Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7EBCC0CD2411EFA88F228F762E951A.roa
File: 8A7EBCC0CD2411EFA88F228F762E951A.roa (raw, json)
Hash identifier: VUHMjk5dnBIgjUlHmlovpQgrozzwkP+V1ilQ4TcaVmw=
Subject key identifier: 9B:F4:16:94:A5:28:76:46:AE:1E:CD:8A:A3:25:69:6B:C8:1B:87:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7EBCC0CD2411EFA88F228F762E951A.roa
Signing time: Tue 07 Jan 2025 18:23:50 +0000
ROA not before: Tue 07 Jan 2025 18:23:46 +0000
ROA not after: Sat 13 Dec 2025 18:23:46 +0000
asID: 984
IP address blocks: 156.241.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64911 (0xfd8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:23:46 2025 GMT
Not After : Dec 13 18:23:46 2025 GMT
Subject: CN=677d7136-a3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:db:02:74:63:bf:bd:98:33:b0:97:03:47:
bc:1f:f5:15:88:1a:0c:57:c9:e7:0e:a5:b8:2c:ed:
2f:91:4f:4d:35:c2:bf:db:d4:eb:95:f7:37:82:42:
08:03:01:0a:da:91:f1:10:c3:c2:3e:b2:2b:f6:80:
89:f2:be:04:b9:8d:87:cb:77:a9:cf:29:e0:39:40:
79:9b:2f:0d:80:4d:68:6b:f1:23:d9:6c:de:ae:54:
d2:49:57:c4:27:cf:43:a7:cb:f8:6b:e3:6f:34:7e:
3b:0d:e5:01:b9:79:34:45:d9:fe:d6:d4:a3:45:ce:
4a:be:81:53:f1:e8:81:ed:45:a6:57:36:fb:c6:0b:
d8:ac:ce:60:f7:ff:1a:02:5e:61:05:55:41:e1:f4:
76:15:d9:6a:b1:a3:51:c6:b2:dd:9d:e9:e8:4b:8c:
07:9c:8a:73:9e:f6:a6:0f:ee:96:63:7b:bd:4a:d4:
13:be:c8:4e:1a:bb:6a:6d:84:77:f9:51:10:00:05:
1a:91:d4:fa:55:23:d7:53:d4:25:20:19:9d:98:46:
27:39:05:70:87:98:21:fb:ff:e2:43:cf:7f:2f:10:
04:29:55:54:c6:fa:4e:18:dd:1a:c1:1b:09:c5:49:
c6:45:d8:47:75:d4:04:34:84:b9:0a:5f:0b:18:d0:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F4:16:94:A5:28:76:46:AE:1E:CD:8A:A3:25:69:6B:C8:1B:87:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7EBCC0CD2411EFA88F228F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d4:a2:6b:59:b8:1e:fd:3b:7c:6d:58:c2:7a:ca:63:68:70:
9e:21:5b:62:2b:21:7a:5c:b7:e7:32:27:34:3a:37:54:ee:79:
e8:ec:55:d7:bb:b7:b9:20:9e:d7:72:b3:e3:66:33:88:db:83:
9b:ce:1f:25:4d:72:de:61:2b:d8:10:aa:34:64:00:68:89:c2:
dd:e9:e4:33:58:a7:32:db:1c:0d:43:6e:8e:70:e3:e0:9f:ed:
99:4a:60:0b:a1:95:8c:cd:4f:cc:85:25:0f:80:21:55:50:70:
80:56:c9:f5:45:ac:73:40:f6:b3:7d:27:0b:02:f2:c3:98:c4:
0a:0d:71:b8:cc:6c:17:e7:2c:49:b2:64:db:75:9f:99:e6:77:
85:c7:18:46:67:4c:e1:a2:52:6d:cb:05:04:d6:d2:e2:37:4f:
2e:8e:94:4b:e6:b1:e3:74:47:f1:67:cb:24:92:61:49:fc:cf:
c7:ee:04:1f:71:e3:15:6f:14:5a:e2:26:41:fc:01:9c:9f:27:
35:0d:dc:bc:91:a6:51:fc:87:45:fd:6c:bc:93:df:12:fc:95:
58:75:8f:c0:7d:18:94:e2:13:78:dd:20:61:af:90:2f:39:ba:
2a:1a:28:43:5d:5a:60:08:52:6f:85:a2:0b:9b:cb:30:ed:59:
e6:09:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:14 2025 by rpki-client