Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88FD99E4CE4011EF961639B4762E951A.roa
File: 88FD99E4CE4011EF961639B4762E951A.roa (raw, json)
Hash identifier: 3/Vy2zrIDQkzadaaWnWrNA8XNkOafaqwjml0GQOwsaE=
Subject key identifier: 4A:CB:C1:3A:77:06:AB:CB:50:2F:24:90:F6:35:75:F6:E7:3D:51:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01026D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88FD99E4CE4011EF961639B4762E951A.roa
Signing time: Thu 09 Jan 2025 04:16:44 +0000
ROA not before: Thu 09 Jan 2025 04:16:41 +0000
ROA not after: Fri 09 Jan 2026 04:16:41 +0000
asID: 17561
IP address blocks: 156.245.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66157 (0x1026d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 04:16:41 2025 GMT
Not After : Jan 9 04:16:41 2026 GMT
Subject: CN=677f4dac-cd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:75:09:1e:f4:bf:8a:ed:e7:91:24:c5:f6:
a6:5b:99:a3:1e:f4:4a:05:85:d3:cf:21:5d:98:2b:
00:14:6b:94:ab:8b:3c:f2:93:87:9d:87:c3:e8:77:
a0:f9:33:4b:cc:bc:0e:e9:1f:f1:2e:a2:f8:e0:fe:
cc:46:32:61:f1:19:22:07:9e:4c:07:c6:ab:cb:18:
51:5d:94:02:a1:f7:fd:6c:e5:1e:be:c9:5f:c2:62:
95:ec:a1:aa:e7:aa:73:07:02:ec:3f:36:78:ef:82:
1b:24:88:f3:ad:d9:1e:73:c9:4a:2b:2b:9f:21:30:
ec:f3:9d:20:06:a9:cb:2e:02:94:4e:cd:46:80:51:
31:d3:56:cf:df:b3:88:69:a7:eb:0c:42:a2:ae:ab:
c1:01:d8:24:b8:40:6a:0c:29:ce:d2:76:89:2a:ec:
d7:cb:d9:2d:6b:50:e3:66:72:f4:2b:a5:6e:fa:c9:
ec:64:d5:bd:82:ed:6e:4d:73:db:c9:4d:85:8e:89:
66:1b:2c:dc:5c:79:c8:33:a6:51:e6:b9:3c:ba:85:
87:c2:83:16:a1:27:a7:26:3a:3c:8d:1b:ed:dc:09:
cf:64:58:90:61:f7:71:6a:08:b8:1f:15:b5:0d:98:
51:78:b5:d2:ae:f0:cd:cf:bd:a9:16:b5:2c:88:1b:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CB:C1:3A:77:06:AB:CB:50:2F:24:90:F6:35:75:F6:E7:3D:51:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88FD99E4CE4011EF961639B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.106.0/24
Signature Algorithm: sha256WithRSAEncryption
70:bf:32:2e:a2:21:e0:f7:0f:2a:27:89:0c:39:02:85:87:f8:
c0:94:9a:e5:2d:ea:c3:cc:50:b3:33:86:aa:a2:90:5a:17:60:
0f:a4:02:e9:f0:90:22:9b:03:90:4b:6d:13:80:42:6c:12:7f:
48:32:32:76:e1:77:2d:c4:e3:2a:b9:cd:c7:f5:f6:29:eb:a2:
1b:54:4b:23:1d:02:42:c7:e4:d8:bd:cf:60:50:a3:b7:f0:21:
f7:57:fc:f0:17:f4:a6:ad:a4:dc:d9:5e:61:e3:e1:b0:9c:b7:
32:4b:df:b8:a6:c8:4a:da:2b:18:89:35:a5:49:53:f0:fd:0a:
6f:4b:74:19:2b:98:51:34:58:98:86:65:03:77:41:15:44:33:
95:ca:0f:34:a9:41:9b:25:39:d2:9a:90:ba:21:ef:a2:c3:7c:
da:02:f0:b4:f5:0a:7c:a1:18:f1:c6:7c:bf:53:70:7b:cb:09:
36:a6:19:ce:7e:bf:0c:d7:92:c9:5f:a4:63:50:ff:09:0e:5f:
46:9c:47:19:88:fc:d5:93:1f:98:1e:80:71:dd:63:44:af:7d:
2c:b7:ee:44:b9:ac:64:eb:bf:59:f4:5c:df:53:c6:55:f5:22:
6c:f4:30:0e:77:92:f0:56:27:4c:6a:7b:d2:3d:12:e6:4a:93:
d4:0c:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:21 2025 by rpki-client