Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89071B26CD7E11EFB1CAB45D762E951A.roa
File: 89071B26CD7E11EFB1CAB45D762E951A.roa (raw, json)
Hash identifier: M9yUZcfaZ5aPd2oe7dSgnEoS4q9dzgpwNZpBDVZirBo=
Subject key identifier: E8:F7:B7:A9:FE:B3:5E:FA:BE:DC:4E:04:6B:CD:5C:F8:33:45:34:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89071B26CD7E11EFB1CAB45D762E951A.roa
Signing time: Wed 08 Jan 2025 05:08:02 +0000
ROA not before: Wed 08 Jan 2025 05:07:58 +0000
ROA not after: Mon 13 Dec 2027 05:07:58 +0000
asID: 17561
IP address blocks: 156.250.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65521 (0xfff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 05:07:58 2025 GMT
Not After : Dec 13 05:07:58 2027 GMT
Subject: CN=677e0832-6ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:e1:de:9b:38:44:c2:4e:44:9c:79:02:2d:
b2:23:9a:94:dd:a1:63:15:1d:36:f0:da:56:46:12:
5f:10:78:91:34:a0:c3:8c:59:c8:75:88:18:b0:dc:
6d:8e:fd:b1:28:ef:eb:66:62:5d:26:58:48:e3:ac:
cf:b5:72:16:e3:bd:d2:8b:d3:e0:4d:61:a6:8c:8e:
81:03:79:49:5a:1f:82:ff:6b:f4:3d:b7:69:fd:0f:
d5:be:db:07:8b:be:e7:a2:75:f9:db:c4:7a:9a:42:
8e:74:1b:b9:4f:f8:7a:b2:52:36:77:ed:e0:4a:09:
df:85:25:a5:f1:ea:17:12:da:7d:d8:ca:b5:ff:7d:
84:f4:64:c0:37:1e:1e:07:f5:59:d1:0c:0a:b4:7a:
f6:1f:27:6e:6f:fb:d4:e1:5e:24:1e:be:23:d4:63:
a2:d5:01:ec:2f:1f:71:3d:1a:cf:aa:45:6b:a6:ce:
d2:82:85:12:97:ea:61:19:21:db:4b:84:da:d3:16:
f8:ee:0d:13:8f:13:df:e5:86:02:c4:b7:ee:b2:86:
e2:70:69:5c:d7:2a:ea:34:47:60:94:69:5f:75:a4:
c9:25:47:28:f2:4b:ac:e6:51:d4:7a:d6:b8:01:f5:
e5:ba:9f:ed:9e:0a:b0:9b:9c:77:25:c1:4e:bc:c0:
3a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:B7:A9:FE:B3:5E:FA:BE:DC:4E:04:6B:CD:5C:F8:33:45:34:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89071B26CD7E11EFB1CAB45D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.62.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b8:ee:88:df:5d:e3:5c:6a:85:e7:b1:a3:35:8f:85:61:0c:
b2:5d:cf:3e:fb:58:7b:32:54:08:8e:9d:17:0f:85:91:a0:65:
fc:17:96:e7:f8:32:3f:8d:aa:b2:1b:5e:22:88:74:a2:9d:07:
c5:f2:cb:e4:4a:7d:d7:ed:36:29:f6:19:c8:3d:72:d7:da:ba:
1b:60:3d:c4:9f:3f:6e:64:33:c3:0b:9f:98:ea:03:a6:18:32:
c7:93:a5:75:97:42:76:8e:0c:f1:ec:a9:04:71:bf:76:44:d8:
b5:49:8e:20:7c:f8:83:f9:75:3a:f2:b0:60:62:93:25:a5:00:
9f:90:f2:1e:98:70:ea:cb:36:3f:3b:5f:7f:26:a1:72:ad:93:
98:9c:44:37:71:66:06:10:76:26:59:eb:78:de:a5:62:d6:78:
3f:51:8c:3c:dc:dd:8b:23:92:39:1d:3f:79:9e:f4:7c:dc:f1:
f8:1e:1b:b4:c2:7a:cf:7f:44:a9:81:27:78:a4:5c:bc:60:93:
0f:af:47:4d:30:ed:e9:05:50:04:9b:64:c6:8f:ff:5c:aa:a4:
5d:28:80:d5:07:ce:73:57:5a:04:10:f2:aa:6e:81:4e:c9:31:
21:cc:2d:d6:da:47:30:58:bf:ac:bc:d4:34:24:36:43:70:7f:
80:f8:e8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:58 2025 by rpki-client