Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A8E835EC33111EFA21DC553762E951A.roa
File: 9A8E835EC33111EFA21DC553762E951A.roa (raw, json)
Hash identifier: Md2ID8aUE/JD4z0LFtRjtGNIehMRSG1IZluvgKWwK2s=
Subject key identifier: 4D:F8:40:8A:F7:BE:E7:49:BE:89:F7:65:BF:BF:F0:34:64:DE:8D:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A8E835EC33111EFA21DC553762E951A.roa
Signing time: Thu 26 Dec 2024 02:32:08 +0000
ROA not before: Thu 26 Dec 2024 02:32:05 +0000
ROA not after: Fri 10 Dec 2027 02:32:05 +0000
asID: 17561
IP address blocks: 156.244.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60181 (0xeb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:32:05 2024 GMT
Not After : Dec 10 02:32:05 2027 GMT
Subject: CN=676cc028-c628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:0d:9b:77:14:07:d7:ba:75:f7:8b:c3:68:6d:
e2:fe:63:b5:b2:29:b7:0e:71:dd:48:16:c7:2b:aa:
54:b2:2e:0d:02:9f:91:03:86:d3:33:e2:18:f2:21:
36:39:f9:8c:6d:42:76:7c:45:37:09:0c:66:05:09:
f3:da:f7:05:bc:c3:f3:62:85:bd:e3:4d:28:7b:bd:
0a:f9:eb:f4:a6:97:13:0d:ab:67:3d:6d:bb:4b:0c:
82:48:11:4c:c3:ac:72:40:43:c1:07:0e:4c:10:22:
9c:c5:c0:db:b0:dd:17:13:0a:6d:38:ea:f5:84:96:
ac:68:0a:13:33:ec:89:53:6b:a4:73:23:5e:40:65:
fd:cf:70:f1:c3:7c:be:84:30:0b:fa:5a:3f:7e:f3:
b4:41:2a:b0:3e:48:2f:95:ff:7d:19:d4:af:c5:97:
3b:89:80:d4:87:d4:0b:e7:fa:6b:cd:e2:4e:66:b1:
74:8a:8c:61:5f:4c:3d:a6:86:65:8b:6a:15:bb:c9:
ef:7c:e2:fe:f9:6a:89:8a:ec:4b:63:d5:d7:bc:73:
e1:c8:96:7c:6b:19:59:46:22:48:31:e8:b4:5d:e7:
4e:89:1e:af:61:02:a8:25:49:43:45:ca:6e:f2:cc:
94:eb:57:87:d0:f2:6a:31:b4:96:46:89:d9:4d:df:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F8:40:8A:F7:BE:E7:49:BE:89:F7:65:BF:BF:F0:34:64:DE:8D:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A8E835EC33111EFA21DC553762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.133.0/24
Signature Algorithm: sha256WithRSAEncryption
78:61:a0:48:26:fe:e0:1c:01:8c:03:cf:67:8f:ed:88:5c:91:
a8:23:cf:b0:bb:a9:da:11:de:4f:30:92:15:23:fb:52:e5:04:
f8:97:2a:da:a0:ff:98:14:a6:93:3a:e3:de:7c:9c:fa:d9:20:
1c:21:aa:92:92:1a:e7:41:45:69:05:16:fe:77:a2:40:63:24:
47:c5:ab:54:f4:e8:77:7b:77:1f:ab:08:96:3c:2b:d9:e4:fb:
2d:40:b5:52:15:97:15:26:bb:c0:b4:4d:b3:68:7f:ba:f7:f0:
3e:33:91:8f:cb:95:c3:55:2d:8d:2f:47:8f:13:42:c4:8e:90:
3f:20:eb:7c:92:b9:7f:93:77:1e:c7:a0:13:13:c1:df:79:41:
34:8c:d2:b3:17:80:46:0a:54:5e:d8:5e:08:3b:67:95:c7:18:
8b:f9:a6:62:86:60:21:eb:c3:36:bc:f5:32:3f:5d:14:d3:28:
00:c5:2d:32:e8:e6:fd:b5:35:8f:ea:4c:d5:78:a2:fb:4f:2b:
df:5e:d1:c5:16:89:21:7d:55:38:6f:fa:65:e3:11:e2:74:9d:
93:41:c3:21:45:25:a3:57:fe:c7:7f:b7:61:26:18:26:cf:c9:
2d:d2:3a:90:b4:5e:df:b4:fa:6a:c0:7c:01:9d:da:fd:e7:63:
70:21:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:30 2025 by rpki-client