Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97383D6CCCE111EFA77F8F69762E951A.roa
File: 97383D6CCCE111EFA77F8F69762E951A.roa (raw, json)
Hash identifier: fGbG76EeZskrkFPcXtGJ2yLvRQXjzlf/U+7R82fF5wU=
Subject key identifier: E5:44:4B:A2:91:BE:2C:C1:52:EC:EF:B7:BE:F2:40:4F:C0:89:C5:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97383D6CCCE111EFA77F8F69762E951A.roa
Signing time: Tue 07 Jan 2025 10:24:35 +0000
ROA not before: Tue 07 Jan 2025 10:24:31 +0000
ROA not after: Mon 13 Dec 2027 10:24:31 +0000
asID: 17561
IP address blocks: 156.233.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64423 (0xfba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 10:24:31 2025 GMT
Not After : Dec 13 10:24:31 2027 GMT
Subject: CN=677d00e3-e100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:75:77:b3:4a:7b:f7:ef:45:02:dd:3e:40:
30:22:c0:79:79:b0:1b:6d:fd:ac:68:3c:d8:b7:b5:
a9:cb:3e:30:63:0e:a1:88:37:5f:22:29:32:3b:68:
9f:7e:bb:31:01:f8:61:cf:16:8b:b4:d0:35:26:70:
01:0c:aa:b3:d9:84:31:be:6c:89:e2:03:c0:c9:55:
60:89:10:78:fa:8d:6e:fc:48:93:49:34:88:a7:9c:
b4:08:b9:b8:04:32:52:ea:58:ca:04:b4:4c:ac:23:
89:ad:83:44:fa:83:c1:fb:ce:e3:03:03:81:44:7e:
19:0a:9d:47:a2:1a:34:40:d4:ae:e5:99:45:78:28:
7e:0b:a5:58:77:09:11:ad:b1:3e:63:63:90:a0:17:
f1:02:45:84:a5:c9:de:d3:b9:70:28:97:e9:ec:60:
75:ea:80:69:39:05:e3:a6:6c:57:7a:cd:63:ba:eb:
39:4b:9f:4a:56:df:a0:67:e7:74:10:7e:4f:55:39:
81:83:9f:4e:5a:18:76:6d:4d:3e:51:ab:3a:05:51:
ca:fb:a3:13:c6:57:4a:b6:60:24:3a:6b:54:36:4c:
25:3e:e0:d1:e5:31:a5:51:97:8e:5e:e6:81:47:f9:
6c:5a:c0:94:5a:ad:aa:49:2e:24:22:2b:31:40:67:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:44:4B:A2:91:BE:2C:C1:52:EC:EF:B7:BE:F2:40:4F:C0:89:C5:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97383D6CCCE111EFA77F8F69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.232.0/24
Signature Algorithm: sha256WithRSAEncryption
af:b3:d8:f7:6f:1f:94:0a:18:0a:2a:5d:ae:68:1f:72:f2:01:
ca:20:f9:fd:eb:d3:20:4d:d5:85:e5:32:a9:d8:52:f5:6c:5d:
04:4e:48:c9:7d:c4:32:e1:d1:2d:03:d8:84:14:d4:8d:29:25:
13:07:33:ff:41:82:10:1b:99:23:10:70:f2:a4:98:ce:69:0a:
4b:9a:06:e9:84:2b:69:b1:b1:2c:2c:4e:99:61:c7:d5:16:12:
ad:fb:da:4e:cc:14:72:fc:69:0b:4c:14:ea:57:4f:51:c7:e1:
bb:de:90:1c:03:4c:39:60:a1:9d:cb:1c:95:f6:c9:61:8e:7f:
67:13:5f:2f:e5:c1:58:20:c3:02:35:42:05:95:b2:0b:29:b9:
ce:73:05:70:13:04:53:01:aa:a1:c6:be:da:01:22:57:35:5e:
8d:e6:a1:ca:be:25:bd:07:8d:12:f1:33:89:40:d3:53:8d:17:
7f:c2:c2:ab:10:2b:89:f2:8e:c1:3c:10:12:97:35:7b:83:df:
9d:41:a7:19:b2:0d:cb:c1:c5:9d:52:ab:80:22:d8:85:25:ac:
5b:d8:c6:5b:87:0b:30:ed:92:01:fc:1f:6a:2c:c5:5e:9e:d9:
c9:5e:cd:c8:9b:32:08:ab:bf:1c:13:c3:42:c7:ac:f2:56:39:
a4:fa:80:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:54 2025 by rpki-client