4e:56:19:17:9f:f8:
81:6a:13:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:13 2025 by rpki-client