Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7316683ACCDE11EFB90E6A56762E951A.roa
File: 7316683ACCDE11EFB90E6A56762E951A.roa (raw, json)
Hash identifier: 2ROL+cQd5sN2zBODhgFYDrYJjsLz01iOjVw1QB+nNW0=
Subject key identifier: EB:91:75:B7:88:A9:C6:51:5E:F4:0A:AC:65:6A:D2:0F:C4:AF:E2:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7316683ACCDE11EFB90E6A56762E951A.roa
Signing time: Tue 07 Jan 2025 10:02:06 +0000
ROA not before: Tue 07 Jan 2025 10:02:02 +0000
ROA not after: Mon 13 Dec 2027 10:02:02 +0000
asID: 17561
IP address blocks: 156.233.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64395 (0xfb8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 10:02:02 2025 GMT
Not After : Dec 13 10:02:02 2027 GMT
Subject: CN=677cfb9e-7452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:f9:5c:52:4f:4c:d8:b4:ff:60:97:b1:26:
56:f8:8a:89:18:2d:2d:56:17:2f:b2:e5:76:03:8e:
d3:7b:d1:f2:d0:b0:e2:f6:d8:85:b6:78:c8:84:e5:
b7:4d:5a:09:e8:52:57:24:0d:d8:41:6f:fe:f5:df:
f8:64:92:e5:95:4c:cb:4e:c6:19:29:55:5a:83:77:
bb:3a:0a:e6:63:d6:80:a2:dc:da:a7:66:e5:20:07:
90:6c:58:dd:44:c8:fc:f4:3d:63:cc:ad:20:6d:bc:
6d:fc:5a:d9:e5:99:dc:a6:1f:3e:9b:ca:87:c3:ff:
83:f7:66:ed:ab:bd:38:7a:a2:44:3c:d2:76:95:70:
61:23:e4:09:5f:93:bb:ec:85:9a:49:de:41:68:8e:
6d:e8:88:28:e3:e2:75:94:c0:e2:fd:00:d4:0f:d0:
09:c6:80:b2:f3:d6:db:5a:a9:87:b7:1f:e8:b9:d0:
3b:b8:cc:b0:ca:99:e8:6d:ac:4d:54:78:4a:2a:f4:
1f:bf:24:e0:9e:08:9d:77:17:2f:7d:87:bd:1e:2e:
52:64:3c:bd:bd:99:9e:27:b7:4a:15:65:a6:ed:da:
62:f6:82:3f:ef:2b:7b:02:ff:d9:65:97:4c:26:fb:
83:e4:6f:38:51:ef:b9:29:de:1a:d4:bc:59:ef:b8:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:91:75:B7:88:A9:C6:51:5E:F4:0A:AC:65:6A:D2:0F:C4:AF:E2:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7316683ACCDE11EFB90E6A56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.217.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:99:72:1c:16:72:96:a4:29:57:62:4e:31:6a:53:94:90:63:
36:61:81:54:f2:0a:f5:3c:f0:d7:b1:e1:a4:60:ab:b0:ab:ab:
d1:d6:40:8f:b2:2d:24:25:90:57:86:89:fb:e5:8c:9e:1b:7c:
24:98:73:d6:0a:86:b8:a1:de:80:67:84:ab:e3:73:b5:43:46:
d5:9a:72:e7:b9:9a:6d:7d:ff:76:17:e5:34:52:f3:36:45:1b:
a0:03:43:8d:51:3e:e6:a0:05:68:62:61:5a:98:0a:b1:12:b4:
a6:2d:e8:39:4d:c2:96:06:a5:78:ee:16:20:b1:55:92:7b:83:
5b:59:21:78:6f:7e:9b:85:99:5a:09:b6:85:a0:45:34:93:41:
8f:8f:7c:ee:fb:13:a6:95:11:64:86:1e:d2:cc:d1:2e:24:b9:
f9:0b:86:0b:9d:05:64:8f:86:66:a4:ea:8c:20:c0:7e:3c:45:
6d:9d:39:58:70:30:46:2c:d5:ec:62:3a:5c:c3:78:48:cf:11:
6b:b3:01:56:cb:b8:34:80:d3:cd:61:54:ef:32:75:71:d0:76:
35:9e:38:48:24:3c:88:73:a5:22:94:27:9c:09:51:b9:ab:60:
3d:d3:ae:a5:e0:d0:05:f2:60:18:52:8b:1c:65:6c:e0:92:3e:
fe:29:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:01 2025 by rpki-client