Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AAE74A6CCD911EFA6CEFAB5762E951A.roa
File: 8AAE74A6CCD911EFA6CEFAB5762E951A.roa (raw, json)
Hash identifier: CjAwEtT4ZBCvZD4R5q81/tmTMVCPERwiZFFVqIkA63Y=
Subject key identifier: B1:EF:2B:F4:6E:E2:15:61:0A:36:E8:49:BC:07:98:CF:04:D7:9C:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AAE74A6CCD911EFA6CEFAB5762E951A.roa
Signing time: Tue 07 Jan 2025 09:26:58 +0000
ROA not before: Tue 07 Jan 2025 09:26:54 +0000
ROA not after: Mon 13 Dec 2027 09:26:54 +0000
asID: 17561
IP address blocks: 156.233.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64316 (0xfb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:26:54 2025 GMT
Not After : Dec 13 09:26:54 2027 GMT
Subject: CN=677cf362-4fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:a2:d9:90:34:d0:af:21:c2:7b:a0:a1:99:
a7:b9:2a:a3:6d:2e:bd:ee:0b:0b:45:1d:1b:4b:c9:
c5:db:b1:08:8b:b8:5d:d6:54:d3:6f:fb:fb:de:21:
ef:4d:e8:e6:ee:b5:f7:3f:3f:c9:eb:0f:32:9d:51:
55:51:2e:ec:00:81:80:fd:3e:a4:22:79:87:50:f2:
34:8c:13:44:b3:e7:65:39:54:cf:dc:eb:be:eb:fc:
36:7c:19:e5:a9:95:56:f9:4e:0c:9d:bf:4a:94:67:
bb:4f:2f:5c:c5:85:40:8e:ff:49:27:30:12:11:4f:
a3:94:3f:83:f0:25:2c:1a:0a:d3:1b:13:63:92:a3:
df:10:64:3f:da:e9:2f:1f:10:fc:46:32:d7:ab:ac:
93:4f:23:72:5f:ab:2d:c2:da:24:dd:75:3d:c4:12:
5a:ca:d4:05:8e:71:ff:1c:70:a4:be:89:b7:ef:3f:
13:78:c3:50:08:98:0a:c0:fa:89:1a:97:9f:56:c4:
72:5b:39:cb:48:de:55:16:2a:58:3f:b2:43:8e:0e:
60:3b:55:72:44:07:69:74:b6:60:7d:9e:14:cd:be:
e4:d1:62:2c:01:36:e3:00:2f:24:8a:63:37:8d:43:
81:ea:8c:97:ef:f7:1a:fb:7d:e4:68:88:81:1d:03:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EF:2B:F4:6E:E2:15:61:0A:36:E8:49:BC:07:98:CF:04:D7:9C:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AAE74A6CCD911EFA6CEFAB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.192.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:26:0d:db:96:3e:88:7c:a5:7f:2c:76:4b:ac:0e:b6:03:fc:
ca:3f:60:97:ea:16:ac:46:f5:9f:ae:42:41:ec:3d:b9:be:13:
8b:21:3b:dc:65:91:f1:e5:d4:59:fb:c1:d5:bb:1f:96:d9:66:
e3:af:39:90:93:35:75:4f:dd:2d:bb:18:61:13:d4:7d:4e:29:
c4:5c:bc:ff:eb:bc:78:ee:be:3c:8b:7c:b5:c8:e0:97:f4:da:
80:8d:3e:00:a2:05:db:c5:24:74:21:6e:b9:8f:74:a9:2d:41:
43:0e:74:16:8f:bf:cf:23:15:03:6b:b7:56:a2:8b:3d:62:d2:
11:85:ab:53:a2:7e:ec:f1:bb:a7:74:7e:bd:93:a6:ed:9c:a5:
86:7a:0f:b7:e7:8e:8d:2e:02:b6:46:5f:35:2f:03:44:ff:05:
44:58:88:7c:c6:26:e2:b1:61:eb:97:e7:7a:56:52:a2:d8:b3:
a7:e0:59:3b:9f:7c:d6:6c:4b:3a:33:26:d4:b1:3d:66:83:83:
e1:b0:0d:03:c1:cd:75:d3:ce:c1:cd:eb:8b:a0:08:9d:3b:70:
9d:50:8a:36:4e:a0:5c:5f:de:e9:3c:f8:24:ec:bd:39:5b:59:
a2:ac:42:47:ff:5b:34:50:5f:d4:ca:5a:65:cf:f0:7e:90:e0:
ba:c2:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:34 2025 by rpki-client