Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F07B790D2F711EFB7D62094762E951A.roa
File: 4F07B790D2F711EFB7D62094762E951A.roa (raw, json)
Hash identifier: 25geknP1OQLixD7I6CkgKcVOjTyXF/GhvyBHoTkycD0=
Subject key identifier: 87:2A:86:52:01:D9:E0:2C:27:C6:33:4B:B9:68:D0:AA:73:76:F0:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0107AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F07B790D2F711EFB7D62094762E951A.roa
Signing time: Wed 15 Jan 2025 04:15:10 +0000
ROA not before: Wed 15 Jan 2025 04:15:06 +0000
ROA not after: Mon 03 Jan 2028 04:15:06 +0000
asID: 17561
IP address blocks: 156.254.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67499 (0x107ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 04:15:06 2025 GMT
Not After : Jan 3 04:15:06 2028 GMT
Subject: CN=6787364e-f452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:d6:36:6c:d6:2d:49:8d:2d:a3:92:6b:30:
bf:92:7f:b5:b3:65:d0:4f:98:f3:b0:7c:29:f2:4b:
68:79:4c:36:16:43:7f:c6:3f:42:3a:b0:7e:3b:b5:
90:8a:9c:5f:8b:3d:74:fe:ff:b8:7a:c9:2a:4f:5b:
2e:57:f0:8d:c4:1e:ff:b3:9f:cc:d1:e4:80:f1:5f:
83:54:42:a1:be:44:fc:b1:ad:f7:82:fa:42:5c:88:
27:3f:78:ab:ab:c8:57:58:18:9b:5a:91:c0:3a:99:
3c:17:89:b0:aa:42:b5:8f:72:56:7b:19:5c:34:af:
b1:bb:27:cd:d4:94:74:7a:11:61:c3:41:f2:5b:52:
04:fd:6a:ac:2c:00:fe:23:1d:23:e6:da:e9:5f:7f:
69:da:c3:4f:9f:99:15:9a:a2:58:53:c6:45:83:7d:
25:f7:e5:39:d3:56:aa:49:67:69:fc:e9:05:41:3f:
b8:74:af:31:bb:6c:a7:85:21:ff:ab:4c:17:a9:a4:
11:e6:1b:73:2a:49:3f:41:ee:47:d7:9c:10:91:9c:
18:22:0d:42:4a:3a:b4:72:9f:15:22:59:43:06:17:
62:02:59:10:02:b9:bc:1c:c3:be:83:f3:45:25:04:
de:4f:fa:78:4e:55:a5:40:60:00:a8:5d:92:96:0d:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2A:86:52:01:D9:E0:2C:27:C6:33:4B:B9:68:D0:AA:73:76:F0:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F07B790D2F711EFB7D62094762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.0.0/24
Signature Algorithm: sha256WithRSAEncryption
12:46:3f:ef:04:39:d6:08:dd:8a:62:91:03:96:24:14:94:79:
39:7c:12:94:dd:f7:dd:65:7a:f7:67:d7:d5:ad:3c:fd:b3:b9:
7b:d6:b0:ac:12:f4:1e:03:d2:11:01:7f:74:c0:3b:75:98:4e:
47:3e:19:0a:a8:9c:0e:85:15:8e:9d:af:a1:d1:fe:15:a3:89:
e3:15:17:e1:42:46:18:78:d2:bc:15:ba:23:36:f4:c0:8b:ef:
f3:17:d7:a6:34:89:d8:35:5c:86:14:a7:56:c7:ed:c0:67:00:
11:f4:b1:f8:ba:7d:38:4c:76:f9:ea:03:b7:84:08:2b:49:a8:
1c:61:b8:cb:b6:ff:06:d9:17:82:b4:93:5c:2e:0a:30:17:9c:
49:25:e7:69:80:74:9f:cf:5f:0b:f5:33:43:7a:d8:68:e7:e6:
16:71:59:e7:c4:e9:ce:8f:18:82:9f:5e:3d:d9:58:df:47:c1:
91:a7:0b:8d:9a:2e:ae:70:b9:b6:fa:02:64:3d:4d:3f:26:ab:
bb:a5:dd:94:37:87:57:db:14:0c:4f:28:e7:77:23:6d:7a:84:
1e:d0:17:26:72:39:b7:7c:33:63:2f:c8:ab:50:43:1f:77:cc:
e0:79:0a:e8:f3:12:93:fa:38:1d:57:9c:1a:df:81:8b:b6:09:
e8:89:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:02 2025 by rpki-client