Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74B59770C2A611EF9D602466762E951A.roa
File: 74B59770C2A611EF9D602466762E951A.roa (raw, json)
Hash identifier: VQgx6yI5Jn9tnGahqw4ll37uNVKOZXJnZWYtW/DpsJk=
Subject key identifier: 3E:77:01:82:C9:46:94:6F:81:ED:29:B3:BE:AF:60:B3:6D:34:E5:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74B59770C2A611EF9D602466762E951A.roa
Signing time: Wed 25 Dec 2024 09:56:05 +0000
ROA not before: Wed 25 Dec 2024 09:56:01 +0000
ROA not after: Sat 15 Feb 2025 09:56:01 +0000
asID: 138915
IP address blocks: 156.244.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59909 (0xea05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 09:56:01 2024 GMT
Not After : Feb 15 09:56:01 2025 GMT
Subject: CN=676bd6b5-0506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:28:7c:92:b9:49:d7:a9:7d:47:d8:c5:f3:
fa:87:a9:cb:50:1d:33:98:26:01:47:1e:9c:7b:8f:
d5:d2:28:bc:a1:e6:68:19:7a:17:18:d6:a9:7d:33:
9c:cd:99:51:8e:50:11:55:cd:2c:38:90:03:b0:75:
81:02:51:30:ed:b2:3e:13:d9:db:c6:44:4a:9c:a9:
95:dd:c6:66:1b:82:ac:5e:c5:da:c4:9b:30:da:21:
3d:a3:56:9e:21:dd:63:e6:79:59:77:4d:d7:83:ad:
82:70:aa:0f:2c:e9:97:24:3a:c9:ac:90:81:cd:f1:
ed:c4:dc:60:32:da:eb:10:5a:a2:36:1f:29:82:ea:
ca:21:26:6f:f4:9a:e1:2c:59:8b:bf:79:48:f9:8a:
8c:b1:ce:e3:ef:fb:be:b8:42:42:d3:7c:a1:dd:09:
70:7d:53:37:1e:8b:5d:ab:da:d2:1f:81:7a:3b:6d:
6e:49:2d:83:ab:d3:8c:56:43:30:9f:28:62:60:15:
6c:54:9e:8e:09:8e:3b:7e:b9:46:e6:82:8e:62:07:
ab:81:64:ec:5d:ed:f8:ee:b0:ba:a4:97:ac:62:c3:
b9:69:7d:88:8e:a6:51:64:b2:d9:bd:f6:6b:5e:da:
32:9e:ed:c6:e7:3c:0d:f1:4e:ec:65:55:22:a4:e0:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:77:01:82:C9:46:94:6F:81:ED:29:B3:BE:AF:60:B3:6D:34:E5:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74B59770C2A611EF9D602466762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7f:41:81:c1:a5:de:a9:51:27:59:8a:5b:ad:e6:18:d3:53:
ec:23:e1:4a:a5:8f:8b:57:24:0c:b6:63:7f:68:d3:4d:b5:99:
9f:ea:42:96:ef:e6:7c:bb:3b:73:3d:cc:1b:bc:c7:c7:30:25:
ce:0c:ab:cd:86:6d:37:5b:af:40:f6:3d:78:82:a6:dd:4d:49:
4f:75:30:10:02:82:ca:74:53:3d:b0:ac:bd:b6:ad:59:e1:04:
86:a2:38:75:1d:b2:ff:26:fb:e3:73:6e:ad:d5:f6:83:42:f2:
d3:1e:33:95:e9:2f:83:7b:95:eb:2d:d3:1f:ed:0e:8a:69:00:
4a:2e:a0:61:fe:a2:0a:b7:2d:dc:01:ff:fb:e5:95:59:82:58:
24:c1:53:29:7a:be:88:45:c2:70:46:c1:b3:93:6e:a5:4a:0c:
8d:78:86:6d:12:b5:dd:18:ff:a1:ef:5c:79:99:35:1b:25:68:
bb:43:6d:35:fd:25:06:f7:fc:09:ae:66:a6:5c:97:54:a8:ad:
04:ac:04:36:ac:df:44:e9:75:05:a1:38:e0:2f:91:e7:1c:d3:
76:b3:e3:4e:9f:8e:9d:34:47:1f:e9:15:56:b6:df:2f:d6:33:
e1:86:9b:4f:c1:b5:5b:e8:4d:e0:b8:46:e1:e8:4a:66:aa:5d:
62:f0:65:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:20 2025 by rpki-client