Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/767E646CCD9E11EFA5858CA4762E951A.roa
File: 767E646CCD9E11EFA5858CA4762E951A.roa (raw, json)
Hash identifier: 2cPnptMwLwx2ufBZl5cpndHlvYY03TinE7kOuVWrwcQ=
Subject key identifier: 05:06:E3:4D:B1:73:67:10:DD:12:8A:34:53:CE:C1:0A:81:01:2E:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/767E646CCD9E11EFA5858CA4762E951A.roa
Signing time: Wed 08 Jan 2025 08:56:35 +0000
ROA not before: Wed 08 Jan 2025 08:56:31 +0000
ROA not after: Tue 16 Dec 2025 08:56:31 +0000
asID: 984
IP address blocks: 156.249.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65710 (0x100ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 08:56:31 2025 GMT
Not After : Dec 16 08:56:31 2025 GMT
Subject: CN=677e3dc3-06bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:dc:76:41:fb:ab:68:f2:aa:49:a3:27:13:
d1:d9:25:63:94:79:2d:22:00:b6:f1:91:e9:44:dc:
55:0e:21:26:00:fd:26:1d:24:27:63:74:15:fc:ff:
b0:64:f3:67:75:58:05:bd:d4:bd:78:07:01:1a:45:
fc:4e:ff:a5:4c:13:f3:1b:7f:ac:71:a1:59:9b:37:
36:9b:43:e4:37:33:71:97:64:9a:d4:00:55:d8:bd:
75:b3:8a:b6:53:6e:36:0b:a5:8b:53:16:2a:6c:e7:
0b:59:1f:06:28:f3:1f:3d:66:49:54:46:39:70:c6:
ab:88:ee:b5:c1:1c:f3:c6:d3:bf:01:b9:fd:e7:56:
0a:5e:1b:ae:17:71:67:7a:c4:91:30:80:c2:73:67:
90:96:d6:7d:0d:e4:1b:7e:64:d2:31:15:f2:c5:41:
87:23:93:11:8c:d7:44:13:dc:77:73:33:e3:b4:b6:
95:e0:8a:69:c7:cc:73:86:68:34:49:be:f1:fa:35:
17:a8:64:94:26:f3:b8:57:15:59:74:c0:96:83:2e:
b6:3f:11:44:22:84:1a:7b:5c:53:95:23:43:11:73:
14:a4:ea:d1:19:11:0d:b4:d5:3a:33:70:1d:8e:ae:
67:2f:68:3e:a2:ea:32:fc:b9:b3:b5:ab:ac:ab:76:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:E3:4D:B1:73:67:10:DD:12:8A:34:53:CE:C1:0A:81:01:2E:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/767E646CCD9E11EFA5858CA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.100.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8c:d2:2c:bc:52:22:55:10:02:97:71:7d:d7:09:39:5a:90:
f3:58:ae:28:78:d0:ec:03:68:28:12:2f:d1:05:a8:c6:b8:e6:
55:84:c3:13:37:0f:94:9d:32:16:2f:00:d9:6c:7c:55:45:b4:
a2:df:6c:e3:b6:17:06:85:05:b3:83:7d:45:ec:3c:55:31:65:
bf:bb:ff:f0:7f:b7:69:3d:ff:af:5d:f7:68:23:52:32:7e:41:
e2:3c:69:d2:7f:33:63:88:dc:d0:67:1e:07:9b:07:68:d0:ca:
5a:be:56:97:46:17:50:74:0a:3d:0b:87:cd:9c:f3:ab:e1:4b:
40:46:0b:4a:ad:cd:97:2d:35:44:69:7d:ae:59:73:40:4e:fb:
be:02:41:3b:93:41:6f:c4:a9:a9:de:c4:19:18:8e:50:55:7e:
df:da:58:ec:63:4c:c4:05:9d:55:38:7a:f3:db:c5:75:63:8b:
ff:52:9c:b8:6e:81:52:8a:7d:05:c7:b2:92:87:8f:14:0d:47:
d0:e3:0b:fd:16:91:4b:87:5e:09:29:57:c5:6f:72:e8:e7:a2:
8f:2b:7f:13:1e:13:c5:27:98:1d:52:56:c1:4c:9c:7d:88:9f:
2e:f6:c0:3d:7d:c5:67:95:19:81:64:f1:56:00:a6:d7:2e:2f:
1f:ed:90:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:34 2025 by rpki-client