Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9160F370CCB911EF931A206D762E951A.roa
File: 9160F370CCB911EF931A206D762E951A.roa (raw, json)
Hash identifier: MZHXVvDPVTabloAtX/EHE8jXzdA+ZgbWDMcB9oHifHI=
Subject key identifier: F5:65:0F:2F:49:DE:DD:5A:9D:3A:4E:DB:AE:AC:99:83:C8:DA:49:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9160F370CCB911EF931A206D762E951A.roa
Signing time: Tue 07 Jan 2025 05:38:05 +0000
ROA not before: Tue 07 Jan 2025 05:38:02 +0000
ROA not after: Mon 13 Dec 2027 05:38:02 +0000
asID: 17561
IP address blocks: 156.233.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64000 (0xfa00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 05:38:02 2025 GMT
Not After : Dec 13 05:38:02 2027 GMT
Subject: CN=677cbdbd-871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6e:87:6e:4d:0c:54:85:73:71:55:52:7b:00:
1a:12:7c:a5:c8:3f:24:c8:90:5a:ba:13:79:78:67:
5e:58:9c:5e:b9:50:c1:30:af:e6:b5:f5:67:22:2f:
58:66:40:99:62:6a:02:ea:bc:bb:94:f7:2e:ae:3c:
af:a8:b0:94:51:bb:f3:95:5f:c8:de:c3:11:e2:f4:
bd:c1:fb:6b:80:84:c0:51:9d:07:71:e7:62:17:6d:
54:d5:c7:0e:1f:bd:9e:dc:02:2d:b1:06:59:f4:81:
d2:35:27:fd:15:65:e8:a3:e3:d5:e5:56:c8:df:d1:
20:f4:f4:07:b6:8d:f5:ed:20:ab:95:bd:c9:a7:6e:
76:ed:e5:da:f8:aa:93:7c:12:47:17:09:b2:57:32:
39:79:d2:66:16:6b:c3:4d:3b:0b:21:b3:4b:7c:0e:
86:5b:04:34:20:44:2c:6b:dc:cd:d4:2c:b8:30:cf:
c0:d5:09:49:d3:2f:4f:f5:a2:f0:a1:19:09:7a:52:
28:01:05:ab:eb:96:56:03:96:29:55:06:a2:75:58:
08:98:6e:cc:82:be:bf:b4:b2:78:51:a1:11:34:18:
30:4d:a3:20:49:20:b6:3a:ad:dc:43:21:17:c2:42:
74:ae:da:f5:44:c2:aa:f9:98:f6:9d:60:1c:b9:27:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:65:0F:2F:49:DE:DD:5A:9D:3A:4E:DB:AE:AC:99:83:C8:DA:49:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9160F370CCB911EF931A206D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.10.0/24
Signature Algorithm: sha256WithRSAEncryption
99:bb:80:c8:0f:8f:01:1e:f8:0e:f2:85:ed:93:6a:94:43:17:
9b:4d:a2:02:62:5e:86:e6:77:2e:57:0d:25:23:a2:31:17:54:
15:02:b1:ed:c7:54:53:c1:a1:54:20:06:c2:f7:15:4a:a0:b8:
05:f1:e2:7b:0d:0b:e4:d0:e2:e8:b6:4d:10:80:e5:f1:5f:28:
42:6b:75:8d:8f:99:e3:73:76:83:d6:bc:8d:9e:a4:e3:72:29:
a0:0e:5d:1b:ae:f5:f5:81:1b:3f:50:04:07:48:39:dd:7b:cb:
77:a1:f4:5d:74:ef:af:53:ee:99:65:51:b4:f0:cd:04:b7:34:
81:0c:37:ce:51:52:ed:77:16:d3:46:bc:36:cd:17:ab:81:25:
e2:0a:d6:fd:4c:b5:26:47:a9:bf:0d:b6:6d:a9:00:e9:c9:62:
70:6e:8d:82:96:27:45:3f:be:d2:c1:a7:7e:0d:d2:de:be:2f:
49:5a:f0:89:4c:b3:4b:fc:6d:e2:1e:11:4e:8e:42:55:89:83:
f7:2e:0f:a6:90:e2:72:b0:0b:e2:6e:0c:7f:5f:7b:e2:11:50:
ca:6c:1a:e9:70:dd:98:d3:c3:7d:04:0f:ba:26:69:9f:63:4c:
2a:dd:94:e1:ac:b8:4e:53:f3:d4:50:bb:78:b7:a5:ca:d3:5d:
db:cc:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:55 2025 by rpki-client