Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98019E70BFA111EF8C4B15BB762E951A.roa
File: 98019E70BFA111EF8C4B15BB762E951A.roa (raw, json)
Hash identifier: jVVh4nFDCrRGg6UtneRNgsPa7ZjJA846PGnrDldxKEc=
Subject key identifier: 35:DC:48:9B:48:2B:F1:70:B1:02:B6:BB:FC:2A:0E:E3:4B:9D:5C:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98019E70BFA111EF8C4B15BB762E951A.roa
Signing time: Sat 21 Dec 2024 13:43:43 +0000
ROA not before: Sat 21 Dec 2024 13:43:40 +0000
ROA not after: Sun 16 Aug 2026 13:43:40 +0000
asID: 142132
IP address blocks: 156.230.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59352 (0xe7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:43:40 2024 GMT
Not After : Aug 16 13:43:40 2026 GMT
Subject: CN=6766c60f-883a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:88:dc:74:62:ef:a5:f2:61:6b:15:4c:ef:
04:b0:38:fd:5d:a6:98:eb:4e:4b:8c:ce:9a:95:16:
24:89:5c:75:d3:9a:d0:d7:85:49:61:06:8f:c3:44:
4b:2a:7e:0c:0c:e8:dc:9a:e4:af:1f:78:fb:92:6e:
d7:47:4d:6e:2b:5f:8b:28:f3:04:c2:81:d7:92:3b:
06:4f:67:81:de:8d:22:ae:50:75:f4:79:a1:97:28:
cf:56:f3:90:2f:4c:78:e4:63:29:0b:00:12:9a:09:
7b:da:a4:aa:1e:96:9d:ed:39:8e:bd:16:35:b1:ce:
a5:5f:38:bc:04:cd:98:ad:48:82:d6:c5:82:06:dc:
fd:ca:a0:e7:6a:51:7d:d5:01:b8:a4:54:c6:c5:79:
10:4e:79:c9:1f:40:46:83:d6:ed:c9:52:1c:f6:b1:
05:74:c4:cb:54:35:de:b9:96:aa:f6:0b:27:0d:e2:
82:fa:88:3f:e5:bc:d6:88:16:c6:09:68:fa:67:35:
9f:76:df:ae:eb:39:90:44:a8:c6:f5:ca:c6:d9:98:
f7:08:52:6d:66:6f:17:af:29:fc:02:ed:3e:9e:ce:
53:d8:e1:49:8b:ed:49:43:8f:ad:bc:36:2b:11:57:
af:88:ed:c7:c7:c7:eb:5c:c1:88:51:40:c3:fd:c5:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:48:9B:48:2B:F1:70:B1:02:B6:BB:FC:2A:0E:E3:4B:9D:5C:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98019E70BFA111EF8C4B15BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.12.0/23
Signature Algorithm: sha256WithRSAEncryption
09:dc:a8:07:4b:b7:c3:f6:fc:e8:68:4c:0f:32:85:86:f9:d4:
66:dc:29:fb:de:50:24:e9:d8:43:5b:a2:30:35:a3:08:78:21:
c1:f7:50:63:16:6c:00:2a:3f:c6:f0:86:45:ad:90:e3:3a:9d:
64:bd:bc:c2:36:bb:84:80:01:fa:49:c5:bd:18:b5:d5:9c:72:
8f:da:2e:b8:e2:65:a3:26:f1:9f:05:62:34:a0:70:87:bf:b2:
2b:b4:e3:8d:35:2b:28:79:28:32:36:32:8d:20:1d:9d:ea:d5:
61:56:2c:3d:a7:62:49:93:62:c2:d2:c7:ab:29:ea:42:30:f1:
7a:41:56:74:33:0b:0b:ce:a6:f2:6a:76:45:aa:a6:bc:33:d7:
84:eb:63:75:6b:5c:b0:65:f1:af:ce:4e:e8:1f:cb:e6:30:ab:
42:b5:b1:86:09:4d:18:e4:b5:aa:7b:9d:4d:02:54:1e:b7:c8:
0d:03:d4:e2:66:52:2d:e5:df:f7:87:77:e2:6f:12:33:ee:33:
39:3e:11:61:87:b3:fe:09:ba:a1:86:2f:a6:8e:b3:0b:77:03:
7f:53:6f:c8:eb:ba:ac:1a:42:06:2d:91:b8:ea:04:a7:00:d1:
60:96:f9:71:e5:65:cf:03:8a:7b:42:d1:0f:70:2f:23:6b:bf:
a8:c9:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:21 2025 by rpki-client