Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B677D7ECD6F11EFBB99687C762E951A.roa
File: 4B677D7ECD6F11EFBB99687C762E951A.roa (raw, json)
Hash identifier: V8QU62Nct/H9Oyyg6I//j/CmhK1Z9fMf33t5zXKtowQ=
Subject key identifier: 5C:CA:F5:7B:05:1A:B0:8C:49:18:FE:B8:5E:D7:8B:3C:4B:19:77:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B677D7ECD6F11EFBB99687C762E951A.roa
Signing time: Wed 08 Jan 2025 03:18:56 +0000
ROA not before: Wed 08 Jan 2025 03:18:52 +0000
ROA not after: Mon 13 Dec 2027 03:18:52 +0000
asID: 17561
IP address blocks: 156.248.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65405 (0xff7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:18:52 2025 GMT
Not After : Dec 13 03:18:52 2027 GMT
Subject: CN=677deea0-ee14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:1e:04:8a:f9:d4:af:a9:41:48:5b:0a:f2:
10:78:42:71:5a:df:d8:eb:d4:1c:44:9f:27:cb:ec:
00:b7:74:d8:b3:cd:f2:fc:46:c7:e7:62:1d:35:51:
5f:ab:59:84:e6:20:ee:52:f1:92:08:db:8b:51:6e:
b9:ca:d2:01:44:37:64:6b:24:4a:7f:11:e0:c0:8c:
e1:5f:35:09:ac:e9:b2:b4:6a:66:fe:68:57:dc:05:
64:f8:bb:7a:5a:71:b7:97:e6:ad:be:77:57:64:43:
59:92:1a:2b:aa:5c:3e:8c:dc:47:f5:f8:bf:9a:45:
07:bf:e3:5e:70:1d:37:03:e4:de:a8:e8:62:ed:63:
0f:22:81:c4:92:90:47:53:77:48:96:69:56:93:e8:
1b:37:34:bd:66:3f:4b:c7:da:b6:23:ff:c2:6e:f5:
2a:af:fa:38:f2:f3:32:45:ca:87:b6:71:9e:92:7b:
61:3c:40:e3:78:17:c6:b4:7c:64:1d:b8:1c:71:b9:
63:de:c4:a0:5b:cc:66:d7:b9:99:d1:cf:f4:4f:d2:
e6:8c:86:ee:69:41:25:aa:30:27:d9:f2:ef:64:5a:
47:47:71:3f:6d:9a:2c:de:a4:6d:4f:15:48:99:90:
b3:9b:22:b7:5a:d7:b7:30:8d:d0:50:a2:25:72:2f:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CA:F5:7B:05:1A:B0:8C:49:18:FE:B8:5E:D7:8B:3C:4B:19:77:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B677D7ECD6F11EFBB99687C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.24.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4f:b6:40:71:e5:ea:35:10:f5:95:4e:a0:40:4c:35:fd:ef:
33:d0:3e:16:9a:bd:20:1e:32:be:5d:b3:04:f6:83:ad:72:39:
12:6a:81:23:ed:59:71:0e:0d:c1:ff:0e:a5:ff:4d:7d:bd:7d:
4a:48:a0:5c:da:62:ff:30:4c:49:13:12:55:7e:c3:fe:c0:98:
de:68:fd:55:2d:24:16:e3:86:dc:64:00:8d:f6:1d:07:41:ab:
4a:d3:6a:47:a9:6e:73:40:d1:67:c5:df:e1:c7:67:75:f5:9c:
44:8b:5c:05:e9:cf:3f:0a:c9:97:a7:a4:4e:aa:4a:b9:65:36:
ed:f5:ee:3c:f4:b7:73:c1:24:81:b8:54:a4:70:68:04:b5:e5:
4d:8f:57:b2:5b:50:f1:ce:90:5d:f3:44:86:2e:35:f4:11:88:
01:cd:5f:b9:1c:a2:79:9e:ff:d1:9b:66:65:57:cf:49:73:32:
46:c2:9b:6a:9e:26:72:6c:4d:14:86:67:50:86:f1:d7:b0:87:
56:be:70:35:f5:79:b0:56:0e:59:a5:ce:ef:1e:48:0d:f3:09:
bd:83:ae:66:7d:5d:e7:4c:a7:a0:9b:85:01:c6:7d:c7:ad:f3:
6d:18:18:fb:c7:5d:ff:a7:41:73:2a:78:70:4d:1b:87:36:41:
ef:b9:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:36 2025 by rpki-client