Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67154F42B2DA11EF8AFD1B63762E951A.roa
File: 67154F42B2DA11EF8AFD1B63762E951A.roa (raw, json)
Hash identifier: YMhC6dUweYsHm8sdJLa2QXdKVrNWOEpkfDDed/mCMh8=
Subject key identifier: 66:2D:7F:FF:0E:87:28:09:69:9B:24:42:16:F7:76:B7:33:4A:5D:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67154F42B2DA11EF8AFD1B63762E951A.roa
Signing time: Thu 05 Dec 2024 07:27:37 +0000
ROA not before: Thu 05 Dec 2024 07:27:34 +0000
ROA not after: Tue 02 Dec 2025 07:27:34 +0000
asID: 11331
IP address blocks: 156.239.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57231 (0xdf8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 5 07:27:34 2024 GMT
Not After : Dec 2 07:27:34 2025 GMT
Subject: CN=675155e9-6f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:5b:2c:d9:7b:bd:55:c5:da:f9:f2:68:89:
30:28:c7:a3:d6:da:03:f1:fc:d8:52:40:63:1a:cb:
30:6c:0c:e3:38:23:63:19:e0:f6:f6:a5:a3:e2:a0:
9b:56:c7:a3:cc:a4:9d:eb:73:c1:d2:ef:25:cd:e8:
31:d3:62:dd:e1:85:cc:1b:2e:68:77:61:57:43:c7:
d4:55:5b:9f:96:4b:2b:ba:ae:57:3c:72:38:3c:b4:
73:47:92:24:d6:bd:70:37:6c:a3:df:b9:63:ad:27:
44:10:c9:26:9f:8e:49:85:d5:6d:c0:82:16:36:82:
be:68:bf:70:98:d6:18:da:a0:1d:11:ee:ab:e5:84:
88:8e:64:f5:02:fa:b0:89:a4:d9:6d:ef:5e:1e:ed:
ee:f6:fb:2f:08:18:13:f3:43:be:cc:ab:14:ed:71:
10:6b:ce:54:73:13:44:cb:07:22:eb:e4:f8:12:5f:
0a:d8:1a:81:d6:46:e3:a6:2a:23:78:a0:54:3b:eb:
fe:22:ba:40:c3:7f:9c:a9:30:fa:e6:2d:5e:2e:f6:
ef:06:ad:6f:f9:b5:2a:51:87:cb:50:d8:6a:24:f4:
c1:77:dd:26:2a:4b:5f:65:80:1e:7e:cd:72:d2:09:
17:49:2c:e2:ba:8a:89:df:e3:7f:19:85:ff:d6:0b:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:7F:FF:0E:87:28:09:69:9B:24:42:16:F7:76:B7:33:4A:5D:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67154F42B2DA11EF8AFD1B63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:50:bd:5f:ef:ab:5a:72:1a:d1:a8:db:72:5e:d4:57:8a:09:
e1:19:0e:a4:fa:53:e6:82:08:07:37:7c:4a:d0:c7:ba:4f:7d:
b5:45:ac:ce:ef:31:56:2c:f5:85:72:15:7e:01:6c:6e:60:20:
0d:d6:92:6c:4c:11:67:25:be:10:a2:f5:df:5a:3c:ac:2a:dd:
75:b5:bb:9d:b5:83:05:d9:24:6d:b6:9d:bc:aa:0e:bb:5c:ff:
fa:5a:b4:63:1c:43:9d:bb:d0:41:03:43:ab:0e:2e:da:35:4f:
94:56:18:a2:e8:40:6e:96:d8:a2:45:42:83:f1:7f:87:3d:8c:
a9:e9:8f:0e:f5:50:7c:ed:dc:4a:d0:57:da:00:2a:c2:44:7b:
ed:dc:84:8d:6f:ea:06:68:94:a7:6f:10:c2:06:d6:a2:80:0d:
56:b4:f1:1e:d4:3e:01:7c:9b:b1:7f:38:f5:c5:fe:c6:12:36:
b6:53:f6:3d:0f:66:bf:7b:5b:01:4e:fc:ed:b4:18:44:f6:86:
1e:e0:79:b1:18:4e:2b:d0:49:99:1d:a1:de:aa:35:b9:02:57:
9d:7e:f6:f5:54:cc:d9:36:55:d0:48:2b:b5:54:71:3c:1b:8d:
c9:92:c9:38:fa:7a:0d:b2:16:dc:aa:a4:e0:72:5f:41:6d:ce:
f7:63:0d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:36 2025 by rpki-client