Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CA6880CD1811EFB0E47642762E951A.roa
File: 48CA6880CD1811EFB0E47642762E951A.roa (raw, json)
Hash identifier: z6cOvGYH5I1d4h5W/2A/S+kJCVUHdYAAjyVZkikjpLE=
Subject key identifier: EB:55:4F:A9:D5:0F:8D:3A:28:35:B6:0A:AC:D1:D6:8B:E4:E8:AA:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CA6880CD1811EFB0E47642762E951A.roa
Signing time: Tue 07 Jan 2025 16:56:06 +0000
ROA not before: Tue 07 Jan 2025 16:56:02 +0000
ROA not after: Mon 13 Dec 2027 16:56:02 +0000
asID: 17561
IP address blocks: 156.241.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64813 (0xfd2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 16:56:02 2025 GMT
Not After : Dec 13 16:56:02 2027 GMT
Subject: CN=677d5ca5-3f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:39:1f:2b:18:5c:34:4f:0e:5a:fb:42:57:
82:3e:7f:c9:79:28:e7:48:41:26:16:cc:f5:f6:b1:
12:bd:67:83:52:d8:9f:bb:92:6d:19:09:ba:d3:23:
52:51:77:11:7d:6e:3f:6a:92:f0:cc:74:7f:b2:31:
ef:36:b1:23:db:1f:c9:50:33:11:cb:0c:0e:d6:9e:
c4:51:1a:27:26:db:39:d0:4b:3d:2e:93:73:f0:0c:
cd:a0:21:b0:63:89:23:c4:67:f9:4d:d7:0a:fa:31:
ac:05:90:97:9f:3a:7c:50:01:2b:34:7f:34:eb:ce:
94:57:a7:0b:0b:1b:7f:ed:7c:be:a7:2a:d0:4b:a3:
93:a5:06:ba:ee:97:81:98:ad:d5:16:6e:ca:b2:b4:
3c:68:be:6f:cd:08:d8:67:33:f8:0b:6d:87:e6:5b:
04:04:21:83:22:da:c7:1c:ee:a9:94:8a:4c:b9:33:
22:1c:a7:2f:ed:35:63:b8:de:56:4b:10:66:4b:5d:
99:1c:7a:58:4d:c7:95:52:f1:18:9b:2f:d4:64:61:
75:1f:22:cc:f8:d3:71:e9:83:04:06:6f:85:eb:3e:
d9:49:e9:a3:fc:dc:04:c3:ec:c0:b6:a4:55:4d:20:
f6:98:09:5d:ca:38:d1:e9:c6:b5:ce:f7:94:43:0c:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:4F:A9:D5:0F:8D:3A:28:35:B6:0A:AC:D1:D6:8B:E4:E8:AA:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CA6880CD1811EFB0E47642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d1:26:c0:73:43:8e:ad:10:2d:51:89:b6:f5:e3:a3:9f:e0:
ab:02:a7:f5:2f:82:8b:d4:c1:dc:cd:9a:a5:92:e7:2c:5d:e8:
ac:70:21:83:b4:d9:01:a3:01:72:93:2e:72:de:28:4a:c7:4e:
14:12:09:6e:b8:2d:7a:9c:bb:c1:08:d0:76:20:5d:d4:b7:c3:
25:7a:41:61:92:ab:42:0b:d6:68:5f:47:de:35:64:11:1a:38:
80:2e:e4:a9:6a:2d:5c:1b:3d:f2:40:27:e2:00:f0:52:13:b3:
c8:b9:0b:7a:1d:21:af:d5:5b:d0:f8:43:17:ec:7d:8d:33:98:
77:e2:b3:8a:46:37:84:ce:a8:de:ae:66:22:83:80:7b:75:6c:
c2:ed:e1:6f:19:ed:a9:10:72:ee:fa:db:5b:0a:8f:96:ca:4b:
d8:52:4a:28:2a:59:54:53:c9:87:bf:4f:00:2e:24:34:d3:84:
89:aa:04:1b:64:b7:65:d2:da:2c:ed:c0:ba:45:f4:78:58:8e:
24:78:85:6a:b2:1b:2a:8f:3a:46:d0:0b:62:06:d0:56:35:92:
a9:19:60:26:1c:11:29:a1:2a:19:63:5a:1b:d2:70:a2:57:af:
99:58:b3:b8:31:4a:cb:1b:9b:f6:8e:08:64:62:cf:39:3a:a3:
14:bf:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:56 2025 by rpki-client