Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E772588CD0111EF82A179B2762E951A.roa
File: 8E772588CD0111EF82A179B2762E951A.roa (raw, json)
Hash identifier: 2MHb88eu7Pras92UKv0+dFMDQDdBKr0Nf0GfPijKKsk=
Subject key identifier: 62:25:96:4C:1D:88:52:81:1C:0C:83:69:8E:54:92:F4:0F:92:06:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E772588CD0111EF82A179B2762E951A.roa
Signing time: Tue 07 Jan 2025 14:13:24 +0000
ROA not before: Tue 07 Jan 2025 14:13:20 +0000
ROA not after: Sat 13 Dec 2025 14:13:20 +0000
asID: 984
IP address blocks: 156.238.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64629 (0xfc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:13:20 2025 GMT
Not After : Dec 13 14:13:20 2025 GMT
Subject: CN=677d3684-1fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b4:53:50:1e:a8:d7:f1:fb:0b:3f:52:9d:ad:
98:9d:1f:56:0f:d0:ec:24:73:54:85:5f:b2:b4:de:
ff:40:01:55:1e:17:a1:b1:38:8c:b6:11:06:29:82:
89:3c:c2:92:fa:48:05:52:c4:0b:65:a6:ea:af:5a:
17:d8:fb:f7:e2:3e:7d:af:96:3d:e4:e5:af:1d:9d:
7f:51:3e:28:32:a6:e4:40:af:78:47:a7:a6:71:ff:
f2:5f:ec:7a:c1:32:c1:65:77:46:87:d4:a4:6d:65:
53:17:38:26:6f:19:47:36:70:0d:be:f2:5e:d8:87:
63:0b:62:b7:85:58:1c:c6:af:78:0e:78:6a:84:06:
38:6e:2e:0b:c9:40:9f:db:97:6d:9c:c3:cf:cf:9c:
d0:5c:fa:7b:96:c6:6a:f0:73:01:f3:40:f1:d3:98:
6a:71:66:20:f4:12:5d:32:da:65:bd:cd:a9:1a:a7:
7a:7a:a1:d7:48:be:d3:41:8b:29:e7:22:30:22:e5:
33:bf:2f:e5:6b:ce:1f:78:26:55:37:95:eb:e0:38:
a2:9a:0a:19:e5:a2:ff:52:ed:44:8d:f1:7c:1d:0b:
90:d1:c4:22:99:fc:c0:07:fa:01:06:9c:de:e4:4b:
07:74:d6:31:bd:b9:7b:a4:59:f1:48:0e:a2:0c:55:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:25:96:4C:1D:88:52:81:1C:0C:83:69:8E:54:92:F4:0F:92:06:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E772588CD0111EF82A179B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.119.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d2:ed:1e:b6:68:44:25:ab:e8:e3:bb:0b:26:a8:d3:d1:78:
4b:73:f3:79:74:55:b2:2c:de:cb:41:d4:c9:d2:2a:00:b6:bf:
65:41:15:46:e0:16:6f:e8:61:78:4b:c0:2c:42:cc:5f:b0:2a:
6a:d3:a1:f9:a0:59:65:7f:86:d3:8d:e2:ab:02:90:1e:b8:1c:
7c:2b:02:0f:1a:95:f0:b9:fc:f3:d3:ab:92:12:96:62:ae:c3:
ab:12:9b:b4:46:f2:a5:f0:ae:07:be:7f:cc:67:8d:0c:f2:da:
7d:57:33:d1:d7:89:71:59:1d:33:ea:57:e5:cc:8a:34:35:02:
1f:b4:08:c9:96:a3:9c:49:37:57:08:71:6f:17:8b:fe:ac:8d:
6f:09:09:1c:5c:46:3f:c2:a2:9c:1f:81:d4:72:40:42:b6:63:
d0:cf:73:3d:89:4a:03:f7:48:56:02:7f:58:7d:23:48:bb:0e:
9d:87:12:59:59:df:6b:d4:c1:62:4e:be:e3:92:9d:50:e3:2e:
bc:1b:ff:b0:2b:f3:43:04:b0:8a:bf:a8:c5:c5:ea:df:f2:39:
d5:17:d0:86:f7:03:da:dd:f3:72:d2:21:26:dc:4c:01:a5:98:
37:27:e2:c4:06:c8:55:a7:49:8f:91:c8:7c:a2:2f:c0:7a:6d:
11:2f:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:30 2025 by rpki-client