Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8966EC02C99811EFB0224C94762E951A.roa
File: 8966EC02C99811EFB0224C94762E951A.roa (raw, json)
Hash identifier: C8Sa3NSbuwAl6zLY6EucffXCbL38oBoSxWRieVXR/4Y=
Subject key identifier: 43:54:BF:0D:30:9F:9F:3D:01:1A:F3:0C:E0:BA:B0:41:04:21:9A:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F629
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8966EC02C99811EFB0224C94762E951A.roa
Signing time: Fri 03 Jan 2025 06:04:05 +0000
ROA not before: Fri 03 Jan 2025 06:04:01 +0000
ROA not after: Mon 13 Dec 2027 06:04:01 +0000
asID: 17561
IP address blocks: 156.233.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63017 (0xf629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 06:04:01 2025 GMT
Not After : Dec 13 06:04:01 2027 GMT
Subject: CN=67777dd5-d9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:e3:1d:1e:ef:1e:f2:4d:ed:10:91:00:a3:
b1:e1:f4:8c:67:3f:ac:8e:ee:52:c5:49:05:53:e0:
ec:38:ca:16:26:4c:f8:05:98:1f:85:7b:e4:cf:40:
3c:fd:55:92:6d:a9:75:79:ef:fd:7c:df:51:87:e5:
69:92:7d:f1:58:92:9e:86:bf:6b:41:f2:97:b3:1f:
46:f1:f4:91:ae:ce:61:90:23:db:35:32:18:43:b6:
5c:bb:9d:94:03:25:e6:1f:99:5b:eb:bc:95:3d:25:
3e:83:63:86:04:af:58:30:d0:0e:31:a4:22:ec:82:
20:46:c3:a4:5a:b2:20:0f:9c:b5:60:c8:a5:07:6f:
56:35:a8:b5:c6:6b:a3:3d:f5:f6:fe:6a:fd:b3:1e:
f7:fa:fb:e8:c9:f6:3b:d3:e7:31:5b:12:53:b9:2f:
63:2b:15:e5:5f:5c:e6:eb:9b:65:4a:ac:3d:c4:1e:
4c:05:24:38:89:8c:a9:f8:9b:85:34:a7:bf:44:36:
70:99:1c:7a:e1:e2:ab:8c:07:b8:6d:4e:ba:8b:c7:
60:23:b1:6a:58:0a:57:d4:86:f2:1e:10:f8:cf:3c:
d4:99:25:0c:1c:9c:7b:e0:fc:ab:a8:e1:ad:f6:36:
20:fa:29:3b:c8:dc:59:32:3a:80:bc:96:de:56:b2:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:BF:0D:30:9F:9F:3D:01:1A:F3:0C:E0:BA:B0:41:04:21:9A:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8966EC02C99811EFB0224C94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:78:e3:89:52:57:20:b4:ce:a3:dd:a1:2e:cc:18:ea:40:51:
2d:31:e6:bd:df:43:ba:a4:47:7e:28:d7:d3:85:cc:a1:e0:a4:
6b:35:1f:0b:14:d8:35:84:ca:06:7e:11:48:f4:01:0d:de:f6:
fc:55:7d:64:d0:5e:97:1e:7e:d2:e4:2c:58:7c:96:97:f5:d0:
eb:c8:53:80:54:92:87:db:a6:ea:76:ed:6f:a8:f3:01:d7:16:
46:88:e1:e6:b7:60:a4:d8:73:19:93:45:cf:73:9e:58:a9:41:
c6:50:fe:24:0f:5c:a0:dc:c7:65:1e:fc:66:b5:75:ca:9a:fa:
02:0f:f2:63:79:e9:9a:c1:53:4a:fd:8b:f3:a8:85:9b:09:a4:
04:98:b8:d3:bf:90:fa:9b:4a:a2:db:23:df:5c:a5:6f:1e:98:
9e:a8:38:b7:f7:2b:5a:21:7e:07:61:c8:a6:7a:17:02:95:c1:
e1:bb:1d:ff:2d:47:85:23:06:c8:20:1a:d7:da:0a:ce:06:06:
ad:5c:e4:54:2f:37:49:3c:05:00:c0:d6:18:c9:1d:0b:32:3a:
bd:11:fb:2e:7d:59:3d:07:05:dc:43:f4:27:3b:09:f0:e3:9c:
f1:f2:15:c4:bb:58:a6:b1:cd:1c:e0:1d:ed:0e:e2:0a:2f:41:
15:bc:7f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:37 2025 by rpki-client