Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65DC4AFEB5FA11EFB4A1948B762E951A.roa
File: 65DC4AFEB5FA11EFB4A1948B762E951A.roa (raw, json)
Hash identifier: AB5XH8/NmPeABuTPXJJwU4NRhjYnA1n3XjttmNcgyeI=
Subject key identifier: 0B:19:88:B7:32:37:22:EA:A3:95:8A:0E:58:39:B3:B0:69:7E:97:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E148
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65DC4AFEB5FA11EFB4A1948B762E951A.roa
Signing time: Mon 09 Dec 2024 06:54:13 +0000
ROA not before: Mon 09 Dec 2024 06:54:09 +0000
ROA not after: Thu 06 Feb 2025 06:54:09 +0000
asID: 149014
IP address blocks: 156.236.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 06:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57672 (0xe148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 06:54:09 2024 GMT
Not After : Feb 6 06:54:09 2025 GMT
Subject: CN=67569415-3589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:e4:fe:ea:32:b8:74:c2:6d:dd:08:ae:88:
f0:ec:67:18:89:a6:10:ab:3e:2e:1b:f5:c4:5e:11:
59:ec:26:67:89:61:c9:9e:37:bf:c1:ef:ff:72:12:
3e:6a:b0:64:83:89:df:0b:58:75:d3:13:ce:59:76:
42:79:9f:d2:5b:af:82:d4:39:02:62:a3:a8:3d:3b:
b1:01:c3:69:90:24:99:ac:71:73:2e:c0:1d:a6:94:
57:8c:1b:b9:3a:93:92:e3:27:31:79:d5:56:76:0d:
a7:b9:3b:03:dc:5d:a5:06:e9:47:5b:a5:08:42:64:
07:d7:e7:19:b1:70:db:54:7a:a9:e4:1f:d3:2d:87:
66:9e:27:e8:64:b3:64:56:06:1f:84:7a:09:14:a9:
0f:9f:d8:0d:ba:10:fd:5f:48:44:3b:e3:5f:d2:07:
19:a8:42:d7:19:c0:3e:10:e7:c6:3e:6c:49:df:b9:
a6:4f:22:ad:35:6b:ca:0d:e9:62:fd:9e:3f:21:6e:
6a:e7:8f:75:19:2b:7d:9a:b0:96:33:dc:bd:2e:e8:
e4:45:fd:24:77:e2:c9:e3:f1:28:55:4d:d4:6b:55:
03:9f:04:90:25:0f:af:cb:eb:4f:b4:08:e4:54:06:
1e:da:f8:ef:a1:b0:af:2c:4a:0b:aa:ef:8e:ea:8a:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:19:88:B7:32:37:22:EA:A3:95:8A:0E:58:39:B3:B0:69:7E:97:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65DC4AFEB5FA11EFB4A1948B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:6c:31:6d:f4:94:82:3a:d1:5f:ad:f9:6b:c5:51:69:c7:09:
18:5b:f5:e8:1e:90:d9:f5:a6:8d:f1:57:01:b5:54:ec:70:7d:
9d:71:43:0a:ff:7a:45:b5:a9:4a:1b:13:a5:66:01:8e:31:f0:
57:a6:b5:f8:6e:d7:16:f5:c5:2c:31:bc:60:9e:e7:e4:b9:25:
98:8e:88:1d:d2:46:85:1b:ec:d4:a1:b8:43:d1:40:31:19:e3:
76:3b:02:4d:69:68:0d:5e:ab:48:04:98:75:ec:1b:c0:54:a3:
39:bf:25:49:30:1e:e0:ec:56:9b:82:80:b8:be:af:90:66:27:
82:6f:d7:f2:47:ef:00:93:4d:18:30:f0:fc:8b:87:7d:03:b3:
50:0f:b9:32:72:b0:e3:5c:2b:f5:d5:b3:14:ab:f8:8b:a8:99:
d2:3f:74:92:0d:0c:e8:6c:49:59:19:1d:d2:4f:37:a6:cd:53:
48:1d:d8:6c:c8:f3:e2:6a:d5:71:38:42:75:86:9c:85:25:cb:
fc:ee:e7:3b:9c:05:26:da:11:12:f9:b7:bf:47:a6:33:2c:08:
66:c7:0b:f0:3a:e2:b3:b3:f0:e8:79:f4:7b:80:3e:57:6b:d5:
d2:c5:6e:08:7d:84:8b:de:9d:f4:76:8c:60:f0:8f:65:93:ea:
76:c2:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:24 2025 by rpki-client