Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4991357CCC0B11EFA95A8C96762E951A.roa
File: 4991357CCC0B11EFA95A8C96762E951A.roa (raw, json)
Hash identifier: BA40Y+NKK/57GTEkK2lNn1jeqbyIsb07cZFVyDa5LYA=
Subject key identifier: 0F:7C:4E:28:38:20:6A:0C:FF:BE:31:BF:6F:9C:22:3D:22:C3:FA:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F861
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4991357CCC0B11EFA95A8C96762E951A.roa
Signing time: Mon 06 Jan 2025 08:50:32 +0000
ROA not before: Mon 06 Jan 2025 08:50:29 +0000
ROA not after: Thu 06 Feb 2025 08:50:29 +0000
asID: 200373
IP address blocks: 156.253.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 08:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63585 (0xf861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 08:50:29 2025 GMT
Not After : Feb 6 08:50:29 2025 GMT
Subject: CN=677b9958-213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:12:a0:53:d0:3a:a0:fb:63:08:37:d6:63:
a1:de:41:b6:90:7f:77:3c:72:2c:90:78:7c:d6:db:
d3:93:4e:ad:9c:01:9c:64:cc:64:2c:d5:9e:74:94:
fa:3f:dd:22:02:c4:75:8e:b1:ba:80:0f:00:55:d0:
24:16:8b:fa:44:9b:ba:e9:dd:08:70:38:37:ef:e5:
9b:63:f1:db:fb:1a:f1:b1:97:11:cf:23:6b:99:30:
a0:7e:4c:15:2e:48:6b:b7:9b:7c:d7:de:61:c9:de:
e5:c7:3f:f9:dc:e4:cd:be:ce:a0:8b:58:75:d2:bc:
92:ab:5d:7e:d7:0c:e2:6f:7e:a5:f0:ed:f1:8a:15:
62:3c:eb:1a:6d:e2:20:d5:37:65:f0:3e:d6:6b:f6:
ed:d0:41:27:fb:24:5f:85:e7:79:c7:10:f3:b5:b6:
e4:47:1d:a4:d3:19:ab:cb:d5:1b:13:b7:2b:4d:af:
d1:a7:9c:6b:d8:48:c5:a3:02:b1:25:93:55:db:67:
e3:ad:6a:57:5c:0b:5b:e3:d2:b5:b1:08:b1:0c:db:
91:a8:5f:a0:30:6c:19:67:a4:49:4c:9e:10:c3:a4:
52:b0:63:9c:44:fb:05:3f:3c:ce:b5:08:97:b8:15:
32:46:1a:ff:69:0b:02:2b:8d:e1:0d:1a:b2:f7:c6:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7C:4E:28:38:20:6A:0C:FF:BE:31:BF:6F:9C:22:3D:22:C3:FA:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4991357CCC0B11EFA95A8C96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.168.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:48:06:ee:f7:c6:60:8d:8e:9e:b9:01:da:3c:3d:ae:44:d1:
25:1b:75:6f:ef:41:c3:22:ef:c2:eb:f4:be:c1:cb:3f:0a:32:
41:2d:9b:d1:f3:c4:f7:a5:e4:76:69:ec:51:3b:a1:a9:f0:53:
cf:2b:8c:a2:7b:9b:90:74:8f:bf:48:be:ac:fc:b7:65:9d:4a:
ea:ef:d9:2f:6e:c8:49:8e:d5:69:a5:16:17:c9:9c:71:d6:0b:
73:2f:a3:3b:63:27:9b:72:cc:1c:af:bf:f3:2c:e4:72:9b:f0:
f7:df:09:30:bd:96:52:f9:eb:5e:1e:78:bf:01:2e:64:05:40:
73:d5:9e:a4:50:85:d7:a4:7f:97:35:9f:77:5a:44:a1:ac:bb:
2d:21:02:0e:56:8a:76:87:f8:39:f8:fe:5f:9b:e7:62:09:a3:
d5:12:1d:31:73:c9:35:e9:d1:02:6d:d9:d7:a5:55:e0:c3:de:
7f:53:d5:85:3b:91:93:60:39:64:5e:21:5f:b3:81:80:b3:56:
ce:1e:64:43:a1:d9:40:61:73:42:d8:b2:02:d0:bc:bd:b0:2e:
59:0b:a6:a8:bb:34:10:b5:39:04:97:90:c7:dc:59:b2:4f:96:
f8:60:0a:d8:59:3e:13:d5:a4:58:8a:ff:c7:45:06:6e:53:20:
bf:e6:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:01 2025 by rpki-client