Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86964326CD1F11EF8E0AF76F762E951A.roa
File: 86964326CD1F11EF8E0AF76F762E951A.roa (raw, json)
Hash identifier: TP4CX+0NLBSSjiGHhi9rI7f+NZFDk0npHkLLsoOM3DA=
Subject key identifier: 82:B8:4A:05:7A:22:09:AE:F0:64:54:B1:A3:9B:4F:DD:D0:BB:86:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86964326CD1F11EF8E0AF76F762E951A.roa
Signing time: Tue 07 Jan 2025 17:47:56 +0000
ROA not before: Tue 07 Jan 2025 17:47:52 +0000
ROA not after: Mon 13 Dec 2027 17:47:52 +0000
asID: 17561
IP address blocks: 156.241.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64871 (0xfd67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 17:47:52 2025 GMT
Not After : Dec 13 17:47:52 2027 GMT
Subject: CN=677d68cc-65b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:1d:03:fe:bb:74:c2:ad:a6:ef:a1:c2:4b:
7b:0a:f3:09:57:6c:af:f6:eb:4a:4c:b2:88:5b:f7:
6f:eb:51:47:ec:c6:47:73:59:e6:5a:7a:99:bd:b0:
33:88:d7:ca:d5:e0:66:f4:c5:c8:df:cf:18:f9:9d:
26:98:c2:70:65:7c:f2:e2:e2:51:76:39:f5:47:58:
b8:bc:d4:d8:1f:ff:80:bb:42:90:10:2d:dc:ab:40:
88:d2:5e:c4:79:24:46:71:f2:62:49:b0:2d:af:31:
dc:ce:30:bc:04:05:bc:b8:b2:a8:b3:05:58:02:08:
7e:3b:e7:e6:5f:6f:30:86:5e:8e:34:4a:9a:e6:0b:
39:04:69:90:93:5c:7b:4d:46:9c:37:95:e2:52:f7:
9c:31:7b:3f:6e:2b:90:7f:f7:0d:c5:d6:47:f9:a1:
95:8c:9b:a8:a2:c0:fb:27:fc:20:43:94:65:b7:1e:
63:ee:de:32:91:64:82:e3:33:5f:96:7f:96:41:47:
12:7e:5c:e9:12:0a:8b:40:47:4a:17:29:83:89:61:
43:4f:3b:f5:33:e4:ee:fa:e9:af:77:97:80:4b:f3:
4b:a1:d1:32:b8:5c:5f:fc:8d:dc:b6:af:6c:e7:a3:
05:67:be:99:94:02:7d:c2:d5:f7:11:ce:0c:1e:44:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B8:4A:05:7A:22:09:AE:F0:64:54:B1:A3:9B:4F:DD:D0:BB:86:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86964326CD1F11EF8E0AF76F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.61.0/24
Signature Algorithm: sha256WithRSAEncryption
81:80:8e:02:7e:b7:ae:6e:7a:ff:08:36:f1:cc:ec:26:0e:ab:
f5:9a:af:8a:10:80:02:61:a6:48:ae:71:8b:70:f9:74:7f:68:
82:a3:e9:25:58:db:bd:35:6e:b1:76:5c:07:38:e5:74:f9:25:
fd:be:09:7b:00:1c:42:9e:83:37:3f:97:6f:91:71:72:ef:84:
5f:9b:45:35:a8:70:31:44:13:09:09:74:e5:af:22:5f:b8:f8:
00:45:83:b6:80:94:97:b1:b5:fb:9e:f7:40:37:a9:8e:f0:f6:
b7:5e:77:1b:a7:19:69:a0:26:b4:f8:31:15:7e:49:2a:8a:37:
d3:6e:50:e8:94:0b:00:ba:af:df:70:8e:3c:fe:bc:4e:2f:52:
ed:a4:cb:09:b2:29:5b:42:29:86:ae:ea:58:e7:42:1e:8c:ed:
0f:3c:54:49:93:e0:1e:b1:1b:d1:b7:53:af:cf:96:43:76:61:
6c:eb:cc:fc:84:55:c8:f2:8f:1e:0f:c9:fe:21:9a:52:7c:18:
d5:cb:8c:a7:20:e8:17:da:8e:da:6d:8b:bd:bd:70:e9:1a:e5:
63:89:36:62:33:16:2a:67:19:88:28:e3:58:75:f2:43:ed:69:
28:13:d0:3b:71:58:cf:01:ca:03:b5:07:79:c6:15:6d:4f:99:
b9:50:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:58 2025 by rpki-client