Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/843EBFAACCBA11EFB8C94973762E951A.roa
File: 843EBFAACCBA11EFB8C94973762E951A.roa (raw, json)
Hash identifier: wamVtPTrjSF30s483vTASf/l8HQvWBHQwUdQSuwU+JM=
Subject key identifier: FB:6B:1F:9F:0A:0E:EE:64:A9:17:2F:4B:81:3A:F7:7C:86:BA:50:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/843EBFAACCBA11EFB8C94973762E951A.roa
Signing time: Tue 07 Jan 2025 05:44:53 +0000
ROA not before: Tue 07 Jan 2025 05:44:49 +0000
ROA not after: Mon 13 Dec 2027 05:44:49 +0000
asID: 17561
IP address blocks: 156.233.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64008 (0xfa08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 05:44:49 2025 GMT
Not After : Dec 13 05:44:49 2027 GMT
Subject: CN=677cbf55-22b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:69:ff:cb:ec:6f:a9:e6:5b:5c:7a:6e:c9:
63:46:3b:f9:26:1d:04:79:e4:68:04:c5:b9:f4:fe:
af:86:aa:01:0d:33:b6:2f:1f:de:52:39:90:43:0e:
30:8e:da:92:98:f3:a3:f6:93:fc:93:6d:72:0d:d6:
50:b1:30:62:be:70:c0:92:f4:98:e6:eb:e5:cc:65:
5f:c3:2e:5e:71:e1:c8:39:98:ae:05:35:a2:1a:07:
1e:50:96:32:67:b4:66:1c:7a:c5:e5:a5:dc:98:77:
ac:83:ae:d2:22:4d:3c:a0:59:8c:73:2e:f8:16:4e:
04:48:f3:74:91:11:3a:81:a8:c9:94:68:06:4e:9e:
52:50:e0:54:2e:4d:2a:aa:14:4b:02:37:b3:b9:da:
4e:21:b6:11:94:05:5f:ed:45:83:02:ed:dd:65:d3:
be:a9:4e:dc:b2:97:66:08:7f:0d:f8:ae:e7:43:99:
c2:7e:20:6c:1d:40:61:49:0e:45:dc:28:f9:fe:41:
fb:44:73:8f:af:a1:1d:87:1f:0e:3d:51:ca:9e:00:
b4:33:a3:24:fe:5d:a5:e2:79:b3:c0:b0:05:77:f9:
59:db:ae:68:d6:84:cf:1f:70:8f:76:6c:73:82:ad:
d2:fb:b4:d9:ca:59:ab:4d:b1:5c:b8:fa:96:23:90:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6B:1F:9F:0A:0E:EE:64:A9:17:2F:4B:81:3A:F7:7C:86:BA:50:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/843EBFAACCBA11EFB8C94973762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.14.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b4:2e:36:77:73:32:cb:9d:2f:c4:5d:0e:09:33:eb:3f:9c:
1b:df:cb:37:4c:b3:76:7c:8d:24:cd:1a:e3:39:3d:d2:1a:4f:
b1:ac:d1:42:82:3f:38:6e:98:04:ff:f7:d3:db:35:c7:32:de:
47:36:6f:3a:0c:e1:c7:5a:c9:5b:15:b6:d0:fd:a9:1a:8b:2f:
c8:b2:3c:bb:c9:e6:9e:ea:23:21:6d:79:47:74:0b:58:30:63:
5c:85:56:36:ad:f4:d5:38:e8:59:9b:94:3f:15:7a:14:f9:42:
5c:d7:51:e7:a5:21:58:7c:e7:18:06:7a:aa:01:4d:1d:82:34:
68:3b:ff:5c:a2:9c:fe:a7:86:25:3a:d7:9a:b8:e8:1a:7d:b5:
2d:c5:a5:75:ff:2f:c0:e2:ad:06:cc:6c:8e:6e:c7:1b:73:92:
eb:0f:06:c0:3e:3b:9f:08:46:a9:45:e4:27:44:98:db:3c:b3:
ef:99:1e:84:d0:b9:e3:98:10:9a:d9:fb:30:b9:1b:ae:d3:df:
fe:b7:df:60:05:61:b9:d2:b1:74:38:e2:38:b2:49:61:37:91:
b0:b5:ea:e1:d3:de:e8:1f:2f:9b:66:7d:17:d8:68:53:05:81:
32:9c:b7:a7:ed:66:5e:6b:c9:85:83:a3:19:3d:e0:99:ee:97:
bd:f9:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:27 2025 by rpki-client