Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96064AE8CD7611EF8DB186AA762E951A.roa
File: 96064AE8CD7611EF8DB186AA762E951A.roa (raw, json)
Hash identifier: S6pgJCatS3eXXyde67cJJu+rzcZTc8aCfvFhrSmjQPo=
Subject key identifier: 66:99:E1:EA:84:8F:49:49:C0:85:9A:15:44:ED:78:BA:4F:0B:EC:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96064AE8CD7611EF8DB186AA762E951A.roa
Signing time: Wed 08 Jan 2025 04:11:08 +0000
ROA not before: Wed 08 Jan 2025 04:11:04 +0000
ROA not after: Mon 13 Dec 2027 04:11:04 +0000
asID: 17561
IP address blocks: 156.250.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65461 (0xffb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 04:11:04 2025 GMT
Not After : Dec 13 04:11:04 2027 GMT
Subject: CN=677dfadc-7166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:74:e6:be:19:81:43:5d:e3:44:e7:92:49:
ea:c1:ad:7d:21:63:b5:27:84:35:d5:ec:13:c7:af:
90:7d:5f:a9:55:f2:0f:cd:55:58:24:a3:28:c3:0a:
28:87:4c:58:4a:c6:34:ff:21:f4:ff:68:1c:5d:96:
0f:5f:59:bd:1e:20:1a:4b:bb:56:ce:04:a9:e8:3b:
fc:d1:aa:3c:09:da:b0:0a:76:b0:ee:f6:6f:3d:15:
c2:a2:c7:7c:d1:83:9f:a1:cb:aa:96:fa:02:17:23:
96:f7:c0:05:87:a1:12:b2:58:c2:6b:1d:a6:18:12:
29:48:91:dd:13:78:2e:97:74:79:af:4d:02:3c:c7:
9f:83:0a:8a:d5:1a:56:05:3c:f7:7e:b5:0d:eb:3c:
53:a9:dd:76:c8:d5:8d:75:22:a6:ac:80:44:48:af:
ef:82:58:70:b2:87:44:c8:a1:74:71:44:5f:2c:a9:
73:e7:60:4b:4a:89:21:1b:bb:e6:78:46:55:87:dd:
d7:a9:44:98:ca:1f:ba:0f:b2:c1:e0:b0:8e:4e:be:
fc:e3:60:fc:d4:7a:24:26:67:06:94:3a:e5:e3:da:
03:b7:5a:54:7a:a6:59:22:59:67:31:97:6b:18:c2:
be:2f:0d:91:2a:31:6b:fe:22:76:80:83:9f:a0:a7:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:99:E1:EA:84:8F:49:49:C0:85:9A:15:44:ED:78:BA:4F:0B:EC:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96064AE8CD7611EF8DB186AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.0.0/24
Signature Algorithm: sha256WithRSAEncryption
32:40:80:ce:c5:e2:4e:0b:fd:ae:76:e6:02:b9:04:70:a0:99:
14:34:c0:a1:63:b6:51:05:66:f0:3c:8b:29:e0:77:e9:45:1c:
3e:74:4c:75:86:6f:40:59:ba:c3:e9:0a:6a:4b:1b:a7:06:1f:
03:51:5a:6e:9a:58:e1:1a:f1:2a:40:bf:a5:ec:3c:95:72:09:
89:ed:c9:93:88:70:5a:c1:7a:0c:c8:5a:b0:3e:e7:fb:75:0e:
ee:c3:96:1c:07:94:e5:37:32:9e:d0:2b:0f:41:41:7f:24:d1:
34:cf:ba:2b:50:02:71:bd:f0:77:c7:2d:97:68:a6:c8:bf:40:
ce:e5:26:f1:52:37:e6:8f:d6:9c:07:77:58:bc:23:6b:64:f5:
8e:2e:07:8e:71:e9:5f:b5:70:77:53:2b:5a:ad:d3:c2:a2:7b:
bb:f4:48:fd:80:81:e3:e5:79:03:eb:26:2f:0f:36:3b:a8:fb:
7c:22:be:cf:7b:4b:03:cd:78:23:63:f3:66:02:54:a3:ac:f9:
ae:cd:c3:7a:fe:e8:42:93:95:70:06:9e:02:f0:ca:2a:ab:ae:
58:a3:d7:66:59:9b:94:fa:de:34:d4:ec:7f:7d:cc:f1:86:89:
07:5c:20:df:a4:f9:7b:92:8a:43:89:c5:21:18:b6:88:1e:1f:
70:56:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:11 2025 by rpki-client