Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/703F6034CD8911EFB17449A1762E951A.roa
File: 703F6034CD8911EFB17449A1762E951A.roa (raw, json)
Hash identifier: 3N4T5WJNX6ADwR85QujCmV6E2Jc5REB7NUwBePMpZqU=
Subject key identifier: 04:41:75:94:7C:35:AA:76:AF:7F:38:64:EB:DD:88:48:5D:56:A2:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010045
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/703F6034CD8911EFB17449A1762E951A.roa
Signing time: Wed 08 Jan 2025 06:26:05 +0000
ROA not before: Wed 08 Jan 2025 06:26:01 +0000
ROA not after: Mon 13 Dec 2027 06:26:01 +0000
asID: 17561
IP address blocks: 156.252.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65605 (0x10045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 06:26:01 2025 GMT
Not After : Dec 13 06:26:01 2027 GMT
Subject: CN=677e1a7d-5a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:4c:df:d2:91:7c:c0:9f:78:4c:86:f9:c2:
57:1f:1e:85:5f:a0:26:b2:41:9a:f6:5c:e3:c3:41:
c0:b8:4f:7e:71:58:d9:0e:f1:05:48:8b:54:cf:75:
0f:0b:da:6c:88:6f:a0:41:42:de:5a:2d:0e:6e:5d:
e1:00:79:54:b9:69:3a:96:1f:2c:38:48:d3:56:4c:
90:78:cc:51:46:9f:bb:89:de:53:9d:97:27:34:b6:
1b:1c:03:93:11:29:94:7d:e3:5a:f0:ac:13:0d:7d:
d6:79:a5:85:96:30:9b:9e:7c:bc:24:95:6b:2d:39:
d8:6f:b3:9f:57:99:97:97:d7:b4:fc:0a:51:33:5a:
55:14:7b:0c:8e:aa:d8:ee:b0:05:55:03:bd:e8:f3:
5f:75:be:ec:74:56:4e:3b:b8:b2:f8:9f:dd:0f:7d:
bf:ba:de:65:08:5e:58:bd:06:9a:81:fa:6c:3c:6c:
67:9a:49:31:e3:27:ab:13:a4:cb:97:8e:11:88:b3:
b2:9d:9c:4d:ad:c6:b5:8d:96:70:9d:83:57:28:63:
01:75:3c:2c:50:4e:51:d8:46:0d:b6:26:1e:78:cb:
f8:82:ef:7e:af:a6:97:97:e4:11:6b:27:1b:70:95:
4e:e9:11:42:81:63:3d:56:a1:97:53:6c:e3:20:bf:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:41:75:94:7C:35:AA:76:AF:7F:38:64:EB:DD:88:48:5D:56:A2:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/703F6034CD8911EFB17449A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.49.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d8:37:69:eb:58:a6:8c:52:01:9f:db:d3:86:55:40:0e:78:
5f:53:5f:0c:d7:55:77:c6:26:b6:73:37:fc:51:ce:de:3b:5b:
fe:0a:c5:b7:ee:c1:72:f6:25:88:04:17:af:4a:cd:9b:13:d4:
a5:c6:6f:de:a5:ec:d2:b5:2e:a4:25:fd:38:17:66:df:91:50:
5d:35:a4:ee:90:28:0c:bd:3a:53:96:7e:c7:56:b4:4f:ce:aa:
f6:78:84:bb:96:13:c8:94:51:b7:d3:04:14:a6:e3:ba:42:a8:
3e:29:74:02:38:5d:5f:41:83:76:ce:4c:b4:75:0d:65:4b:20:
97:36:b8:c1:d1:d5:98:5e:ff:39:c2:6d:84:cc:a3:54:05:c6:
a9:78:4f:9e:79:85:52:7e:0b:e5:ef:99:50:43:ad:cb:08:60:
43:c0:ad:a5:84:7a:6a:d1:d8:a9:ec:0d:df:11:6f:d6:e2:d6:
31:90:1e:59:9a:55:50:61:bd:a9:c0:b1:b0:b8:11:45:17:a7:
fd:94:1a:d5:b5:e7:30:18:74:16:02:ca:be:6a:ad:f2:d5:a2:
e6:53:a3:3d:ba:b9:bd:fe:db:e0:ca:26:94:d4:c9:48:19:2e:
a6:16:7d:51:4a:46:62:b5:86:9a:87:0f:d2:a5:d2:90:74:a8:
de:f3:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:46 2025 by rpki-client