Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/837DE65ACD2211EFA6014481762E951A.roa
File: 837DE65ACD2211EFA6014481762E951A.roa (raw, json)
Hash identifier: jbxhYMItejfT9AHLFcr5adDlqdsHpmGedTgPOctIxBk=
Subject key identifier: D8:75:CD:3E:05:1D:10:7F:26:52:E2:D4:B2:4F:6E:7D:C8:ED:95:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/837DE65ACD2211EFA6014481762E951A.roa
Signing time: Tue 07 Jan 2025 18:09:19 +0000
ROA not before: Tue 07 Jan 2025 18:09:15 +0000
ROA not after: Mon 13 Dec 2027 18:09:15 +0000
asID: 17561
IP address blocks: 156.241.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64895 (0xfd7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:09:15 2025 GMT
Not After : Dec 13 18:09:15 2027 GMT
Subject: CN=677d6dcf-efac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:af:5c:c1:96:7a:1e:7a:63:fd:39:1e:c1:6c:
ce:4d:48:d4:e4:9b:5f:99:a9:86:d6:87:e2:f3:3e:
ed:69:a5:70:1f:04:2a:88:c7:3c:3d:d4:8a:92:5d:
7a:19:89:89:41:f1:7b:54:85:39:f5:84:ca:5f:ae:
ae:26:a4:28:58:e5:1f:a6:fa:77:43:2c:92:77:ef:
5e:eb:8e:48:f5:60:60:ac:7e:81:6b:21:1e:f8:4a:
2e:c4:25:d3:c2:dc:2b:37:18:d6:56:15:99:10:9f:
3f:f0:2f:8b:b9:77:1d:28:e0:92:fd:3a:fc:f9:df:
33:8d:28:13:49:4c:9b:51:69:71:a5:2f:cd:a2:2e:
d6:0c:d7:4f:36:ff:03:b6:1a:6b:f9:35:96:1d:99:
e1:c5:07:e5:cb:bc:70:8d:de:cc:1d:08:72:0f:54:
1a:7d:20:8d:35:18:85:57:d3:22:16:27:f4:76:4b:
b0:60:78:75:10:c1:7a:39:5c:33:5d:07:e2:89:db:
7e:8f:5b:dd:9f:5e:4e:6b:d5:95:91:5e:d0:41:8e:
d8:65:71:43:d9:95:39:6c:94:a2:58:3b:ea:7a:23:
32:c7:ee:51:e8:1b:f5:71:d1:4a:87:54:e5:60:51:
7f:3a:1e:51:63:90:11:97:19:36:91:97:6a:69:2f:
e3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:75:CD:3E:05:1D:10:7F:26:52:E2:D4:B2:4F:6E:7D:C8:ED:95:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/837DE65ACD2211EFA6014481762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.202.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fb:ea:aa:ff:5a:d4:38:07:f0:dc:5c:eb:63:3e:bd:67:74:
14:28:f6:a2:da:a2:d0:c5:42:28:eb:0b:d8:5e:ec:8b:c1:37:
9d:64:76:64:e9:87:1a:4f:05:dc:94:e4:88:80:54:52:61:16:
18:b7:a3:8c:03:48:17:12:24:57:78:98:7b:1a:35:8e:f7:d0:
54:91:01:4d:79:ca:23:28:be:ef:ee:b6:61:2d:1f:d2:94:22:
07:94:49:0a:fd:38:2e:30:fc:79:80:95:35:b9:eb:83:84:e1:
1f:a6:72:dd:2a:7a:b2:c4:b8:cc:a9:4d:c4:79:2a:71:e3:85:
c5:6f:7d:87:3d:b4:55:7a:2c:52:a2:e5:32:de:b7:7c:f0:4b:
a7:91:1c:3c:f2:84:6e:8d:33:2f:86:b4:b7:1f:8f:e6:d7:67:
3f:1d:b7:d8:f1:0c:e6:4e:be:b0:84:13:68:ef:23:cd:f2:6f:
24:e0:ad:e9:0b:c0:1d:d7:3b:91:ad:0a:78:18:8c:46:2b:f3:
ef:f1:36:03:74:6c:01:dc:ad:7a:3a:f5:26:8c:29:d4:08:b3:
9f:8d:1c:24:d8:ed:9c:6b:35:0c:66:85:2a:f9:aa:c4:70:2f:
f7:81:80:29:03:c4:c0:20:b6:6d:12:8a:7f:0c:49:d8:ce:af:
38:fe:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:46 2025 by rpki-client