Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D7CA96D2EF11EFBEBE465F762E951A.roa
File: 77D7CA96D2EF11EFBEBE465F762E951A.roa (raw, json)
Hash identifier: sgujEU75hHabDay+rR3Unw/4LghIfDt836W3tNzU4vM=
Subject key identifier: D0:8F:7C:AD:75:26:7F:0F:F7:53:4A:D4:CB:61:27:B4:43:20:37:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010775
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D7CA96D2EF11EFBEBE465F762E951A.roa
Signing time: Wed 15 Jan 2025 03:19:02 +0000
ROA not before: Wed 15 Jan 2025 03:18:58 +0000
ROA not after: Mon 03 Jan 2028 03:18:58 +0000
asID: 17561
IP address blocks: 156.240.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67445 (0x10775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 03:18:58 2025 GMT
Not After : Jan 3 03:18:58 2028 GMT
Subject: CN=67872926-dd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:1f:c9:36:b2:59:d9:73:43:32:0d:08:ae:
19:46:ff:d2:59:63:d4:d4:e0:41:1d:dd:b0:4d:f6:
0d:71:8b:dd:e8:ee:44:c8:6c:38:f7:3d:ed:62:08:
3d:79:5c:9d:5c:b0:3c:9c:ff:a1:65:2d:94:5f:06:
03:3a:d1:f5:eb:f1:23:9c:28:d1:9b:bf:96:7f:44:
c3:d2:9b:56:09:ac:53:15:65:5c:fd:6e:1f:9e:f3:
62:ca:24:72:09:26:86:5e:ae:d0:62:56:13:75:1c:
4e:72:56:d9:70:9f:bc:8f:7e:ae:ff:2f:8a:93:b4:
f2:32:14:a5:80:6f:4d:6d:37:d6:02:5e:71:d3:14:
ae:15:70:32:91:25:c1:63:35:ef:04:a0:61:53:95:
26:13:5d:a0:6f:0a:81:15:79:41:c9:e5:77:5a:37:
ae:53:87:b4:cf:52:ad:50:98:27:31:ba:a2:32:2a:
fe:a1:4e:6e:e4:69:60:8e:d3:c7:4f:22:3d:1d:fc:
b4:49:d8:71:35:db:85:82:c7:10:40:39:1d:0f:d3:
75:a8:dd:7c:93:7f:87:c8:65:38:fb:62:83:e9:5e:
f8:63:a7:8c:1b:ab:6b:06:03:b0:e9:99:1e:2d:80:
cf:cb:94:ee:0a:79:1a:d0:92:59:87:72:7a:82:3b:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8F:7C:AD:75:26:7F:0F:F7:53:4A:D4:CB:61:27:B4:43:20:37:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D7CA96D2EF11EFBEBE465F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c1:04:59:63:cd:11:48:1c:3b:83:48:7a:8e:a1:04:15:77:
bb:3c:c0:c3:4e:a5:7a:e1:f3:c6:63:05:1b:00:47:94:b3:b6:
bf:1e:51:4e:38:ac:78:23:5d:06:b2:7e:5b:00:f8:31:88:3a:
c2:22:fb:4c:e5:8e:54:54:c1:5e:09:f2:c6:85:12:e6:de:d9:
35:ab:87:b3:72:46:36:9c:53:78:6a:a5:ec:50:07:fa:8e:67:
4a:ae:e1:be:c9:ba:22:15:1b:bc:85:31:9e:d4:b1:cb:c4:86:
f5:f0:22:8c:49:88:2b:2d:3b:d5:24:7f:01:44:cc:1a:6e:7b:
9c:38:a3:bc:b9:a6:b4:97:d2:96:4f:b7:82:7f:40:89:2f:7b:
e1:42:53:58:e0:92:87:fd:fa:f7:2e:3f:d7:45:fd:0d:01:79:
f7:f8:0e:23:66:e1:1b:f3:8a:e8:73:8a:7b:ac:8e:c9:fa:7e:
f7:69:1a:8d:45:d1:8b:96:1d:bf:be:5e:03:85:ef:3d:65:45:
44:8f:7b:41:29:0d:e9:f0:c5:a1:35:22:fe:ed:be:cd:17:20:
8c:71:e7:0a:b3:bb:1e:f4:e4:cb:5c:3d:0c:7f:a5:5f:0c:c7:
88:43:5f:19:e5:3e:1d:db:6c:85:66:f6:2c:e3:30:a2:92:d3:
9c:59:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:30 2025 by rpki-client