Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/439003B0CE4011EF931DBBB3762E951A.roa
File: 439003B0CE4011EF931DBBB3762E951A.roa (raw, json)
Hash identifier: PwAE40McPrufWLWXjiVBKC4nA7c+xMyg1PfpsPm1Pa4=
Subject key identifier: 87:1D:EF:3F:2D:9A:E0:B3:4B:B0:3C:6C:AF:95:D8:66:69:15:F3:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01026B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/439003B0CE4011EF931DBBB3762E951A.roa
Signing time: Thu 09 Jan 2025 04:14:48 +0000
ROA not before: Thu 09 Jan 2025 04:14:44 +0000
ROA not after: Fri 09 Jan 2026 04:14:44 +0000
asID: 17561
IP address blocks: 156.245.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66155 (0x1026b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 04:14:44 2025 GMT
Not After : Jan 9 04:14:44 2026 GMT
Subject: CN=677f4d38-0ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:fe:17:cb:1c:b6:35:6b:67:35:0d:4c:c2:
71:1f:e0:d2:57:63:ac:b9:d6:90:13:09:14:98:f0:
06:54:31:8b:c7:c3:cb:31:60:8f:25:41:2c:4d:26:
50:f4:b9:a1:77:9c:77:94:4b:8b:1f:52:13:67:fa:
c9:3b:3b:61:b4:61:57:13:0c:f4:60:21:b7:75:b2:
45:49:cd:b1:66:70:c2:a8:7b:34:d6:84:52:82:08:
59:14:c8:0b:6f:df:be:a9:02:14:b8:e9:ea:63:8b:
25:47:21:44:55:d1:38:2c:56:94:d8:42:7f:e6:c0:
c8:35:d8:28:6c:5b:8d:7d:ca:40:5e:66:d1:84:aa:
b0:63:43:a0:03:47:3b:c6:1d:9b:02:fb:2d:dc:56:
a8:32:a0:7e:57:c1:52:4a:8f:4a:77:5d:d7:70:0a:
83:f9:01:33:34:f6:17:f9:8f:60:20:0a:b8:64:96:
b5:bb:7d:8c:7b:54:0b:53:ea:a1:fc:98:a1:11:67:
29:3b:75:5f:bb:d8:25:f9:f5:72:c3:a5:9e:0d:12:
5d:72:c2:59:28:9b:58:08:5c:44:fd:81:2a:c7:3e:
26:8a:20:43:99:48:1e:49:e4:cb:4b:68:d9:c1:3e:
cd:ee:18:d9:ee:c5:5c:0e:9d:d5:c2:ca:6f:02:0a:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:EF:3F:2D:9A:E0:B3:4B:B0:3C:6C:AF:95:D8:66:69:15:F3:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/439003B0CE4011EF931DBBB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.105.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2e:34:34:a0:a3:13:45:2b:a3:a3:fb:11:a1:be:68:85:69:
44:f4:89:23:32:82:ed:73:8e:05:3a:b3:e1:8e:f4:e1:9a:0f:
3b:26:5b:59:56:3b:85:1b:fd:ef:36:60:8e:fe:5e:d6:8d:ff:
ca:9a:ed:c2:03:3f:c1:65:6e:8c:6f:3a:d1:3f:52:34:58:8b:
ee:ec:1d:a5:c7:a4:dc:c0:b2:97:84:b0:31:c4:a7:f4:d5:13:
f8:13:e1:34:a5:23:16:c9:5d:8c:2b:a2:ca:db:0e:15:e5:c3:
71:56:a3:8e:16:df:1a:a3:bc:d2:8d:bc:14:a1:70:0e:05:76:
ee:2e:d0:68:28:28:a7:66:2a:d4:47:4b:3d:42:00:34:09:d6:
f7:d9:bb:e0:98:4b:1d:eb:8d:ac:79:cf:02:8b:83:12:e3:4f:
33:34:d2:dd:47:44:bf:03:b0:8b:83:f7:41:fe:d7:53:3b:a8:
9b:04:81:60:71:fc:21:dd:7a:83:05:98:5a:85:21:ee:29:0c:
a2:1a:d1:64:e0:52:c9:2a:a2:cb:76:42:4e:eb:26:15:32:b1:
8a:fd:b0:fc:04:71:56:11:e8:8f:97:5f:03:7c:77:96:db:38:
db:3e:94:dd:bd:f7:6f:13:ad:54:ce:c8:21:3b:58:0f:6a:83:
d5:13:4f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:44 2025 by rpki-client