Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/899EB2E4CD0411EFB683A545762E951A.roa
File: 899EB2E4CD0411EFB683A545762E951A.roa (raw, json)
Hash identifier: EQFBtJjvcoZ7eX/6oDBVcMokDeXcIZyvH7b7A11wVzQ=
Subject key identifier: 08:68:81:A5:B8:DD:EA:C9:11:DD:5F:2F:F4:6C:2C:16:15:74:41:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/899EB2E4CD0411EFB683A545762E951A.roa
Signing time: Tue 07 Jan 2025 14:34:44 +0000
ROA not before: Tue 07 Jan 2025 14:34:40 +0000
ROA not after: Mon 13 Dec 2027 14:34:40 +0000
asID: 17561
IP address blocks: 156.239.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64653 (0xfc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:34:40 2025 GMT
Not After : Dec 13 14:34:40 2027 GMT
Subject: CN=677d3b84-bb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:6a:b8:07:b4:23:5a:d8:17:9b:ad:98:1f:
ee:c4:f6:cb:59:7e:47:8b:2e:39:c3:b1:ea:01:b8:
92:7b:3e:92:71:78:92:07:53:50:57:c8:7c:9d:30:
8d:57:68:ff:59:3c:42:01:06:6e:59:e9:71:f2:01:
f7:2c:90:fe:17:38:de:ed:22:2a:dd:7a:cb:96:69:
61:e7:23:88:f3:7a:00:e0:4d:ec:1d:ed:31:e9:9a:
a4:20:2b:69:d0:1b:a1:ed:70:ca:b8:5b:65:c8:20:
78:d3:80:10:b7:9c:7e:2c:dd:a2:95:12:5e:f7:67:
c1:81:4b:8f:16:d2:1f:57:fd:64:96:d4:85:a8:67:
bb:d7:7f:5e:56:50:d0:ab:f1:2d:a0:ae:5b:ba:e1:
b7:58:51:56:9d:40:ba:c8:cf:ac:0d:bd:23:fd:e2:
b1:76:5b:2e:8c:47:4b:47:34:68:55:6b:cb:d3:93:
99:04:31:11:0d:42:1d:3c:31:29:6c:e7:5c:fe:04:
63:49:77:ad:ca:1d:d1:9c:9b:ba:ef:24:35:e5:cd:
6e:44:cb:59:43:13:15:10:cd:99:55:2c:5f:be:7b:
95:34:d0:b8:37:7f:2b:3a:bd:40:4f:97:81:5f:23:
16:92:b4:db:76:17:3b:5f:36:0e:a7:16:55:16:71:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:68:81:A5:B8:DD:EA:C9:11:DD:5F:2F:F4:6C:2C:16:15:74:41:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/899EB2E4CD0411EFB683A545762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7f:d9:bd:ca:34:a5:dc:99:c9:02:02:ba:08:77:11:4a:e1:
01:63:9a:58:e3:5a:52:1e:30:85:8f:9a:32:0c:d9:f3:05:9a:
97:47:aa:84:c4:31:e3:b3:50:82:00:21:ca:cb:8d:dd:2a:14:
18:2d:59:0c:68:95:7d:0d:4d:8d:88:11:8a:29:67:5d:97:3d:
a8:96:49:11:ea:22:62:e1:fc:7c:7a:d8:84:92:d6:0f:8a:aa:
c2:38:60:d1:cc:d2:22:17:48:2f:7d:3a:77:58:d8:b4:f4:20:
5b:8c:2c:d4:ee:43:f9:33:54:e8:2c:b4:7a:72:c9:87:cb:59:
15:2e:5e:58:4f:24:45:6c:47:72:4f:45:26:c2:57:88:ab:4e:
49:00:38:f8:4a:0e:b2:b5:b9:2e:4f:ee:04:4d:e4:45:71:ff:
c9:e4:6b:66:05:ea:1d:6e:1c:cd:7f:20:7f:63:7f:c3:49:03:
26:59:a2:8a:7d:cd:a2:50:d2:b6:b6:76:c9:44:b6:7a:23:ad:
da:cd:87:a9:c5:eb:27:9e:50:9f:20:32:63:87:78:e9:89:52:
0a:c5:ef:aa:5c:c6:89:30:dd:84:30:a0:a2:3c:89:c9:1d:b8:
7d:1a:75:0b:1d:10:8f:8b:9d:71:3e:68:e9:ee:1d:16:d7:bc:
f2:31:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:40 2025 by rpki-client