Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/442F65AACD3B11EF9280B59D762E951A.roa
File: 442F65AACD3B11EF9280B59D762E951A.roa (raw, json)
Hash identifier: 4a/3nzAKhmvF94W2tD0+hgrYSCimKvHiU/9JUr19Ydg=
Subject key identifier: 58:40:70:D9:11:18:D1:30:31:13:82:92:23:6B:A4:97:EB:1E:E4:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/442F65AACD3B11EF9280B59D762E951A.roa
Signing time: Tue 07 Jan 2025 21:06:30 +0000
ROA not before: Tue 07 Jan 2025 21:06:27 +0000
ROA not after: Sat 13 Dec 2025 21:06:27 +0000
asID: 984
IP address blocks: 156.243.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65091 (0xfe43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 21:06:27 2025 GMT
Not After : Dec 13 21:06:27 2025 GMT
Subject: CN=677d9756-d65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:22:50:ab:ee:e5:4d:44:88:8c:11:c7:68:
ad:e4:8c:6c:36:70:f8:8b:b9:3d:bc:0f:7e:68:3c:
0f:5d:9d:68:24:a5:7e:d2:b0:11:0a:2e:85:9c:de:
b6:fb:8f:1b:5c:4f:04:7b:22:2c:48:ea:61:cc:1e:
e7:d6:71:4a:a2:5b:65:5d:f6:61:9f:d5:5b:c7:b1:
47:c7:1e:bc:f6:4c:2e:ee:2f:59:e6:ab:53:3e:51:
fb:2d:d6:d0:7a:ba:f0:1d:85:b5:c8:c6:ce:c0:c5:
f8:cc:73:6c:9b:86:d5:d0:43:f6:80:4f:68:22:05:
4f:95:f8:ed:95:ff:2b:da:81:00:a4:ce:14:54:bd:
e9:41:ad:25:96:90:00:65:ae:a6:97:b3:ba:f1:10:
4b:b6:14:03:96:1a:57:01:b9:5d:10:b5:92:5b:f3:
ee:a2:8e:8e:92:97:27:3b:5d:26:f4:e6:9d:47:8d:
15:59:ac:05:3d:c2:89:a8:17:b5:a8:a4:c1:cd:9e:
96:f4:b7:6f:d2:f1:0d:ff:ed:5e:6e:41:11:36:b4:
cb:1d:04:77:e7:b4:8f:a1:8c:53:56:18:d1:b7:3d:
1c:95:a5:8f:7e:e1:a9:09:3c:2e:2d:f0:e8:68:84:
62:28:10:36:6c:d0:73:fb:a1:86:74:56:da:7e:55:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:40:70:D9:11:18:D1:30:31:13:82:92:23:6B:A4:97:EB:1E:E4:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/442F65AACD3B11EF9280B59D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.74.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7f:91:11:c6:b6:74:2c:4f:b5:7c:cd:7c:f5:7a:0d:e0:91:
11:56:63:42:92:a8:a4:52:31:eb:4f:5f:b1:99:74:48:bd:5c:
a9:21:bc:69:09:1d:5e:69:64:8e:c5:7d:a3:f6:75:28:9e:b9:
8e:d0:1c:c3:80:89:db:5c:af:86:dc:cb:49:2f:a9:1c:11:f1:
09:f9:9f:d4:0d:d7:91:f0:8d:66:13:40:da:d4:d9:f1:c3:9b:
8b:b5:d5:28:26:0c:f1:87:88:41:cb:d6:0b:d3:c3:d9:56:7c:
78:3a:55:74:97:48:03:02:35:bb:a5:8c:25:d8:a7:9e:67:32:
c6:ce:ca:cd:a3:9c:01:dc:b0:08:f2:c3:11:03:e9:45:2b:fc:
19:60:cf:88:ae:ef:99:90:97:7f:bb:bd:7d:9c:1e:ab:6b:5d:
0e:c6:94:31:b5:28:cc:d9:2d:41:fd:f8:94:62:70:bc:88:1e:
2a:a9:d0:63:87:b3:6e:d2:04:9f:18:2c:4f:a4:d0:21:a6:f3:
ba:5f:b5:49:98:eb:5d:71:0c:e3:78:22:2f:f5:06:9e:9b:21:
6a:88:5c:f9:56:22:48:6f:c9:2a:8f:e9:69:a7:fc:71:e0:e0:
7a:0c:a9:5b:e3:dd:28:9e:90:47:a2:01:85:c3:5d:92:56:7d:
bc:d4:ca:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:09 2025 by rpki-client