Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/944615DEB5FD11EFA51E189F762E951A.roa
File: 944615DEB5FD11EFA51E189F762E951A.roa (raw, json)
Hash identifier: Y2tXoA6mInehnTJKUl0gJZoV7+K0RB5RFvH4jhq0wbI=
Subject key identifier: FF:F4:A3:C7:AC:ED:0E:9F:6D:11:6A:AD:AA:7A:0B:59:2A:C4:72:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E168
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/944615DEB5FD11EFA51E189F762E951A.roa
Signing time: Mon 09 Dec 2024 07:16:59 +0000
ROA not before: Mon 09 Dec 2024 07:16:55 +0000
ROA not after: Thu 06 Feb 2025 07:16:55 +0000
asID: 137443
IP address blocks: 156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57704 (0xe168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:16:55 2024 GMT
Not After : Feb 6 07:16:55 2025 GMT
Subject: CN=6756996b-3e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:95:75:f9:33:4b:44:11:58:e7:6d:b6:d2:
8d:d3:d9:43:b2:1b:76:95:15:ef:e3:fd:ac:ca:fb:
ce:84:40:10:e4:a7:28:85:b8:ad:c5:5b:f7:6e:7a:
0a:bc:b0:10:a1:0f:9b:9f:e2:bf:e2:db:ce:97:18:
b1:78:c6:fa:49:47:4b:07:27:c3:d6:e0:39:06:b9:
29:d2:6e:dd:d3:98:71:0f:4b:0a:09:58:ad:78:55:
4b:39:42:82:c2:3c:47:04:0b:68:e5:ae:ae:ad:ba:
5b:d7:ec:6e:9e:e1:0a:2d:96:87:52:eb:ad:18:33:
27:c9:39:ec:d0:95:99:c5:f9:d2:c7:49:38:65:88:
a3:fb:fe:12:39:4c:f3:8f:93:9e:e6:4d:f4:21:0b:
ef:8e:35:35:e8:8a:92:ba:56:da:d6:d8:22:46:d4:
b1:a8:1a:8b:1f:6f:70:9c:d5:57:85:bd:83:42:c1:
94:16:08:17:31:d4:6e:d2:3c:31:83:97:3c:94:85:
22:a0:bb:ee:77:b9:50:63:3f:03:db:ce:63:79:da:
d1:eb:4b:7b:5e:6e:f5:bc:d3:02:f3:f7:ad:19:6e:
79:e7:3a:5d:bd:36:dd:5d:2d:53:01:70:92:4e:57:
21:a2:98:61:72:7f:a4:3f:ef:b2:d8:b2:08:0d:1b:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F4:A3:C7:AC:ED:0E:9F:6D:11:6A:AD:AA:7A:0B:59:2A:C4:72:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/944615DEB5FD11EFA51E189F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
25:d6:3d:51:cc:95:e4:21:97:99:e9:8b:30:fc:50:66:7f:52:
da:b2:57:56:17:1b:d8:42:bf:28:48:c3:7c:1a:3e:1b:06:8f:
8c:ff:83:ce:27:49:70:b6:0a:5d:1f:4a:c5:23:78:fd:a0:1a:
33:29:d3:95:26:bf:e2:6d:d3:5e:19:f4:32:41:4f:04:85:b2:
00:b7:23:08:c9:68:3e:e8:70:de:22:c5:80:ed:8d:de:17:40:
e3:40:77:ff:a4:85:fd:77:d3:47:5b:99:da:3d:d5:e6:83:58:
2c:66:08:0f:73:23:6b:a5:58:a9:21:7c:f2:de:bc:64:24:cc:
1e:17:f0:ba:5a:86:3e:68:51:1c:18:b3:58:51:91:a0:0d:ad:
ad:e1:0f:98:d7:8a:0e:21:53:e2:e1:c4:dd:99:32:a5:ab:ad:
48:99:89:d4:ae:11:36:d0:ac:2a:cb:1b:77:f8:27:67:ee:bd:
a5:50:44:0b:f7:35:f3:03:30:18:e5:fb:96:5c:08:d2:c6:62:
bc:e8:8b:a5:8b:af:e1:a9:5d:00:06:b4:ba:8b:d9:1f:1d:a9:
29:63:ce:73:4f:f9:b8:fd:30:f9:13:8c:f7:e8:98:30:2d:65:
d1:5d:69:7b:bf:24:7d:b1:4b:e7:41:af:98:cb:cc:65:32:77:
78:19:f4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:11 2025 by rpki-client