Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CBA46BEC32811EFB7BCE18E762E951A.roa
File: 7CBA46BEC32811EFB7BCE18E762E951A.roa (raw, json)
Hash identifier: 9qelRGtyUhh62GZCkyXaLid7XY3ztB20PjbKWWYPSDM=
Subject key identifier: 05:98:C1:6A:E9:D9:BC:BB:FC:A5:F5:30:28:CB:7F:15:29:C6:08:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EAA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CBA46BEC32811EFB7BCE18E762E951A.roa
Signing time: Thu 26 Dec 2024 01:26:53 +0000
ROA not before: Thu 26 Dec 2024 01:26:49 +0000
ROA not after: Wed 10 Dec 2025 01:26:49 +0000
asID: 984
IP address blocks: 156.243.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60071 (0xeaa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:26:49 2024 GMT
Not After : Dec 10 01:26:49 2025 GMT
Subject: CN=676cb0dd-3c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:34:33:a3:03:ad:c5:c1:62:48:a3:f7:15:
7f:0e:e8:b7:cf:b0:08:b3:ee:f5:92:50:ab:54:2a:
08:8b:83:28:6c:36:43:de:3b:a6:be:82:f1:51:bc:
63:05:cb:3d:02:c8:fe:67:bc:a9:c7:96:d5:f0:fa:
19:6f:d8:95:ce:bb:e7:8b:71:f6:07:c7:c0:85:5b:
4e:0e:eb:6b:5f:98:37:18:e8:7f:51:41:3e:49:32:
db:a1:37:c3:0e:9a:c9:1b:8e:0b:ac:a1:c7:b9:a1:
55:29:0c:77:04:a5:5a:be:eb:3a:52:3d:1b:d1:9a:
1d:5c:78:a5:2a:f4:ec:47:26:9f:44:82:84:4b:1b:
69:37:f0:1a:d9:27:1b:f2:78:03:d7:90:71:9c:d6:
c6:f1:34:bd:ed:df:46:6f:24:f8:6e:46:54:a9:ff:
b2:47:1f:eb:df:df:16:93:4a:f2:4d:b1:40:f0:32:
a6:d6:a8:ca:c6:d1:bf:fa:78:7e:2b:fa:4e:06:d7:
e3:57:f8:2b:22:1d:21:5c:b1:10:93:16:88:4c:51:
d4:c3:17:0f:11:d2:97:72:90:09:1b:79:8d:b0:d9:
43:cd:ee:65:9f:79:43:f5:52:7f:99:5c:00:fb:1f:
fd:9c:82:cd:b1:d5:da:ae:48:f3:95:d6:44:4f:80:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:98:C1:6A:E9:D9:BC:BB:FC:A5:F5:30:28:CB:7F:15:29:C6:08:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CBA46BEC32811EFB7BCE18E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f4:5d:6b:20:60:e0:58:c3:5d:12:26:2c:2f:fe:ae:f7:2f:
5a:57:03:ea:c4:7a:a1:a4:ae:3a:48:23:d1:07:77:fa:c7:f8:
8e:dc:e1:98:0c:0a:41:a3:86:f4:03:cc:7e:77:16:dd:d6:01:
00:46:96:0f:f7:ff:d8:da:9c:fe:d2:bb:a8:5a:2c:1c:2c:ee:
e9:72:86:bb:20:46:78:b5:3c:37:1c:6a:a6:ad:8e:8f:a3:3c:
c0:d1:5c:c0:f2:0e:2e:8c:ff:0c:fa:3a:5e:5e:6d:19:a6:47:
0e:f6:1e:af:dc:08:24:3c:54:2e:ed:bc:88:11:89:54:8d:87:
76:fd:c0:b9:a3:4f:69:05:71:d4:86:e1:8a:54:69:f8:06:de:
4f:dd:6c:22:48:d4:15:69:91:ef:59:fe:71:c7:77:a0:2e:26:
03:a6:d1:99:f1:46:e5:46:fa:0d:78:57:bb:a6:fe:b5:9b:9e:
4f:2a:f9:f2:8a:b2:49:6a:ef:ba:ad:f6:90:0a:8e:35:2b:11:
7c:51:6a:ef:cd:f3:4c:09:db:41:1b:98:98:ad:78:09:3d:10:
33:48:ca:3b:e8:a8:4d:5e:52:bc:0f:f6:7d:46:3c:16:8e:93:
4c:31:d2:2c:99:c3:53:db:ea:ac:4e:aa:a8:27:9e:4f:18:72:
59:cb:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:00 2025 by rpki-client