Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59F905ECC99611EFAFEE5787762E951A.roa
File: 59F905ECC99611EFAFEE5787762E951A.roa (raw, json)
Hash identifier: iXOLbmOKq3eM76mRY4VJpCGvhknkEu/WWYcbPPMivZo=
Subject key identifier: 7C:01:66:A1:DF:71:23:1B:B0:46:7F:06:50:4B:E3:0D:23:47:BE:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F615
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59F905ECC99611EFAFEE5787762E951A.roa
Signing time: Fri 03 Jan 2025 05:48:26 +0000
ROA not before: Fri 03 Jan 2025 05:48:23 +0000
ROA not after: Mon 13 Dec 2027 05:48:23 +0000
asID: 17561
IP address blocks: 156.233.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62997 (0xf615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 05:48:23 2025 GMT
Not After : Dec 13 05:48:23 2027 GMT
Subject: CN=67777a2a-d0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:76:dc:d0:f7:36:10:87:68:29:de:00:95:
05:f3:84:2c:e9:26:e7:d4:2c:ba:cb:51:e8:c1:a6:
99:1f:5b:44:42:93:c6:96:74:2e:13:be:f4:d4:56:
5d:6c:4f:1f:9b:9d:c5:d6:75:2e:46:4d:88:0f:bd:
42:c6:fc:e0:cd:5f:11:78:b1:0b:7d:94:9e:ac:cb:
27:db:7b:5d:61:c4:26:73:f9:cb:5c:3c:81:e9:a0:
09:62:6a:d9:fa:0c:bc:bf:06:72:a4:19:dc:d6:59:
05:1e:8a:73:ef:23:a6:13:8b:fd:20:dd:5d:e2:49:
65:2a:d4:e5:e8:ac:00:6f:a3:10:ca:64:98:97:d2:
23:9f:5b:de:23:66:2e:a5:d3:27:36:5f:40:ca:ae:
f0:e4:aa:ff:a2:8c:7d:4a:b6:86:17:f4:dc:aa:27:
5d:28:60:a7:e9:8f:6b:11:0e:35:50:8c:c0:83:bd:
7f:c4:ab:56:82:1e:16:48:f4:0b:ea:45:d7:ee:84:
f4:65:a9:d2:03:d0:a7:e3:19:99:93:54:ca:4d:74:
10:b7:0a:d7:40:09:df:64:06:c3:7a:13:9b:b9:cf:
09:07:23:77:7a:8b:9e:7b:fb:a6:05:18:fa:7b:ac:
82:47:83:8a:9e:8f:dc:30:bd:4c:1c:a2:ae:48:68:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:01:66:A1:DF:71:23:1B:B0:46:7F:06:50:4B:E3:0D:23:47:BE:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59F905ECC99611EFAFEE5787762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.143.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a1:c3:4c:1e:dc:92:de:6d:79:d8:3f:a1:79:c3:99:3a:75:
c9:73:83:c8:34:9f:31:c4:3e:68:8a:8d:95:fb:7f:4a:4c:2d:
26:3b:d9:73:c6:66:39:01:11:5b:35:2a:13:9a:41:1d:11:43:
4c:1e:c9:ac:da:db:95:23:f8:c4:30:ae:8f:0b:db:7f:cd:0b:
1a:c6:e4:20:91:35:93:14:f1:d9:61:ad:a6:a7:66:0e:d3:e6:
23:84:62:2f:78:40:b7:9a:fa:7c:e2:14:a3:87:6f:dc:03:83:
48:90:74:ca:95:17:b4:08:61:02:2a:20:e6:a1:b5:c5:d1:09:
d2:95:28:1a:d0:48:dc:89:6c:5a:30:4e:e9:2a:85:2e:18:22:
8f:77:37:b6:ce:2a:41:d1:28:2a:b1:f7:ef:65:db:ae:dd:32:
39:58:45:fb:bd:eb:f3:94:c2:5c:de:47:c0:a0:f2:e8:1d:cf:
be:5a:ec:6f:0c:51:22:a5:37:df:a6:92:53:08:8d:c2:a8:0b:
ed:11:e5:dc:be:e0:6a:9b:16:64:ed:be:77:36:91:14:c9:bc:
d2:75:b0:be:54:6a:48:6c:c3:21:d4:78:a0:46:e1:be:61:88:
66:dd:27:59:11:a2:3f:7a:2f:27:40:1c:9b:0d:5e:47:d5:77:
17:31:0e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:42 2025 by rpki-client