Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74731AC6C98B11EF9F2E8044762E951A.roa
File: 74731AC6C98B11EF9F2E8044762E951A.roa (raw, json)
Hash identifier: vXTwgKXF3slprtTscY32yxUKobvcPqOIQtA2ywlhzgI=
Subject key identifier: 33:02:61:39:79:C8:90:2F:52:36:03:AA:1A:9B:C6:7D:72:66:A8:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74731AC6C98B11EF9F2E8044762E951A.roa
Signing time: Fri 03 Jan 2025 04:30:26 +0000
ROA not before: Fri 03 Jan 2025 04:30:23 +0000
ROA not after: Mon 13 Dec 2027 04:30:23 +0000
asID: 17561
IP address blocks: 156.233.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62897 (0xf5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 04:30:23 2025 GMT
Not After : Dec 13 04:30:23 2027 GMT
Subject: CN=677767e2-1915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:14:95:7b:2f:35:ea:46:c2:8c:6e:96:30:
4a:7b:dc:7a:ba:05:8d:49:65:ca:02:0b:de:a2:d8:
de:7d:4f:4c:2c:79:28:cc:d2:86:79:38:82:5a:27:
44:e3:34:dd:96:e8:c2:fa:ba:06:57:be:1b:3b:77:
ec:ae:9d:6e:c1:f7:85:ba:a3:c9:01:0c:da:44:81:
d4:36:db:5b:16:8e:2c:04:38:0c:30:8c:d7:41:d8:
b9:6d:da:db:e6:65:d7:df:60:f3:98:05:2b:99:74:
d3:c4:de:c5:d3:cb:57:c2:ce:9f:d0:6a:5d:2f:84:
63:51:ef:af:13:e2:ca:75:be:6d:20:0f:ba:66:9a:
a5:1b:12:27:43:0e:44:4c:d8:d1:2c:d0:cc:f5:1f:
26:45:49:f5:a2:4c:ba:ab:4b:88:94:db:93:5c:ec:
6b:df:d4:67:73:c7:c6:a0:86:0c:62:6d:61:d7:04:
ef:c4:60:43:78:7b:2e:53:48:27:c7:a9:dc:d5:6b:
7a:fb:d7:ac:95:d1:19:31:84:c6:e4:ad:8b:7f:1e:
9c:1c:1e:91:5b:96:67:1c:71:d3:02:dc:05:70:76:
66:2b:21:11:96:6c:76:6f:c9:86:e9:ac:5a:e2:d1:
9f:6b:7b:6e:ff:8a:be:8a:97:c8:f4:f9:83:88:2a:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:02:61:39:79:C8:90:2F:52:36:03:AA:1A:9B:C6:7D:72:66:A8:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74731AC6C98B11EF9F2E8044762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.43.0/24
Signature Algorithm: sha256WithRSAEncryption
28:02:f4:ad:6c:3b:17:46:9e:b2:80:51:52:a5:c3:cb:95:20:
3d:46:b8:46:56:54:0d:b1:a6:3d:15:5f:a2:f9:b9:cb:6f:f2:
97:17:52:b6:a2:eb:e3:13:e5:59:fd:81:41:dc:ae:8f:65:a0:
5b:ad:f1:96:af:cd:8b:c9:6b:b9:f6:77:24:23:4d:f7:8b:e0:
e5:15:69:cf:0e:37:fd:5b:7b:2d:3a:c5:d8:e9:c3:4d:a8:55:
64:2a:ee:9c:ce:82:7d:21:ed:c0:9f:31:05:55:ac:79:ed:e3:
b5:4b:5b:08:7a:82:3a:a3:7c:2e:93:1d:43:aa:85:10:2f:78:
06:bf:57:70:cc:9f:da:97:c3:67:94:ed:9d:2c:7e:3c:cd:be:
6e:3d:e9:6d:59:a3:9f:b7:b6:72:8c:63:2a:ac:ac:77:a2:01:
68:a0:56:99:cc:11:f0:89:ec:dd:8a:36:1c:77:59:9f:41:d9:
e1:cd:68:65:36:34:80:dd:18:81:a7:06:ff:9b:96:a8:bd:bf:
a4:c3:ea:5c:9d:ff:92:dc:ed:bc:9e:46:2b:df:f4:8d:80:5c:
17:c9:10:e1:f8:44:13:4c:62:85:02:f8:c3:03:be:aa:22:11:
b4:f3:ba:57:13:75:38:c5:1a:07:9b:56:b4:c8:8d:4e:1b:b9:
05:32:b1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:23 2025 by rpki-client