Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/746F8D66CCC411EFB0CAA1B0762E951A.roa
File: 746F8D66CCC411EFB0CAA1B0762E951A.roa (raw, json)
Hash identifier: XPRn8KnmzZ0O+tpO12SnU3fQvd+JZhNrB4g/4D78HNc=
Subject key identifier: 0F:61:40:85:AF:06:7F:71:83:CE:D8:82:90:35:B3:73:87:DB:C1:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/746F8D66CCC411EFB0CAA1B0762E951A.roa
Signing time: Tue 07 Jan 2025 06:56:01 +0000
ROA not before: Tue 07 Jan 2025 06:55:57 +0000
ROA not after: Mon 13 Dec 2027 06:55:57 +0000
asID: 17561
IP address blocks: 156.233.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64074 (0xfa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 06:55:57 2025 GMT
Not After : Dec 13 06:55:57 2027 GMT
Subject: CN=677cd001-a38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:67:86:39:04:2b:64:56:3a:38:aa:7e:1b:
4b:b1:be:e7:c7:5a:4d:d6:6f:98:ed:4b:12:83:58:
bb:99:24:a7:9a:89:1a:23:12:c7:c4:6d:0d:db:78:
28:a7:04:40:cf:fa:1f:f3:14:1d:f2:93:21:2d:54:
8d:f0:81:de:6a:3d:26:87:00:ef:ea:6c:7b:84:70:
e8:d2:e6:46:43:a4:0f:61:3e:21:40:c7:a1:e4:18:
6a:be:c9:07:aa:8b:49:1f:1b:ed:cc:54:38:8f:14:
81:4c:68:d9:e8:db:be:b1:16:4d:c2:c9:b6:5e:e9:
48:6a:2d:66:ac:7c:57:c1:42:79:85:c9:c0:e3:97:
8e:21:68:04:70:fd:22:00:e3:14:e6:3e:7b:ec:36:
b7:a1:c9:db:32:d4:f4:13:2f:cd:95:cb:2e:4f:d5:
b1:60:66:6f:de:b0:2c:80:73:b6:f5:d0:50:fd:c9:
51:44:42:ce:7b:49:82:68:3d:42:c4:ec:7d:8e:45:
a1:cc:6b:83:c6:dd:ae:a9:ae:92:ac:2e:b5:22:74:
04:5e:b6:83:3b:ab:37:d0:ba:90:f4:37:c5:7a:e1:
51:01:21:17:cf:1e:39:aa:c9:65:d9:c3:c2:e8:bc:
0b:41:30:c8:f3:89:43:c2:54:75:8e:93:8e:fe:18:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:61:40:85:AF:06:7F:71:83:CE:D8:82:90:35:B3:73:87:DB:C1:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/746F8D66CCC411EFB0CAA1B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.57.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:01:68:af:4b:fb:57:d3:a5:e8:da:9a:1f:4f:cd:57:5b:a3:
83:ae:09:a4:48:59:b4:08:71:39:e1:af:79:2f:55:ab:16:65:
9a:46:28:e7:11:c5:36:87:8f:74:0b:e5:65:3a:8f:62:8a:dd:
12:c3:82:58:2d:e7:51:fc:d2:98:25:2e:ba:f7:36:2f:6c:1c:
46:3b:89:33:02:33:b6:59:54:f7:60:87:83:4b:23:5c:df:c1:
7f:06:39:da:2e:35:40:28:74:ee:3f:df:a2:e1:2e:b2:d4:ab:
e8:a8:d3:35:0e:46:4e:d5:b9:9d:3a:18:cc:52:92:0c:9a:02:
07:98:12:f4:65:3d:f8:38:ae:5e:66:0d:cb:98:a6:fe:0a:75:
4a:f8:ea:bb:e9:c5:e4:a0:e4:64:a4:fb:99:d9:f9:18:40:d6:
cf:fa:b1:f3:bb:1e:29:f0:2b:a5:82:45:47:08:f1:32:45:d7:
ef:a5:83:eb:d3:b7:13:46:e5:85:cb:6a:62:f4:30:20:45:9c:
d5:af:aa:6b:28:d8:9e:56:7f:62:81:02:ee:a6:35:c4:2a:68:
4d:89:51:ef:5a:d9:14:78:5c:cd:0e:7d:ad:e9:93:66:9d:3f:
3a:a1:ab:39:74:6a:7e:53:6e:09:a0:28:4f:23:94:0b:62:a2:
d4:6d:3b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:44 2025 by rpki-client