Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DEF7DD0D2DF11EF8D7F256A762E951A.roa
File: 7DEF7DD0D2DF11EF8D7F256A762E951A.roa (raw, json)
Hash identifier: 2RA0+MwCbuPNTQG4sI46liiUKztxlgefnF+ENiy/01w=
Subject key identifier: C2:09:B7:17:7B:E5:02:2B:C9:FB:50:9C:61:CD:44:4F:07:21:E7:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01072B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DEF7DD0D2DF11EF8D7F256A762E951A.roa
Signing time: Wed 15 Jan 2025 01:24:40 +0000
ROA not before: Wed 15 Jan 2025 01:24:37 +0000
ROA not after: Sat 13 Dec 2025 01:24:37 +0000
asID: 984
IP address blocks: 156.247.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67371 (0x1072b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 01:24:37 2025 GMT
Not After : Dec 13 01:24:37 2025 GMT
Subject: CN=67870e58-602d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:1d:03:37:f0:4f:b8:ea:8d:76:f6:3d:fb:
eb:7f:c8:0b:04:cd:f5:2f:1f:f8:da:58:de:fe:c2:
73:d7:8d:cd:2e:fd:5a:1a:49:bc:b6:47:99:a7:64:
a6:cf:d7:a0:6a:53:30:8c:48:2d:cf:59:83:22:08:
d6:3b:69:78:08:4d:fe:af:1d:47:12:5b:7b:91:fd:
99:96:b2:0f:0d:2f:36:a6:4d:4f:32:2d:24:c0:0b:
00:83:a0:45:b5:ae:9c:8c:90:ee:2d:42:61:48:dc:
7f:84:9f:21:12:51:33:66:2d:85:b1:8c:c7:69:73:
b5:0e:7c:5f:ff:c0:e7:8b:1f:f6:63:bd:59:3a:0d:
09:92:3f:e9:95:92:7b:21:e2:40:1d:b9:14:02:74:
8a:b7:ff:53:ce:14:38:d3:ee:3a:e7:b6:ff:11:d2:
cf:af:f1:63:5e:96:ba:19:28:84:18:e9:4a:b5:69:
03:22:8d:3a:ac:53:e8:bb:25:15:d8:22:71:1c:d1:
c9:8e:a3:8b:d8:31:77:95:19:11:45:ce:f4:27:89:
34:39:7c:dd:6d:e2:67:9e:15:07:80:78:5a:67:92:
a4:d7:c5:db:ae:fe:00:01:35:f3:8a:cb:4c:aa:7e:
2d:7a:55:ea:29:e3:92:69:5c:44:e2:bb:26:24:25:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:B7:17:7B:E5:02:2B:C9:FB:50:9C:61:CD:44:4F:07:21:E7:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DEF7DD0D2DF11EF8D7F256A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:19:0a:0b:96:64:1a:75:bb:b4:71:95:e9:8d:fb:da:31:22:
e9:31:57:2a:12:3b:ec:f3:f5:61:72:21:57:5c:fc:7b:2b:e6:
4d:ec:69:b0:13:26:f6:df:c0:e7:b9:de:fe:3d:9c:63:e6:68:
21:62:b6:b1:39:55:b6:ea:e2:7e:66:1a:7d:14:1d:41:a3:23:
bf:c5:53:ba:ea:9e:1a:de:42:d3:7e:59:1b:ee:03:7a:f8:61:
1d:2a:4c:25:18:e9:e9:a2:2d:37:cc:35:28:d2:28:0c:f1:f0:
7c:52:a6:da:29:47:b1:0d:a8:79:b3:71:81:6c:ef:b2:d0:6f:
8f:ef:23:0e:6e:74:56:2f:ee:48:0d:2b:eb:a9:7d:83:35:16:
39:76:4f:d9:18:ef:35:2e:43:a5:ff:c8:37:7e:e6:0f:3b:01:
0e:00:e5:04:77:66:9c:9e:1c:eb:26:58:e3:e9:b8:98:ee:5c:
39:e6:94:e2:b9:47:fe:19:dc:fa:59:c6:79:26:b0:ca:69:ee:
41:fd:7e:28:df:a8:42:bb:40:2c:31:5b:ea:c8:22:ec:a6:71:
bb:15:6c:07:46:13:15:ef:59:9a:57:39:11:e8:b1:30:cf:d0:
46:a7:87:09:86:7c:96:1d:16:f2:6c:f9:c9:95:d7:0f:6b:73:
83:8b:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:48 2025 by rpki-client