Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/547A3796CE3511EF82436069762E951A.roa
File: 547A3796CE3511EF82436069762E951A.roa (raw, json)
Hash identifier: ofUrgPY1BgZ3iti9O1yqhbOqSp3EQ6o+3z79oBY9jSU=
Subject key identifier: AE:01:A4:BA:89:48:85:54:05:BC:E1:DC:C8:8B:4F:54:A2:EB:E8:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01021B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/547A3796CE3511EF82436069762E951A.roa
Signing time: Thu 09 Jan 2025 02:56:32 +0000
ROA not before: Thu 09 Jan 2025 02:56:28 +0000
ROA not after: Fri 09 Jan 2026 02:56:28 +0000
asID: 17561
IP address blocks: 156.247.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66075 (0x1021b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 02:56:28 2025 GMT
Not After : Jan 9 02:56:28 2026 GMT
Subject: CN=677f3ae0-688d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:c1:b7:fb:43:fa:44:50:f6:85:30:36:81:
fe:ed:6a:8b:06:b7:30:7a:66:4d:75:63:cc:c7:74:
f5:08:06:42:dd:3d:9c:21:3e:c2:27:ce:2b:a0:09:
e1:48:87:95:0e:06:fd:f5:33:e0:a7:41:0a:a9:54:
a9:04:d9:9e:87:2a:0d:e5:44:82:4b:d0:ad:74:e4:
62:6c:e0:27:3f:8b:56:96:91:f3:c6:7a:ed:86:66:
56:ab:fe:91:65:92:0d:fe:d5:fc:a6:a9:15:7a:cf:
14:ce:0b:7f:2b:a2:24:b1:0b:24:a9:67:99:a5:b3:
04:a4:c5:78:c4:40:a8:a4:f8:90:48:c9:e1:5e:4e:
bb:c6:ab:8c:9e:12:e4:02:59:ff:7b:a5:81:3f:1e:
ac:af:03:dd:6e:b0:da:10:bb:6d:cc:c8:93:86:3f:
b5:44:97:59:1c:b4:04:f7:5a:dd:fd:36:96:c5:57:
2f:8c:8d:38:72:90:14:10:7b:78:b1:d4:a3:ba:e2:
bc:1b:69:de:4a:4a:22:a5:bc:b3:42:fd:3c:e5:b8:
4f:43:46:4c:39:4e:ee:a2:dd:27:ac:1d:67:49:10:
a0:b7:69:ea:88:86:b3:70:4a:25:19:d3:8c:e3:f8:
5c:8f:b8:95:1c:fb:71:46:83:b3:e6:92:55:ad:4d:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:A4:BA:89:48:85:54:05:BC:E1:DC:C8:8B:4F:54:A2:EB:E8:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/547A3796CE3511EF82436069762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.33.0/24
Signature Algorithm: sha256WithRSAEncryption
77:09:de:b4:5c:be:1f:f1:13:d1:10:c6:81:83:42:8d:5c:48:
f9:36:51:b6:1d:0d:2a:3a:cb:34:e7:80:c3:75:80:5d:95:02:
8f:12:1b:b7:2e:24:38:87:ec:2d:c0:e7:84:26:bc:05:19:1a:
eb:c3:4b:47:f1:e2:06:e9:cb:28:f0:39:91:e7:3b:c2:51:df:
ca:37:5a:de:a0:bc:a4:f5:da:85:cb:24:3f:a4:9a:c8:d6:53:
b4:d5:51:ac:3a:73:5b:45:a4:40:46:b0:9b:2e:bb:05:89:2c:
95:6e:d3:a2:d8:3f:e3:bb:11:f9:4b:fc:13:45:75:c8:f0:ae:
1b:f1:da:92:d1:c8:2a:49:61:76:af:17:50:60:ff:c4:fb:fe:
19:d9:bd:1b:7b:c9:23:47:9f:62:2e:4a:cc:7a:37:5b:b5:9a:
72:f1:05:02:25:bb:36:10:fb:9c:af:1c:4e:a3:87:0e:fe:98:
b3:3c:a3:5a:85:69:c5:f1:ab:1a:99:b6:fb:52:23:2e:a3:67:
47:37:07:13:99:a8:8a:9e:19:42:36:b7:d3:36:eb:fa:8c:d4:
53:19:ba:8b:5e:52:8e:42:50:5d:ff:6c:df:28:0b:9f:a5:7c:
95:eb:9a:61:ed:35:f4:2a:28:d5:70:47:0d:e5:8e:98:c3:0c:
e9:47:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:26 2025 by rpki-client