Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/789A2784CCD811EFA6AC48AF762E951A.roa
File: 789A2784CCD811EFA6AC48AF762E951A.roa (raw, json)
Hash identifier: VYrrct+5NDbe+GpLIwQXg/3Huj2DbCEWo7OoSREddd8=
Subject key identifier: 1C:19:10:4B:C6:3A:4F:A4:70:26:D2:2E:15:27:E3:37:41:F1:5C:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/789A2784CCD811EFA6AC48AF762E951A.roa
Signing time: Tue 07 Jan 2025 09:19:18 +0000
ROA not before: Tue 07 Jan 2025 09:19:14 +0000
ROA not after: Mon 13 Dec 2027 09:19:14 +0000
asID: 17561
IP address blocks: 156.233.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64296 (0xfb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:19:14 2025 GMT
Not After : Dec 13 09:19:14 2027 GMT
Subject: CN=677cf196-496b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:ff:5e:f3:f2:23:1a:21:b2:ee:8c:2f:c1:
b3:ce:f4:00:4c:e7:df:52:f9:9b:5b:67:19:6c:7f:
f6:2e:03:ac:4e:7e:b9:3a:b3:6f:2c:77:55:c5:e8:
db:30:c0:d6:5b:44:34:ee:5a:d0:5e:85:ce:8f:da:
a7:9c:53:06:07:e4:e8:dd:15:6d:c6:91:2f:70:d4:
67:76:22:a5:61:91:54:af:48:a9:c5:7b:1e:c1:42:
4f:e1:4d:f8:7c:51:57:eb:e8:e7:f9:46:5e:fa:d7:
b9:d0:37:16:c9:59:06:05:da:23:7e:d0:8e:42:55:
bb:a6:6c:eb:f8:17:2a:82:34:41:12:95:23:3c:76:
58:35:11:b0:ac:f8:d5:9b:70:bf:02:9e:3e:63:7b:
90:2f:45:01:e3:82:92:42:f6:42:00:f4:02:05:67:
f4:82:85:c4:2b:ea:54:8b:b1:c5:63:16:4d:f3:f9:
73:eb:c8:ac:e8:5f:c5:67:21:1b:fe:e7:c9:52:24:
2b:fb:c0:f7:4a:29:36:65:45:75:76:81:d7:41:6c:
e7:ff:a7:ef:28:22:70:ea:f7:7f:e1:78:65:4d:c2:
f9:90:89:6e:ba:5d:33:ed:6f:9d:2d:70:98:f3:6c:
43:db:5d:61:fc:8f:7b:0b:a5:c1:bf:2a:b5:59:2c:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:19:10:4B:C6:3A:4F:A4:70:26:D2:2E:15:27:E3:37:41:F1:5C:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/789A2784CCD811EFA6AC48AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:30:de:f2:28:f6:02:6c:54:49:07:14:ca:03:bc:6b:e3:b4:
12:2b:f0:b5:62:84:3c:37:8a:b0:14:5a:58:2e:4b:50:a8:14:
fa:28:88:73:8d:37:95:67:fb:5a:61:cc:f8:27:37:63:42:f7:
e6:ee:e4:a7:0e:72:1a:e2:b6:07:0a:8d:4b:95:ae:85:f3:9d:
b4:5a:fc:16:7c:cf:e3:66:93:c5:cf:28:b4:6c:8d:2e:04:3b:
7f:90:70:53:2d:90:7d:20:5b:f8:77:ef:da:76:a6:1f:c3:8c:
af:10:47:ff:9c:e3:0a:5a:3c:b4:4c:a0:85:3c:ee:4d:ac:e5:
9f:2b:16:9a:36:76:b7:86:7c:56:af:36:e3:6a:0b:37:37:54:
51:30:26:14:7e:7f:7e:3e:f6:c5:be:fe:28:24:d4:2b:4f:f9:
a1:18:5e:d4:b1:61:39:7c:3d:f0:4d:86:cb:91:b8:2b:68:5b:
98:0e:23:22:51:2e:5d:73:c9:77:92:64:42:33:57:e6:9a:d5:
d3:57:13:09:f9:99:e9:ee:30:2c:4a:ea:4e:b4:97:57:dd:96:
35:f9:ae:56:18:87:42:ec:8d:15:67:91:21:ae:8e:56:6b:f5:
c1:19:3f:e3:3a:f9:ac:04:55:f2:65:72:16:89:62:94:ac:ae:
0b:09:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:59 2025 by rpki-client