Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/521B2B32C33511EF8809636F762E951A.roa
File: 521B2B32C33511EF8809636F762E951A.roa (raw, json)
Hash identifier: uebFaBx7x1797yiE0sAFkZgD7uJRQBVEzb4yhUVOZKs=
Subject key identifier: 53:79:16:8F:17:58:BF:2E:CE:E8:0D:67:9A:AC:61:AD:C5:44:D0:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/521B2B32C33511EF8809636F762E951A.roa
Signing time: Thu 26 Dec 2024 02:58:45 +0000
ROA not before: Thu 26 Dec 2024 02:58:41 +0000
ROA not after: Fri 10 Dec 2027 02:58:41 +0000
asID: 17561
IP address blocks: 156.244.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60225 (0xeb41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:58:41 2024 GMT
Not After : Dec 10 02:58:41 2027 GMT
Subject: CN=676cc665-2afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:55:b1:d5:58:3a:be:27:4f:dc:9f:6a:6b:
61:23:0d:3b:0c:33:66:f6:27:e9:75:21:a6:00:10:
7f:53:d6:03:89:ec:82:3d:a6:4f:ff:b7:19:90:d5:
88:0f:a9:4b:ef:f3:c6:13:3e:c6:0b:51:01:b4:1f:
10:c6:4f:cc:db:eb:33:63:dc:e6:43:51:ea:8c:40:
44:ac:52:67:f7:32:f8:88:ec:4a:8f:9f:10:5e:f2:
11:87:d2:73:c5:8b:a6:6d:39:87:80:75:6e:e0:7b:
01:2b:e7:ab:9a:21:84:3f:99:0d:73:de:7a:21:92:
b1:b9:81:d4:ad:14:51:8b:80:6b:25:83:17:00:24:
6f:de:b6:64:97:05:58:4c:59:cf:72:70:b5:e6:ee:
6a:82:13:87:66:ff:57:c3:d9:95:88:29:2c:24:71:
12:2f:52:15:82:32:c3:a8:89:e2:65:0e:65:43:6f:
b0:99:43:bc:a4:78:c8:27:57:f2:22:6c:14:76:dc:
38:1f:45:58:8c:28:ef:9a:b4:cd:c3:81:68:0d:79:
06:85:08:6f:42:56:8a:6a:90:f4:2b:95:84:cf:15:
f1:1c:9a:29:92:83:ae:a7:7c:39:85:b1:1f:f9:73:
f2:86:c4:01:9c:4d:cb:ad:e5:16:af:a1:91:73:3f:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:79:16:8F:17:58:BF:2E:CE:E8:0D:67:9A:AC:61:AD:C5:44:D0:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/521B2B32C33511EF8809636F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.156.0/24
Signature Algorithm: sha256WithRSAEncryption
94:92:3b:b7:f0:96:94:24:76:25:22:29:bb:9d:1a:ff:4d:04:
b4:e8:a9:23:59:7a:d6:d1:10:a8:fe:3d:13:1c:ef:1e:2a:40:
8b:c7:5e:42:9c:ff:17:b0:30:66:97:30:0f:9c:08:5c:56:10:
1a:a9:94:00:59:74:de:7a:fc:3e:a6:59:7c:30:2c:b5:b8:8e:
3a:a5:42:b7:91:35:59:e5:91:78:e1:f9:d3:c1:d4:1f:39:be:
82:8c:35:30:c5:f9:b1:46:75:9f:9e:3b:38:a8:b1:f4:67:5d:
d2:03:03:72:55:49:b6:41:d9:b2:1c:e5:37:2f:0b:c9:7b:0b:
74:75:eb:c4:b3:71:e2:d7:b5:5a:64:8d:5e:10:83:c5:52:84:
0b:ae:82:c5:51:0f:37:42:95:aa:e6:50:67:c6:27:d8:ac:fc:
de:b6:7b:d1:ea:75:0b:49:18:65:9e:f9:01:98:c0:10:b5:26:
11:29:16:66:f6:81:53:d9:36:79:d9:c0:22:33:f8:88:59:51:
3a:80:12:28:fc:ce:bf:a1:04:c6:4b:5a:e3:05:35:a5:69:74:
3a:6f:79:5d:98:2a:4e:84:f9:b6:30:d3:71:f4:4d:2b:2e:4c:
37:8e:c9:20:56:b5:d3:a9:63:ca:52:f7:96:e7:9c:0f:f5:e0:
a4:7c:da:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:26 2025 by rpki-client