Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4823F49AD30411EF9072A365762E951A.roa
File: 4823F49AD30411EF9072A365762E951A.roa (raw, json)
Hash identifier: bxPg66gc8VJmf35ARnAQlno9LX/wq4fKZiK22UZVHhI=
Subject key identifier: D3:87:8E:01:0F:D6:B5:E3:8D:F8:4D:3E:32:09:FC:20:E5:66:BA:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010803
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4823F49AD30411EF9072A365762E951A.roa
Signing time: Wed 15 Jan 2025 05:48:01 +0000
ROA not before: Wed 15 Jan 2025 05:47:58 +0000
ROA not after: Mon 03 Jan 2028 05:47:58 +0000
asID: 17561
IP address blocks: 156.254.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67587 (0x10803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 05:47:58 2025 GMT
Not After : Jan 3 05:47:58 2028 GMT
Subject: CN=67874c11-ae5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:a3:81:7f:60:f3:a8:d8:3f:65:ac:17:5e:
bc:ab:c4:06:cb:21:b4:d6:59:e6:25:9b:09:e5:30:
9d:00:3b:f9:62:8d:ea:cc:44:bd:2f:27:48:74:5c:
a8:c2:3d:e2:c4:f7:b3:53:29:28:41:73:3d:97:eb:
fc:0b:b9:20:da:eb:97:b2:ea:b7:fe:94:13:a3:a5:
50:3f:ca:5c:16:bc:0b:b2:c6:cf:21:33:90:1d:da:
ca:47:1c:ef:64:77:06:d7:2b:b1:72:e5:eb:94:47:
8d:91:4b:e2:55:85:c7:dc:6c:a8:1d:77:b2:1a:21:
f6:98:b7:92:99:98:c7:ea:51:0a:6c:6b:89:1a:29:
5d:6f:00:fa:1b:75:7f:1a:b6:3d:0f:88:a6:04:43:
99:27:27:0d:dd:5a:2a:73:f5:80:c1:a0:1f:c8:38:
19:c2:a3:6c:9e:99:b5:9a:e0:79:64:bd:a4:ca:d7:
ab:6a:d4:41:39:64:10:3d:0a:e9:ca:d7:ed:09:ca:
c1:c6:30:83:98:c9:0b:69:f3:f2:c8:3d:82:a0:6c:
ed:40:52:e1:db:fd:a4:c7:6f:43:89:92:32:85:a4:
1b:4c:56:9f:a3:32:d8:0b:fb:55:43:45:6b:ac:45:
34:4c:fb:04:89:ff:70:33:36:da:70:d7:15:c7:0f:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:87:8E:01:0F:D6:B5:E3:8D:F8:4D:3E:32:09:FC:20:E5:66:BA:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4823F49AD30411EF9072A365762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b0:4e:c5:30:47:ee:da:85:d0:2b:e0:49:57:00:00:c8:a3:
f8:0d:c2:77:8c:a0:7b:ff:ec:b7:a0:73:94:b9:4e:d8:70:e2:
24:b9:e9:23:4b:99:2c:c6:18:41:c3:98:46:0a:fe:67:b9:55:
37:89:87:41:52:11:dc:6f:1a:79:15:19:8e:ae:6b:00:49:55:
39:51:c9:40:e4:1e:43:91:ff:26:bf:20:ee:76:f7:ba:91:81:
1c:12:6f:2d:c2:ff:05:46:69:b5:ee:f1:1d:84:80:8c:2d:c6:
71:3c:eb:50:ac:3d:a6:7c:54:35:25:fa:69:1a:ed:90:41:2b:
4f:4d:32:19:79:51:12:e0:ce:08:cc:f5:51:41:ea:23:74:81:
68:ab:aa:37:70:d8:a7:48:67:ea:8e:35:ea:1e:59:d2:bf:2b:
5c:57:4f:61:74:7e:9e:0c:cc:34:19:60:8c:79:f2:e0:cc:4a:
43:18:d1:e7:18:97:76:f5:5e:2a:e9:8d:d8:07:cb:bd:94:f5:
02:9b:02:31:fa:d9:71:2a:40:89:8e:2c:59:7a:eb:d4:c9:10:
98:c7:9a:13:91:c7:7b:01:cc:90:fb:75:39:fa:bc:06:44:65:
2c:f5:b8:11:6a:bc:dd:46:75:15:4d:0d:02:97:a5:25:6c:9d:
48:d9:be:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:08 2025 by rpki-client