Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59434F9ACCCA11EF927E3B57762E951A.roa
File: 59434F9ACCCA11EF927E3B57762E951A.roa (raw, json)
Hash identifier: 5R1/s2NhbSaxMnJzzyVhtamJHyVtpU7NLYe7hrqvnVY=
Subject key identifier: FA:54:C0:D0:5D:07:79:4E:E2:6A:F6:4B:68:08:F5:C0:47:B0:09:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59434F9ACCCA11EF927E3B57762E951A.roa
Signing time: Tue 07 Jan 2025 07:38:12 +0000
ROA not before: Tue 07 Jan 2025 07:38:09 +0000
ROA not after: Sat 13 Dec 2025 07:38:09 +0000
asID: 984
IP address blocks: 156.233.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64116 (0xfa74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 07:38:09 2025 GMT
Not After : Dec 13 07:38:09 2025 GMT
Subject: CN=677cd9e4-971c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:76:ce:6a:33:24:bc:9a:6e:21:32:57:9c:
d8:c6:84:ee:f6:28:b7:fb:80:85:eb:bc:94:09:d0:
a0:f0:b2:87:78:68:b4:ee:fc:8f:ed:16:a6:ef:79:
a7:17:f6:7c:a4:91:ae:81:cb:d1:66:4f:51:b2:5c:
56:3d:f5:dc:c2:84:2b:87:10:92:5c:10:79:3f:22:
22:da:bc:87:60:2b:5a:5e:6e:43:eb:fb:48:e0:fc:
82:7c:a3:1e:f7:9b:2e:f6:a7:2c:4e:ab:6b:67:a6:
b0:5a:46:05:a7:7c:67:dd:89:cd:92:87:9e:36:33:
8b:49:15:e7:02:07:5f:62:de:75:87:5a:05:4e:3c:
8a:60:36:2d:a6:64:e3:85:a1:1f:b9:3b:b2:59:80:
d6:67:44:66:78:f3:db:d6:ee:33:b9:2e:aa:a7:9a:
02:9b:78:f7:43:0c:74:31:41:dd:89:ed:f9:a8:a8:
0b:14:72:e1:16:a7:d4:a2:c5:b9:6a:56:2b:cb:17:
a8:94:52:4e:95:8c:02:d8:1c:c7:6a:af:d2:55:80:
18:01:f7:da:cf:da:07:f4:ad:41:bd:cb:81:cd:65:
67:f7:15:47:ac:1f:f5:c1:11:97:7c:ca:cb:a5:a8:
ea:a5:36:86:10:e8:df:20:91:b0:ec:af:e3:50:f2:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:54:C0:D0:5D:07:79:4E:E2:6A:F6:4B:68:08:F5:C0:47:B0:09:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59434F9ACCCA11EF927E3B57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e7:12:cc:ab:91:d1:5d:d4:b5:1e:88:25:ab:88:1c:2c:ca:
47:7e:7e:ac:75:bb:fa:eb:89:43:c9:ee:90:8c:84:77:f6:92:
4e:8d:6d:d3:b0:fb:43:ab:ab:0a:e6:d3:92:c2:ee:88:ab:e4:
0f:fb:5e:b1:02:82:bd:82:18:fb:ff:67:27:99:95:b0:da:8b:
bb:09:00:f1:7a:41:04:a7:c7:d5:c1:94:1a:b5:1e:2a:1b:d9:
b2:92:a4:1b:3c:83:ae:16:80:cc:e0:87:01:6e:dd:fe:98:d9:
e1:5c:6f:1e:44:9e:45:2e:dd:f2:19:5a:61:ad:cf:d4:9e:24:
b1:39:1f:ec:57:7d:14:31:ba:b2:fd:c8:e1:f4:78:ce:e9:aa:
6d:45:78:84:7e:0a:69:7f:a6:19:00:c0:f2:0f:f7:e4:dc:fa:
57:48:61:b5:3f:40:9f:c9:4d:82:af:b1:5c:70:f6:c9:05:20:
45:eb:86:b9:e3:06:eb:fb:bb:b3:28:ce:3c:93:09:56:e2:62:
00:13:47:ac:17:96:44:68:8b:d4:2c:6a:99:0c:16:31:98:35:
b1:3e:f6:6d:59:5e:53:c9:81:57:ab:4b:58:7a:7f:7e:a2:f4:
ab:d5:c9:82:be:16:55:ff:39:9c:95:4c:81:69:a5:56:6b:dd:
6f:b9:ac:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:25 2025 by rpki-client