Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A0597CCCE3D11EFAF19D7A2762E951A.roa
File: 8A0597CCCE3D11EFAF19D7A2762E951A.roa (raw, json)
Hash identifier: 0kVI+lDFxCVJzBGnhqaHEKoZHRHQb5oEn/R7e6jTGB8=
Subject key identifier: C1:6D:00:85:BD:B0:23:6E:CC:6F:A6:34:9D:A9:0D:37:04:B7:A3:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010257
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A0597CCCE3D11EFAF19D7A2762E951A.roa
Signing time: Thu 09 Jan 2025 03:55:18 +0000
ROA not before: Thu 09 Jan 2025 03:55:14 +0000
ROA not after: Fri 09 Jan 2026 03:55:14 +0000
asID: 17561
IP address blocks: 156.247.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66135 (0x10257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 03:55:14 2025 GMT
Not After : Jan 9 03:55:14 2026 GMT
Subject: CN=677f48a5-65cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:78:44:7d:ee:a1:3d:84:87:50:1f:1a:30:a1:
e6:ea:59:4e:76:f7:6c:e3:46:0f:87:e4:b7:4a:bb:
af:a6:84:bf:9b:8e:95:61:b7:e0:5a:82:85:c0:73:
e6:09:37:d9:3c:c5:77:be:9d:f3:ab:f5:af:fa:c4:
69:12:f5:3e:1a:7d:03:a8:55:c6:03:1a:3a:3f:de:
17:3b:7c:46:0a:89:6a:90:ae:02:c7:1b:a9:cf:1f:
0d:55:eb:8c:28:48:f7:51:c6:8a:bb:b4:05:54:9d:
4a:d4:d3:c6:ab:6c:98:b7:97:a5:86:96:ee:a5:f8:
bb:8f:00:e9:e8:b3:d7:82:90:c4:5b:d2:5f:0b:e0:
a9:bb:47:df:45:a5:2c:7b:62:36:3c:46:77:58:cd:
03:3d:5b:7a:51:41:2c:33:44:08:c1:9d:79:a3:b5:
d6:d3:98:42:e9:f6:d3:38:90:b1:5f:1c:ab:dc:36:
95:64:01:f8:84:41:6c:6b:72:07:f2:8e:a6:b4:be:
09:65:bf:1a:1f:b8:03:1e:91:88:ae:3a:ab:7d:41:
f2:e3:59:a8:1c:94:53:e9:6f:38:6d:7d:47:3f:5d:
ea:b8:e0:8c:e4:4a:29:3d:c6:cf:66:c5:aa:de:10:
d6:5b:28:4d:73:39:34:7c:ea:d3:f2:c2:b2:65:b8:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:00:85:BD:B0:23:6E:CC:6F:A6:34:9D:A9:0D:37:04:B7:A3:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A0597CCCE3D11EFAF19D7A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.63.0/24
Signature Algorithm: sha256WithRSAEncryption
06:4a:42:36:5a:fb:71:ad:8a:3e:84:20:ec:4e:d4:8e:74:13:
bd:41:3a:e3:c7:f1:13:dc:2c:36:1a:be:a1:1b:f6:f8:56:5c:
9e:53:5d:7b:f2:e5:f8:54:45:01:11:7a:e6:17:87:a4:b1:25:
f1:26:c4:c3:4a:c6:02:41:a6:83:c3:b2:e2:8c:9b:85:94:d7:
8e:72:b2:23:0c:39:0a:dc:fc:b2:7b:b7:9f:7d:77:0a:97:b2:
88:c8:83:cf:c2:74:a1:00:9f:20:7e:99:83:68:0a:3b:8c:33:
69:bb:6d:45:95:e5:f6:78:5e:97:b3:4b:aa:6e:98:b9:86:25:
f7:01:d7:70:48:dd:2a:3b:58:f6:a8:85:d3:39:36:06:e2:c2:
db:93:40:5f:6d:05:5b:a9:85:88:c8:9b:4c:26:34:1b:4a:59:
b4:91:a5:d7:0d:18:a1:4e:b3:c1:83:fb:1d:55:d7:ee:4f:34:
ae:33:ac:98:f1:42:e4:36:73:6f:10:22:c3:36:d5:8a:22:2d:
e1:b1:6d:1a:67:cb:ea:14:23:83:0a:79:aa:0b:0e:1c:c9:07:
cf:70:8b:7d:8f:c2:84:a5:47:5f:a9:62:78:fc:09:89:86:cf:
c9:8c:47:91:97:d9:fc:8b:d1:a6:a1:bb:b1:ce:c5:dd:01:e7:
bc:18:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:11 2025 by rpki-client