Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75B87756CE4911EFBF05AE6D762E951A.roa
File: 75B87756CE4911EFBF05AE6D762E951A.roa (raw, json)
Hash identifier: 4yvyHC0bpH6u0wSsG2JnZ8c8dq8ANf0YGckhNCkoAEg=
Subject key identifier: 80:9B:F6:93:43:D5:98:A1:41:2B:64:8B:03:2C:99:AC:24:DC:15:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75B87756CE4911EFBF05AE6D762E951A.roa
Signing time: Thu 09 Jan 2025 05:20:38 +0000
ROA not before: Thu 09 Jan 2025 05:20:34 +0000
ROA not after: Fri 09 Jan 2026 05:20:34 +0000
asID: 17561
IP address blocks: 156.238.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66223 (0x102af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 05:20:34 2025 GMT
Not After : Jan 9 05:20:34 2026 GMT
Subject: CN=677f5ca5-9957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:3f:14:14:7a:dc:37:9b:cf:7a:e7:61:10:
fc:d2:9a:20:12:02:04:0c:6f:62:0a:2d:da:7a:73:
dd:f6:fd:dc:59:78:94:f2:7d:b1:4b:74:7c:29:e8:
3a:bd:7b:48:9a:cf:de:53:02:e2:cb:d4:9a:81:e1:
89:f7:40:6d:b0:9a:b7:b0:61:65:5b:93:13:7a:81:
49:a4:61:1a:c7:89:7d:50:56:ac:7f:00:c0:3a:87:
c7:19:64:ea:da:2e:87:14:c8:39:6c:81:61:8a:e6:
d4:3a:71:d5:e9:ab:63:61:e4:95:06:4c:11:aa:3d:
a3:4a:ce:c6:e7:ab:e5:b6:9a:c8:c2:ec:29:ea:03:
09:89:ec:05:49:12:6c:71:6f:ec:5c:3f:70:5f:36:
10:82:42:87:2e:13:4a:fa:03:0b:35:48:9d:33:94:
24:15:2e:7b:53:f8:78:86:93:12:85:aa:99:85:3d:
d2:10:ff:50:0c:42:8b:d4:ab:19:0e:b9:e5:d1:9c:
bd:4a:06:14:bb:db:8b:fb:d4:2a:63:d9:39:fa:7f:
76:8d:cb:30:d4:2d:68:bc:e5:e4:53:27:00:56:70:
92:43:12:28:46:0f:85:81:6a:c5:45:c6:ce:46:f4:
2b:87:02:cd:e5:44:61:8f:63:be:fa:8d:a6:7f:d8:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9B:F6:93:43:D5:98:A1:41:2B:64:8B:03:2C:99:AC:24:DC:15:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75B87756CE4911EFBF05AE6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b6:fd:ac:04:dd:68:7c:18:b6:b7:56:c1:3e:45:b9:3d:bc:
12:30:f5:77:cc:78:10:58:02:e1:e1:15:88:7b:d5:50:d5:fb:
ec:18:50:53:08:12:39:22:37:ca:b6:2e:f8:40:e0:40:6a:37:
74:b3:8e:9e:75:3b:91:ed:1e:9d:55:8e:6a:6a:70:42:cb:29:
8b:cc:6c:6c:28:e6:09:59:a8:1f:4a:96:fd:a7:1f:e6:8b:f2:
f2:26:46:79:f3:51:5f:f0:29:a2:d4:5c:d1:47:46:f9:5c:75:
9c:87:92:24:b8:ac:29:d3:63:c6:0e:8d:03:31:36:60:e4:d4:
63:d4:42:15:f0:cc:22:77:a6:32:af:f5:54:ce:3c:f2:05:bd:
6d:76:19:4f:69:00:ee:24:03:ff:d8:cb:3c:2e:f5:cd:35:11:
9e:1f:64:51:5d:4a:3f:1b:a5:c3:24:22:41:fe:48:1b:c2:6e:
80:29:3d:5a:10:dd:74:71:6a:96:03:b1:34:42:ef:d5:a0:4e:
c1:14:8f:fc:7b:bb:b2:63:c3:ea:68:e9:31:22:63:a5:46:3f:
c5:7d:f5:8c:b7:1a:5f:81:dd:47:69:79:42:b2:be:ba:46:e0:
44:88:24:6e:2e:5f:39:8e:ac:12:e8:af:2f:58:31:2f:31:2a:
ee:d9:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:21 2025 by rpki-client