Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79B864CCCD5B11EF9E2A6868762E951A.roa
File: 79B864CCCD5B11EF9E2A6868762E951A.roa (raw, json)
Hash identifier: k3DWMxXLQUwUf7P0d9z9oXWjiP/NWB0oE3vAHq8fnhU=
Subject key identifier: 4E:BF:8B:9C:C2:C4:FD:52:35:37:94:20:03:7A:B4:93:21:7A:41:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79B864CCCD5B11EF9E2A6868762E951A.roa
Signing time: Wed 08 Jan 2025 00:57:04 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Sat 13 Dec 2025 00:00:00 +0000
asID: 984
IP address blocks: 156.247.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65293 (0xff0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Dec 13 00:00:00 2025 GMT
Subject: CN=677dcd60-b370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:58:4f:50:76:6f:54:fe:de:fc:a3:02:76:
f9:2a:b2:3a:d4:d0:d9:36:11:97:1d:0b:1f:a8:1f:
aa:32:b9:93:b7:49:dc:47:78:a7:d5:ae:76:44:14:
3f:4f:fa:79:d6:41:3e:e0:cf:91:ad:38:fc:20:c1:
6f:e2:5e:23:be:1f:bf:5d:90:27:f7:75:53:7e:bb:
87:c0:0b:2f:2a:43:ee:fe:de:2b:52:31:69:72:ac:
4e:c2:a4:d6:89:99:1c:b6:8a:1a:ea:b7:7a:60:10:
20:7a:a6:1e:19:d7:e9:a3:e2:ea:c2:de:62:26:4f:
dd:c2:c9:a4:ef:7c:91:da:16:e8:1a:7f:c2:42:cb:
39:7b:7c:a1:8c:41:e2:f0:9c:70:11:d1:ac:28:cf:
a1:c6:34:13:f1:81:34:fe:be:8d:df:b3:a3:d3:59:
44:7b:36:7d:ac:d4:17:63:07:33:a0:84:cd:07:d4:
f7:ba:ad:ff:70:98:fd:09:b7:7b:7b:cc:a4:c9:36:
99:4c:94:9f:c2:42:36:5e:cb:8e:df:e3:6f:13:6b:
00:c7:91:64:ca:3e:a0:10:0c:27:53:ea:38:8e:3f:
5a:ee:9f:49:34:78:06:c3:24:66:02:79:05:07:c7:
82:d6:aa:d2:b4:8d:b3:bf:14:1c:fe:36:d5:d2:35:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:8B:9C:C2:C4:FD:52:35:37:94:20:03:7A:B4:93:21:7A:41:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79B864CCCD5B11EF9E2A6868762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:61:67:a2:8b:aa:a4:27:7b:9a:7f:e0:81:e7:7a:cb:0e:8b:
10:da:8a:e5:18:85:d1:cc:17:07:6a:1f:56:dc:2c:39:4c:c1:
38:a3:3d:b1:55:8e:80:70:79:8b:68:73:a1:85:6b:62:16:4c:
fd:68:b5:5b:3f:8c:9a:0f:59:a2:cc:3f:c8:37:e5:40:4f:34:
75:67:eb:8d:19:5f:4a:f9:38:0d:7e:43:c6:0b:1d:11:03:ff:
07:26:dc:0c:13:b3:75:88:a2:af:4d:03:ec:98:bf:1e:12:09:
cf:63:02:86:c9:c3:ac:ff:54:1c:2e:06:8d:39:b4:37:34:13:
e8:29:76:d3:2b:74:1b:13:48:19:51:3a:b6:5e:ee:bf:dd:51:
f3:6d:47:82:71:61:8e:a9:f9:3f:59:ba:6a:d6:d8:d0:c3:47:
7a:43:bf:86:9d:ca:e9:8d:b8:04:b0:46:cb:8b:3b:3c:8c:e9:
98:bb:c4:4f:0a:95:cb:ac:da:b8:a0:95:a3:0b:68:7f:9c:38:
6a:b8:0c:db:3d:91:d9:dc:4f:ce:c0:fe:b0:7e:51:92:10:0d:
f2:98:3a:fb:ba:18:8a:ef:8b:65:69:b5:f8:95:40:6a:c5:10:
4f:c1:11:75:40:61:28:89:da:9d:05:81:2e:a6:a7:17:52:fe:
cd:6a:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:26 2025 by rpki-client