Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/511FB452C33D11EFAC16F1A3762E951A.roa
File: 511FB452C33D11EFAC16F1A3762E951A.roa (raw, json)
Hash identifier: v/AIYirTGwhdKrw9ljsT97xXJuxxgOr+YbU50aZT0c8=
Subject key identifier: 8E:4D:8D:1F:EC:EE:E7:33:B3:F4:4E:D1:FC:1A:ED:D6:AB:71:46:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/511FB452C33D11EFAC16F1A3762E951A.roa
Signing time: Thu 26 Dec 2024 03:56:00 +0000
ROA not before: Thu 26 Dec 2024 03:55:56 +0000
ROA not after: Fri 10 Dec 2027 03:55:56 +0000
asID: 17561
IP address blocks: 156.244.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60319 (0xeb9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:55:56 2024 GMT
Not After : Dec 10 03:55:56 2027 GMT
Subject: CN=676cd3cf-9f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:d8:00:f2:94:41:1e:a3:8a:6c:0a:05:26:
3d:6b:c1:7c:ab:04:43:58:7e:54:e4:95:72:1b:13:
b7:1e:df:d6:96:6b:33:f6:ba:7b:57:48:c8:ee:5f:
cf:e0:8b:ce:5e:05:e2:f1:f7:06:a9:6f:00:3f:a0:
88:bd:e6:5e:8a:22:ea:52:7a:d6:ae:a5:16:8f:8e:
18:5d:df:ba:3d:42:80:0e:8d:76:04:ec:6e:83:6a:
5f:4e:98:4d:4c:c0:02:d3:e1:fa:9c:06:13:af:c1:
44:45:bf:46:e4:10:6b:61:6f:36:f2:c3:2b:0c:e7:
2a:a4:60:42:d4:6f:4e:d7:cc:ba:bb:a9:a2:87:b5:
85:f8:00:a3:ea:14:43:ec:e1:a9:e4:e3:f8:a4:c8:
08:e7:0f:33:4f:cd:72:3f:a1:bc:07:e7:4e:cd:c7:
da:82:43:a7:6c:4c:6c:19:74:11:20:05:0e:78:05:
ba:32:79:17:4a:da:7d:42:ac:48:5b:f4:dd:58:ff:
99:2a:2b:8e:2d:89:81:1a:3e:d4:b9:56:94:e0:e8:
1c:38:5b:80:5e:6a:f7:f8:75:43:d2:29:e9:61:37:
49:36:c1:38:c4:a2:ec:4d:09:e5:ef:e7:7e:60:54:
55:a0:10:66:ae:16:47:69:3b:2c:c9:4b:77:e4:89:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4D:8D:1F:EC:EE:E7:33:B3:F4:4E:D1:FC:1A:ED:D6:AB:71:46:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/511FB452C33D11EFAC16F1A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:35:bb:a7:1a:e4:a8:d2:89:b3:47:3e:04:2e:a9:75:60:93:
01:26:0c:2f:17:89:67:e9:c6:40:b5:57:97:f8:1e:c3:1d:68:
78:9a:a6:01:ce:0c:aa:1d:5b:7d:55:e8:f8:d7:19:f3:ec:31:
c9:af:c4:5b:4a:39:da:83:ee:16:90:75:03:21:86:53:f5:78:
92:79:5d:c1:1d:c8:aa:ab:ac:e2:a1:48:0b:8e:7d:8b:c4:5c:
43:e3:b6:bd:e8:92:85:cc:1f:85:5a:99:5a:ee:e6:d6:55:2c:
89:d1:59:cf:cd:a9:80:c4:35:2d:86:43:3a:7c:66:66:65:29:
f9:b8:1d:b0:da:86:98:fa:f8:a3:39:ac:31:50:71:03:7a:41:
ab:ed:6b:62:be:2c:0a:0d:a5:24:ec:64:83:17:37:78:aa:2c:
28:0a:3d:70:35:a7:a7:40:b9:59:76:e2:ce:a9:cd:77:e7:8c:
f0:51:b9:76:43:3c:62:87:52:54:68:b7:62:ca:83:48:28:c5:
aa:f3:5b:b5:08:14:6e:65:e9:ca:52:e6:e3:b7:7c:f5:00:fe:
f8:67:7a:b7:74:e6:35:8c:0d:99:24:c8:18:bd:2a:64:51:d4:
1f:67:d5:0f:f2:49:d3:33:ff:1d:74:1a:9b:a2:ad:6c:07:e3:
64:7c:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:04 2025 by rpki-client