Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86DB98CCCC1111EFAB81A7BC762E951A.roa
File: 86DB98CCCC1111EFAB81A7BC762E951A.roa (raw, json)
Hash identifier: xhyBxMuGP5VxojfjWgHF+UwyM2eF2cd5TdHnlNCpRvQ=
Subject key identifier: 85:5A:47:88:AF:95:D2:BC:1B:4E:51:3F:31:C8:88:3E:56:86:25:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F867
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86DB98CCCC1111EFAB81A7BC762E951A.roa
Signing time: Mon 06 Jan 2025 09:35:12 +0000
ROA not before: Mon 06 Jan 2025 09:35:08 +0000
ROA not after: Thu 06 Feb 2025 09:35:08 +0000
asID: 200373
IP address blocks: 156.249.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 09:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63591 (0xf867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 09:35:08 2025 GMT
Not After : Feb 6 09:35:08 2025 GMT
Subject: CN=677ba3d0-36c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:df:fe:79:a8:d9:5d:30:6e:f9:58:83:5a:
69:f4:c0:6f:39:30:a9:51:61:0c:3b:90:db:cd:da:
ca:a4:99:3b:fe:9e:83:28:23:26:02:b4:93:46:da:
6b:6e:2d:f7:40:85:29:6f:59:19:54:9c:f8:88:80:
53:44:c6:d7:21:75:43:a1:09:9e:f3:66:bc:e9:5f:
dc:3b:64:fc:13:02:6b:d1:bf:85:51:dc:70:e5:7e:
fe:4b:da:52:6e:c6:7a:09:5f:f5:bf:97:58:57:33:
3a:fa:8e:7e:b8:ed:96:e8:f7:45:d1:70:5a:0a:28:
a6:20:0f:26:ae:dd:bb:a0:2b:b9:a8:0e:c7:e0:56:
86:da:6b:16:9b:15:1a:36:d0:6d:f0:07:c7:ad:d0:
30:2c:8c:fa:df:02:69:01:50:f7:60:81:00:d3:5d:
77:59:fd:14:df:2b:f1:24:7f:a9:c2:83:c3:73:cb:
01:00:71:73:e3:91:16:e3:ff:ce:d3:19:0d:66:97:
93:7d:76:38:14:7b:53:7f:b6:71:51:50:f9:d4:77:
00:ff:05:47:ec:c5:a5:a7:9a:2e:a6:29:ec:e7:7a:
eb:43:23:9b:c0:7a:23:e8:a9:02:51:f9:91:bb:6f:
c5:c1:99:45:a5:ea:63:12:6d:ec:e2:ad:ea:1f:25:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:47:88:AF:95:D2:BC:1B:4E:51:3F:31:C8:88:3E:56:86:25:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86DB98CCCC1111EFAB81A7BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.137.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b4:fb:db:87:e4:45:af:80:8c:02:0a:6f:4d:5d:89:80:36:
12:a6:37:b7:53:f4:6d:8f:7f:0f:01:00:ec:68:93:8a:5c:9a:
97:43:a3:69:13:c5:4a:6a:23:1a:4a:47:b8:09:7b:57:0c:ca:
c3:9e:04:28:e6:cd:38:dd:15:fa:08:a3:4e:9a:29:34:2f:a3:
97:01:f7:e5:ab:3f:67:6e:32:25:68:77:b7:de:8a:93:b2:26:
f6:6e:b8:c1:d5:0c:5b:29:d3:29:63:96:7a:5e:c8:d4:1b:26:
bc:82:86:b1:15:00:fd:55:7c:16:e0:9b:1e:29:7f:62:45:cd:
b8:89:58:b8:d5:a7:30:c9:b0:97:64:17:c5:32:e3:d6:b5:d2:
9a:09:57:e3:a9:43:b8:92:d6:b6:07:9a:b8:21:f8:77:3a:1c:
cc:0d:90:ee:c0:f3:77:f8:e8:d3:fe:d5:9a:8a:89:2a:df:47:
fa:c1:33:94:bf:04:84:14:1b:da:5b:9f:bd:ca:9b:02:79:8c:
94:0f:75:54:5f:de:b4:3e:b2:58:49:d7:62:7d:f0:4b:46:b8:
5e:34:a7:cb:f1:bd:3a:d2:c6:f9:30:ca:fd:ed:aa:8a:64:88:
92:30:8c:ab:b0:12:36:6f:80:2b:c6:e3:d1:3d:e6:ea:b4:59:
a5:92:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:51 2025 by rpki-client