Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/706DCADEC32311EF9EC5FA6A762E951A.roa
File: 706DCADEC32311EF9EC5FA6A762E951A.roa (raw, json)
Hash identifier: wP3MD3KDqi/5kacwUmAHZHUEyseE8PnbNdUuqhIPQ5o=
Subject key identifier: A8:39:07:DA:B7:0C:5A:7B:30:D5:41:CF:42:5B:33:1E:96:36:8E:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/706DCADEC32311EF9EC5FA6A762E951A.roa
Signing time: Thu 26 Dec 2024 00:50:45 +0000
ROA not before: Thu 26 Dec 2024 00:00:41 +0000
ROA not after: Sat 01 Mar 2025 00:00:41 +0000
asID: 984
IP address blocks: 156.243.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59980 (0xea4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:41 2024 GMT
Not After : Mar 1 00:00:41 2025 GMT
Subject: CN=676ca865-eb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:5f:8a:00:c8:3b:0c:d9:5b:16:4a:d8:76:
14:f5:51:4f:d9:c3:82:19:8a:0b:50:d8:05:f7:5a:
a1:b9:10:ee:4f:f6:3c:0e:7b:e2:23:3f:99:77:79:
92:30:4f:f3:14:88:ab:df:ed:03:98:d3:c9:74:17:
4e:eb:72:b7:10:4d:37:aa:f2:fe:17:a6:65:42:6d:
2c:3b:74:8c:3f:78:be:e1:65:b9:c0:fa:48:43:9e:
f1:d9:0e:f9:5c:df:15:01:a4:2d:38:32:ec:4b:b9:
98:00:f8:a6:17:d5:94:4e:e8:35:56:a7:b8:3a:41:
19:f9:74:3f:48:5e:a7:08:6a:51:fc:c2:9b:28:c3:
e4:9d:a5:d1:b1:70:aa:95:50:79:de:82:78:f1:47:
16:04:73:66:d2:6c:d6:5a:31:04:33:d9:a1:70:60:
f5:f2:97:78:06:e0:95:5a:23:5c:63:8c:a3:c7:7a:
c6:2c:98:4c:42:69:c0:1b:b9:51:a8:2b:03:e5:28:
af:94:2a:55:52:12:14:06:d6:4d:07:84:81:cf:cf:
15:c1:05:ea:b8:96:7b:c8:21:09:3a:8d:af:49:b4:
a7:2b:e9:e2:08:c9:da:ed:5f:60:fa:ec:6b:7c:1b:
68:a0:37:fb:75:b0:41:e3:ed:c8:7e:6c:72:91:ad:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:07:DA:B7:0C:5A:7B:30:D5:41:CF:42:5B:33:1E:96:36:8E:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/706DCADEC32311EF9EC5FA6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
46:84:8a:89:c9:70:2c:d9:4d:37:ee:e5:c3:f2:9b:93:41:95:
bf:ae:b1:30:ee:7b:5e:07:3d:5b:8e:e7:f8:49:e2:a5:3b:69:
71:0c:ce:1a:4a:a4:a6:5b:3b:5d:82:f1:ac:c2:5a:e9:76:58:
fd:66:ff:76:15:4e:65:51:49:6a:b6:72:d2:8c:0c:6b:25:ae:
b1:32:61:c2:f4:29:c5:8e:7c:77:70:72:94:e3:9c:33:6b:17:
92:1b:79:a8:97:10:88:a8:11:91:88:aa:1d:af:c3:ba:c5:8b:
29:7f:12:34:bc:a2:91:91:9b:c6:71:f1:8f:40:66:45:47:b0:
58:c9:60:56:cb:17:39:d1:81:5c:9c:5e:0e:21:44:54:f3:d1:
01:95:33:b5:a9:7f:a6:0f:c6:fe:c0:a6:6b:66:ea:8a:f0:18:
45:09:e5:7f:c1:4d:ad:ef:65:b7:8f:fa:24:ef:38:3f:cd:14:
1a:04:87:f2:27:d1:76:c2:55:ae:e1:4a:62:58:b9:73:73:b6:
d1:cf:de:59:5f:7e:f6:06:c0:26:dd:41:d8:72:e6:50:77:60:
5e:0b:63:e8:41:fe:91:3d:27:e4:d2:67:82:0d:9e:ac:f7:ee:
10:11:95:31:74:4a:9a:8b:3e:ad:1e:53:fb:e1:1d:58:e8:aa:
4f:26:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:09 2025 by rpki-client