Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54219520C33E11EF8B7472AB762E951A.roa
File: 54219520C33E11EF8B7472AB762E951A.roa (raw, json)
Hash identifier: ff5t+Jva3Y4+dDrJeReXAUmKc7FVY0G6atBzsdz623w=
Subject key identifier: BA:B7:92:4F:EF:78:A2:83:53:7D:42:90:44:69:72:1D:03:6F:31:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54219520C33E11EF8B7472AB762E951A.roa
Signing time: Thu 26 Dec 2024 04:03:14 +0000
ROA not before: Thu 26 Dec 2024 04:03:10 +0000
ROA not after: Fri 10 Dec 2027 04:03:10 +0000
asID: 17561
IP address blocks: 156.244.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60331 (0xebab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 04:03:10 2024 GMT
Not After : Dec 10 04:03:10 2027 GMT
Subject: CN=676cd582-7aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:74:91:12:ea:de:51:0d:46:d2:9f:22:b0:
2e:39:4a:ae:0d:6f:e9:79:33:b5:3f:e1:c5:13:7f:
bf:b2:9e:0d:8d:37:b9:53:1f:3f:20:b8:b5:43:d4:
60:77:4c:76:bb:75:11:fc:74:83:e1:2f:32:bd:d2:
41:c6:10:03:cc:ac:1b:3e:9c:ca:13:e7:87:8d:55:
a2:54:38:f5:69:95:59:a7:f2:8d:ca:1a:4c:91:88:
46:d2:f0:31:54:42:d8:78:f1:ad:47:7b:11:8e:b4:
c6:f0:a2:0d:83:ea:01:e9:de:b2:4f:eb:6f:b1:b7:
6d:a7:17:76:5b:39:60:92:bb:7e:6c:db:da:e0:27:
2a:4e:c0:66:1b:0a:c9:30:4a:78:26:a7:e2:f3:ef:
99:1d:19:a1:1c:6f:93:2c:b1:83:fe:18:23:f6:14:
aa:f4:8f:99:08:cb:24:6f:23:d4:b2:51:f7:0e:bb:
69:be:d1:99:0a:1d:e4:f0:c3:d5:6b:b6:02:bc:61:
c6:e5:8f:e6:93:ca:f3:26:20:b1:76:8f:d8:ef:a4:
56:5a:cb:26:53:49:c1:62:ab:40:87:ea:db:39:cd:
3d:b6:c3:15:f8:fe:f4:a9:84:bb:a9:67:25:0d:ed:
90:6f:1c:09:7c:f5:64:89:40:97:c6:38:34:90:cd:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B7:92:4F:EF:78:A2:83:53:7D:42:90:44:69:72:1D:03:6F:31:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54219520C33E11EF8B7472AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.209.0/24
Signature Algorithm: sha256WithRSAEncryption
94:45:34:3d:93:5f:e3:0d:ea:48:51:39:16:dc:9b:06:de:d2:
4e:70:a1:76:bf:de:99:8e:42:24:94:17:c5:a2:2f:1a:16:0e:
c5:89:16:13:91:e8:23:87:d4:dd:17:0b:79:3c:c2:45:e1:91:
34:6c:01:70:98:1b:4d:63:5e:53:03:1b:69:85:2a:1b:81:4c:
b6:23:85:2f:e7:e9:11:9d:11:69:e0:dc:fe:9c:fd:62:20:f7:
65:89:94:d5:4d:f6:4b:93:b9:21:2d:f2:41:22:df:be:74:58:
48:f2:95:7b:de:fd:e9:a2:b6:fa:d8:f2:64:83:a8:e5:12:0e:
b6:68:97:c7:39:c1:6e:b7:fb:09:60:2f:b2:44:9f:6d:c2:0f:
ed:d2:35:96:fe:c4:72:ea:b6:73:ac:83:c6:8f:57:50:ff:a2:
0d:07:16:89:fc:13:d3:fb:44:1f:f1:a7:1c:6e:2e:1e:c3:02:
5c:71:db:f0:b8:59:f7:55:c0:0f:db:fc:fd:fe:49:82:5e:d3:
f6:08:3c:02:6f:a4:08:07:03:50:e1:6d:64:97:e8:06:61:56:
42:35:58:d1:da:24:d9:54:cc:af:2e:b5:5e:4c:22:22:43:22:
9b:a5:34:6d:f4:02:36:6d:65:22:4f:d0:c4:86:88:2f:d6:a4:
ef:34:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:04 2025 by rpki-client