Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/780C7ACEC32D11EFB8E06DB3762E951A.roa
File: 780C7ACEC32D11EFB8E06DB3762E951A.roa (raw, json)
Hash identifier: +cZpzABpNoGxQ2+Q64f+SA+c8vHD9W1lL4SYBENwDig=
Subject key identifier: E4:85:AD:D6:38:A7:E2:F5:A8:01:D8:9D:9F:E8:17:86:D7:85:87:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EAE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/780C7ACEC32D11EFB8E06DB3762E951A.roa
Signing time: Thu 26 Dec 2024 02:02:33 +0000
ROA not before: Thu 26 Dec 2024 02:02:29 +0000
ROA not after: Wed 10 Dec 2025 02:02:29 +0000
asID: 984
IP address blocks: 156.243.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60131 (0xeae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:02:29 2024 GMT
Not After : Dec 10 02:02:29 2025 GMT
Subject: CN=676cb939-c725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:dc:6c:8f:84:07:ac:7d:c5:ec:ba:02:61:
42:aa:c7:95:55:7f:39:fd:3d:b2:c2:29:90:36:10:
ff:82:a2:0f:a7:43:0e:05:59:1c:14:3a:d4:07:ab:
0f:86:4b:63:31:cd:66:a1:2a:be:fd:d2:a1:a2:51:
e5:bd:0a:d8:a5:aa:2c:24:5a:6e:d3:bd:81:f8:f7:
f1:32:15:ff:c9:c7:a7:b5:6b:20:bc:bd:02:f1:6e:
af:c3:8e:7b:ea:0c:95:ac:62:f7:79:88:4c:2b:82:
00:af:e2:f5:22:c7:65:18:8d:c3:9b:fe:77:ee:ee:
f1:14:0f:88:42:82:5c:1c:1d:f0:3f:35:0b:b3:90:
50:bf:6d:5b:d6:b5:91:b7:ed:95:37:c7:e8:c0:2e:
7b:ce:b7:7f:9b:52:78:86:84:34:a7:26:5f:63:6b:
8e:cd:bf:a0:b0:0a:55:7b:e5:f1:ad:d9:75:61:7c:
06:b6:bb:8d:7e:f6:63:cf:b7:18:61:79:0b:fb:6c:
b2:70:c1:13:32:9c:48:c9:4a:31:af:19:0b:e8:46:
f1:7b:ed:90:6d:31:dc:12:6b:91:be:ce:e3:95:a7:
6b:e5:e7:09:fa:5d:92:40:50:71:3a:7a:d9:e6:49:
de:63:85:2f:2e:85:85:9b:8c:93:05:e0:37:55:d2:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:85:AD:D6:38:A7:E2:F5:A8:01:D8:9D:9F:E8:17:86:D7:85:87:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/780C7ACEC32D11EFB8E06DB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.210.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a1:a5:55:db:21:c8:64:dd:1c:29:c3:5e:d1:38:df:ac:cc:
48:37:5b:78:0e:9e:fd:0c:4e:d2:9f:3d:54:6c:93:a2:30:f1:
c2:14:78:aa:84:15:6d:9e:f9:db:46:47:c4:18:83:e7:40:fa:
cb:e8:fb:e3:b8:01:9b:35:25:90:95:66:ec:bb:dc:cf:bf:ac:
bd:19:20:44:2d:01:60:34:75:3b:a7:a7:6c:16:82:f3:3a:3d:
35:87:8a:38:b0:46:36:47:c2:f8:86:86:c2:1b:07:4a:ff:6b:
cc:c0:06:ab:e7:38:c1:d5:26:48:f7:d9:9c:cc:47:e8:6b:e5:
89:3b:05:70:d1:22:cd:bb:b2:5f:25:1c:76:75:a3:dd:63:b8:
11:19:5e:86:86:b3:87:5f:f6:12:2a:85:02:fd:3e:65:8e:97:
8e:42:9c:59:47:be:d5:43:bc:71:77:81:af:e0:41:7f:d3:09:
b2:5b:56:aa:3d:97:d8:34:e0:75:23:12:87:59:94:da:f4:a0:
77:a4:dd:ae:ea:57:33:fe:5d:63:36:f4:61:35:e7:b8:68:98:
bf:92:f2:9f:01:49:b4:b5:a6:11:b1:c0:1b:8a:bc:c4:66:1f:
8e:ac:eb:e9:8f:d0:ab:b4:b3:21:fb:e1:88:7b:ee:35:53:94:
35:85:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:55 2025 by rpki-client