Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE60044ABA311EF80F2D366762E951A.roa
File: 8FE60044ABA311EF80F2D366762E951A.roa (raw, json)
Hash identifier: RfPI1x5+cIElOlpF1XAdj3OCTWA5AfZBTv1h9wAQP28=
Subject key identifier: 5A:3F:20:F8:C4:7D:56:DD:B6:F6:F7:EB:B2:26:5B:2A:43:4C:75:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DA99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE60044ABA311EF80F2D366762E951A.roa
Signing time: Tue 26 Nov 2024 03:07:25 +0000
ROA not before: Tue 26 Nov 2024 03:07:21 +0000
ROA not after: Fri 26 Nov 2027 03:07:21 +0000
asID: 17561
IP address blocks: 156.230.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55961 (0xda99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 26 03:07:21 2024 GMT
Not After : Nov 26 03:07:21 2027 GMT
Subject: CN=67453b6d-b7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:2b:38:bc:88:91:ad:2f:f1:0a:09:84:67:
7a:c1:a1:6c:d2:77:bb:e1:bb:cb:c6:19:85:17:d2:
ce:ef:e9:b6:79:a7:ff:41:f2:ca:d1:05:42:3e:18:
b8:36:0a:5e:7b:28:9b:34:07:05:9b:c2:13:16:02:
9f:30:d1:05:c5:b9:13:a6:3d:29:19:34:9a:77:3f:
56:05:1b:65:4a:b1:77:0a:90:c6:b1:74:0c:8d:37:
d5:a6:1d:e0:e4:a0:64:fe:88:8b:0e:b1:50:00:24:
9d:4e:c6:2d:d3:9b:c0:e9:63:f8:93:4e:b2:9f:f8:
aa:3a:4d:44:74:e5:fc:d7:95:4f:c8:60:6d:25:72:
9e:2d:62:5a:44:81:27:30:6d:e6:e5:cc:71:63:50:
3a:80:10:61:33:f3:8f:7a:57:b3:5f:ed:72:c8:41:
c3:3d:c8:09:47:02:70:0d:a5:77:55:c8:7d:78:7a:
40:2b:c4:ee:08:53:8c:f7:59:bb:53:f8:52:54:e7:
bb:3b:d5:b4:5c:73:56:aa:53:a9:71:b6:c9:b0:54:
a4:a7:4a:d8:da:d0:4c:7d:78:c1:39:d6:ce:de:fe:
1b:be:16:ad:95:17:66:19:c1:27:94:c2:1c:4a:88:
3a:62:19:99:57:22:5e:3b:d7:24:89:fc:01:fc:10:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3F:20:F8:C4:7D:56:DD:B6:F6:F7:EB:B2:26:5B:2A:43:4C:75:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE60044ABA311EF80F2D366762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0f:f3:41:d4:04:71:76:3d:aa:cb:c3:32:2f:16:0d:61:85:21:
a7:c3:11:bb:cf:ec:e3:08:49:75:7a:27:9b:69:44:81:34:14:
97:94:3c:8a:92:a7:8f:5f:2f:ef:31:16:e2:39:74:b1:eb:7f:
d7:90:04:3c:75:d4:06:97:0c:c4:89:80:bb:f3:f8:60:9f:f7:
d5:04:1f:20:6f:7b:42:fa:74:1a:47:b6:60:6d:f6:64:f4:d4:
b1:43:e8:93:0e:4c:01:79:82:24:5c:9f:f3:c8:06:86:60:12:
a2:6d:eb:ab:ac:25:7e:f0:eb:7f:2c:99:61:d2:19:86:a0:94:
e6:c5:b5:4c:b5:8f:f2:bd:6a:59:ca:39:47:c5:b9:44:b1:9a:
2a:ee:d8:eb:05:ef:e5:57:29:87:8d:d7:a1:df:cc:da:20:b5:
9a:92:63:cb:a3:ac:e9:d7:12:d1:66:9a:5d:ca:f7:97:c0:ca:
2f:28:c5:08:f6:7c:0f:77:61:17:9f:e7:04:fb:a4:38:0d:b9:
e1:f7:6b:41:0e:a3:b0:48:bf:14:dd:e0:7d:6a:2d:34:2a:e5:
79:25:6d:07:9e:3b:f2:b0:c5:0a:54:dd:89:1e:d5:e5:cf:50:
1f:18:c0:5c:df:44:c6:e7:c8:44:b6:e1:85:d8:96:37:7b:8f:
2a:3e:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:04 2025 by rpki-client