Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CFC2F18CE4311EFA6442E49762E951A.roa
File: 7CFC2F18CE4311EFA6442E49762E951A.roa (raw, json)
Hash identifier: bT1vpXV4IjDwgGcJeFOBlh/Q+eBuO4SZRgSDBwoqEnc=
Subject key identifier: AA:5A:39:D8:60:47:DD:AA:71:AC:94:E7:68:87:8A:B1:33:56:C9:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010283
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CFC2F18CE4311EFA6442E49762E951A.roa
Signing time: Thu 09 Jan 2025 04:37:53 +0000
ROA not before: Thu 09 Jan 2025 04:37:49 +0000
ROA not after: Fri 09 Jan 2026 04:37:49 +0000
asID: 17561
IP address blocks: 156.245.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66179 (0x10283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 04:37:49 2025 GMT
Not After : Jan 9 04:37:49 2026 GMT
Subject: CN=677f52a1-68c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:b8:0c:fd:22:d4:88:93:74:50:a6:48:4b:
9d:17:04:ec:ad:a7:8d:cf:cf:3f:ec:06:ac:ef:e6:
a0:50:be:d5:df:80:48:03:31:12:e5:1d:20:02:de:
e8:f6:8f:26:b1:ff:54:b3:41:8f:f6:bb:6f:f1:7a:
57:94:f3:4c:43:30:3e:19:57:09:ff:46:a2:04:89:
4e:2a:92:82:9f:65:fd:25:40:e0:6b:47:29:c2:00:
1c:8e:1c:84:ee:09:fa:04:91:ae:7e:bf:1d:88:9c:
7b:cd:58:ea:cf:90:10:6e:dd:4d:f4:4a:b3:6b:c4:
44:1a:f7:88:1b:8c:10:b0:4f:aa:a8:bb:b9:c8:01:
46:9f:8f:a6:a7:a6:f5:ca:0f:3f:93:7d:37:8b:69:
2f:1b:22:94:ab:73:5d:90:46:77:b0:45:e0:41:44:
61:fa:ad:bc:23:d7:80:f6:96:2a:19:98:af:d4:b9:
89:c8:7d:71:8e:f3:ea:fc:b3:18:94:7d:df:cd:7e:
d4:79:51:01:4e:af:86:74:75:e5:d2:ef:8b:87:ae:
93:08:81:2e:67:53:73:39:33:be:0c:8a:e5:cb:28:
04:02:bb:1f:88:fa:1b:3e:7d:fe:19:b9:cf:9e:03:
af:5d:69:4b:84:23:a3:26:32:f7:eb:16:3d:e2:eb:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5A:39:D8:60:47:DD:AA:71:AC:94:E7:68:87:8A:B1:33:56:C9:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CFC2F18CE4311EFA6442E49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.117.0/24
Signature Algorithm: sha256WithRSAEncryption
49:65:cb:e1:1d:9d:ca:6a:8a:a3:4e:19:02:b9:66:24:5d:05:
7b:73:ba:c8:ed:2c:56:4b:a4:41:7f:08:c2:4b:35:df:c0:c5:
bb:2f:de:4e:dc:50:5e:2d:9b:ed:0d:d2:02:23:da:10:0c:df:
23:cb:09:1a:e4:0e:6e:c2:85:09:52:df:6b:40:f3:2b:0e:01:
29:ed:15:f4:ad:bc:60:e4:c7:77:03:a8:2b:fa:ff:2d:c8:87:
9c:b2:21:7d:8b:ed:cb:aa:9b:ad:4d:55:60:75:39:9b:2c:6b:
b3:7d:ce:ef:e4:ec:d9:be:d1:aa:31:bf:ce:06:15:e8:ac:ad:
fc:2f:32:2a:8f:f8:fb:47:f2:64:1f:df:19:af:be:33:a7:3c:
22:c9:35:0f:1b:06:fc:ba:5f:ef:83:b9:01:14:f2:06:42:22:
c5:92:c0:fd:43:e5:21:a8:e3:55:8d:e8:c9:02:44:71:04:c3:
75:6a:40:b8:db:15:ae:36:af:54:71:9f:4e:fa:4a:3f:da:1e:
4c:3b:c0:27:fb:58:cb:9f:49:b4:41:33:ad:61:19:2b:3a:0c:
6d:a0:8c:bd:db:aa:36:c7:0a:33:be:c3:e8:9e:9f:28:ae:db:
15:72:90:c0:8d:2a:d1:c6:af:a8:a8:cc:ce:28:53:ca:32:8e:
5f:06:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:48 2025 by rpki-client