Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CB0954ECD4811EF94E02D71762E951A.roa
File: 8CB0954ECD4811EF94E02D71762E951A.roa (raw, json)
Hash identifier: RwlYeW1SIkJTVsuFMtpFJgfTE+cEgQa3zdeoqJWJtvE=
Subject key identifier: CC:1B:52:6C:4D:18:F9:54:16:F4:A4:02:09:07:C1:29:EE:0B:10:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CB0954ECD4811EF94E02D71762E951A.roa
Signing time: Tue 07 Jan 2025 22:41:35 +0000
ROA not before: Tue 07 Jan 2025 22:41:32 +0000
ROA not after: Mon 13 Dec 2027 22:41:32 +0000
asID: 17561
IP address blocks: 156.246.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65195 (0xfeab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 22:41:32 2025 GMT
Not After : Dec 13 22:41:32 2027 GMT
Subject: CN=677dad9f-f02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:c9:fe:33:e5:48:1a:50:a2:ab:12:16:b1:
c9:85:cf:98:4c:93:0b:a0:48:15:f3:5c:b7:e9:24:
73:a1:14:af:76:9f:0c:3a:4f:4e:c9:d7:19:15:e5:
5e:7f:28:b7:60:8e:ef:d3:27:f7:85:ff:83:80:2e:
ae:c2:d6:c1:36:b8:d5:81:13:69:d6:10:f8:fa:eb:
4f:4b:17:ec:2d:90:f2:8b:f2:84:08:2d:4a:77:dc:
0a:1e:15:bb:cc:84:9d:0c:35:1f:51:f2:a4:34:82:
94:11:61:bb:80:3a:40:cb:9b:5f:d1:62:07:bf:f4:
1c:5f:09:27:1b:a4:25:bf:f9:68:5a:8a:69:16:43:
cf:47:1c:b2:34:f5:e3:92:bd:15:b4:04:68:be:70:
0c:56:7d:12:59:51:78:87:04:4a:09:37:94:a2:90:
f0:a0:23:5f:ef:6d:27:b6:09:99:37:a7:ee:3f:80:
71:bd:32:89:e2:50:64:52:c5:4d:98:fc:f5:71:88:
cd:b1:02:5a:a8:f9:11:25:7a:ac:ff:c4:59:0c:f8:
09:d1:92:82:0d:99:32:fb:1b:e8:6f:5d:58:d5:d7:
90:ce:c1:f7:dc:1e:f5:bb:b8:b9:94:75:61:c0:c5:
19:bd:fd:83:8e:b7:72:2c:00:08:4d:4e:d9:b1:86:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1B:52:6C:4D:18:F9:54:16:F4:A4:02:09:07:C1:29:EE:0B:10:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CB0954ECD4811EF94E02D71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:94:50:ed:85:9e:cd:1d:73:11:6a:e6:db:fc:8e:04:31:95:
c0:c9:c0:9c:03:35:28:ee:0e:a0:7a:15:8f:0e:2d:60:97:7c:
2f:2f:cb:84:82:fd:33:60:89:ef:0e:ec:b0:fd:83:22:e6:7b:
b9:38:20:89:77:80:69:a3:e9:49:9e:4a:f2:ab:f4:b7:37:f1:
83:5d:d9:5c:d1:be:c8:14:2f:44:73:80:3e:6c:f8:02:6d:4a:
3d:d8:cc:02:c9:0e:9d:4e:3b:53:96:d9:be:a1:4e:84:0b:97:
6c:ce:da:ce:a1:d2:fe:c5:80:d7:59:be:22:f9:52:2b:73:35:
bd:9b:ef:a2:3d:42:af:2b:b8:a1:c0:c8:20:75:ae:c0:9e:83:
b1:52:89:91:e1:5b:10:22:09:88:8b:36:bc:03:f6:18:59:5e:
7d:ea:2d:b0:78:6b:8a:0a:8f:d4:90:4c:33:8c:aa:18:9f:ba:
6a:24:ee:37:79:ec:ff:e8:1c:0e:02:a6:c8:89:b2:83:35:81:
47:67:b5:81:50:76:07:70:3f:20:81:ad:0c:e1:fe:bc:f0:7b:
89:57:b3:94:02:41:c6:d6:0f:38:3e:2d:9e:df:73:72:79:4d:
90:0b:fd:ba:b0:35:f3:70:42:1d:e5:6a:62:15:d1:e3:61:78:
ca:c9:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:30 2025 by rpki-client