Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63F45E2EC98311EFA1835490762E951A.roa
File: 63F45E2EC98311EFA1835490762E951A.roa (raw, json)
Hash identifier: aBlM9fB8eSIh/R6u7GUEqfxs9TVkaR6iXGr2JriWIgE=
Subject key identifier: 41:C3:66:0B:3F:2B:7A:E8:7C:3A:7F:71:AB:10:5F:33:FB:83:2A:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F565
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63F45E2EC98311EFA1835490762E951A.roa
Signing time: Fri 03 Jan 2025 03:32:43 +0000
ROA not before: Fri 03 Jan 2025 03:32:39 +0000
ROA not after: Mon 13 Dec 2027 03:32:39 +0000
asID: 17561
IP address blocks: 156.230.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62821 (0xf565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 03:32:39 2025 GMT
Not After : Dec 13 03:32:39 2027 GMT
Subject: CN=67775a5b-d1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:fb:eb:e3:7d:af:1e:8c:d4:0a:83:a4:4e:
3f:f8:bb:d0:10:47:c4:8c:bf:43:a0:af:97:6d:8b:
87:b9:ca:63:12:cd:bf:eb:31:ee:b2:98:be:99:0b:
56:2c:b1:1e:e9:c1:dc:9f:a3:02:be:ef:7a:a0:12:
3a:b3:c1:11:91:2e:9e:d4:53:23:ef:a2:f5:8c:dc:
e5:94:2e:9a:e8:2c:29:50:7f:f6:d4:c7:59:69:e9:
2f:aa:8a:cc:9b:cb:37:85:02:41:ee:31:99:5b:52:
de:de:dd:fe:99:b0:c4:75:8f:00:55:64:c0:51:07:
2e:c3:fb:17:8e:a7:0e:6c:eb:4a:b1:f5:38:c4:4a:
cc:c5:30:18:26:7e:62:9b:30:e9:c8:1d:0b:5e:a0:
f5:3f:3c:13:1f:b8:ec:2b:6a:10:72:8d:3c:5c:ac:
da:e5:9c:c5:55:c3:4f:88:cf:ae:67:93:3a:df:9c:
d4:ae:63:93:b9:81:c6:a7:db:c4:3e:71:00:e4:d4:
26:0c:51:b2:04:fc:22:d3:23:5f:f6:e2:09:77:e5:
58:f1:28:f7:b0:ed:a9:52:ee:d4:73:2b:fa:ff:40:
e6:59:ac:9b:67:c3:45:f3:44:e9:c6:7c:b7:b5:ba:
44:16:ec:68:d5:86:95:c6:ee:9c:2f:99:7f:ea:92:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C3:66:0B:3F:2B:7A:E8:7C:3A:7F:71:AB:10:5F:33:FB:83:2A:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63F45E2EC98311EFA1835490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:8c:14:25:84:ff:ef:ea:9f:ce:e9:46:67:5f:b8:de:37:1a:
af:2e:57:02:ec:dc:40:1a:d1:ea:8e:b3:5f:50:25:9b:72:84:
1b:02:11:8f:9d:13:0f:5c:11:43:c5:b0:db:a9:bd:96:95:7c:
25:b4:50:66:02:3e:e4:ad:63:83:94:18:e7:8e:b9:15:82:7b:
13:7f:91:dc:75:be:a9:f6:e6:b3:d1:4e:41:a0:2b:f7:0e:78:
44:74:c5:e0:ad:69:2b:71:34:ee:e4:d0:c9:ae:f1:b6:3f:a0:
2a:2d:63:45:71:82:d0:1f:a2:ae:ff:de:40:95:73:cc:f1:f8:
ea:3b:6f:2a:c4:33:d7:69:50:e4:e5:81:cb:fe:fa:9c:6a:e8:
bd:a6:50:07:ff:b1:c6:29:c1:6b:9c:73:f7:85:e0:10:45:cd:
e5:b6:26:b6:a7:bd:fd:e7:0e:27:c4:34:6f:0c:c8:e2:b1:4a:
02:4a:9d:fa:74:51:03:9e:b8:02:1c:62:aa:c9:08:2c:f8:3b:
f8:c4:7a:fa:1f:3f:e3:f0:4f:43:92:ec:e5:3a:3c:ea:cb:d4:
2b:de:e7:79:d1:86:75:5b:db:22:a5:23:bb:4a:e8:2b:01:e7:
c8:b7:f0:ec:c7:88:c7:c4:5f:81:4c:a2:b0:b7:08:dc:b0:40:
68:13:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:26 2025 by rpki-client