Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D33145ECD7111EF8221628B762E951A.roa
File: 9D33145ECD7111EF8221628B762E951A.roa (raw, json)
Hash identifier: Iiam1AzY7JL1JurveeHqauckwiQ8FO1WZzb6BghY8/A=
Subject key identifier: 47:8D:E1:BE:6C:A2:F1:9E:B2:D1:04:FC:24:82:C9:09:56:79:FD:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D33145ECD7111EF8221628B762E951A.roa
Signing time: Wed 08 Jan 2025 03:35:32 +0000
ROA not before: Wed 08 Jan 2025 03:35:29 +0000
ROA not after: Mon 13 Dec 2027 03:35:29 +0000
asID: 17561
IP address blocks: 156.248.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65423 (0xff8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:35:29 2025 GMT
Not After : Dec 13 03:35:29 2027 GMT
Subject: CN=677df284-6069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:18:f6:c3:0b:48:51:60:65:f8:5a:68:21:
b2:a9:15:cc:7a:32:fd:12:a5:b2:df:f5:88:41:db:
dd:02:34:49:18:84:a2:10:4d:b6:ae:a7:4d:4e:90:
b5:ca:1f:c3:77:47:85:ef:e3:8a:e6:e4:a2:29:f7:
d2:76:f8:f7:5d:cf:47:21:27:06:d2:7c:81:28:fd:
9e:87:5d:c6:7e:4d:96:7a:90:7c:ec:20:23:51:76:
f7:39:26:64:9d:09:8f:d3:49:d2:79:17:6b:2c:75:
16:93:3e:56:6b:4d:75:bc:df:a4:41:79:1b:bf:ed:
70:c5:b8:e9:b2:9a:46:4e:0e:7e:95:22:c8:63:22:
6c:18:ea:76:38:a2:c7:f8:fd:b3:3d:69:45:c9:79:
32:a5:d3:f5:4e:c0:f2:ff:18:e3:20:4a:a6:34:b5:
bc:9e:c5:78:91:cd:7f:b0:23:d6:8b:82:a3:4d:d5:
ff:3f:44:69:12:d8:91:fd:c0:20:db:6f:04:fb:9c:
40:60:c7:6d:cb:d7:a6:13:9a:f3:e9:22:86:5b:4c:
07:65:62:00:1f:5d:6b:ec:2a:4e:63:7e:6c:87:6f:
f3:70:a7:cf:dc:e2:67:40:46:62:44:80:59:e7:86:
6f:4b:6a:0e:11:6d:9a:35:8d:e6:86:70:c1:e8:7a:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:E1:BE:6C:A2:F1:9E:B2:D1:04:FC:24:82:C9:09:56:79:FD:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D33145ECD7111EF8221628B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.65.0/24
Signature Algorithm: sha256WithRSAEncryption
02:40:75:ce:7c:9f:e8:cb:a6:58:b5:10:6d:35:9b:ad:0e:41:
75:e1:ef:c0:31:ce:c0:b5:f5:7f:c7:13:05:55:75:18:06:91:
22:15:87:a3:d7:0b:57:a8:6d:b2:21:e9:7f:5d:9d:b0:07:ae:
45:f1:19:05:ff:b9:ca:b7:fb:41:26:29:47:5d:fe:74:c5:ca:
6f:b5:34:23:09:48:b0:c6:80:15:1d:8a:1a:0e:64:a1:0d:21:
3c:4f:b1:07:1e:a9:1a:0d:28:0f:55:56:5a:e7:98:2c:19:3a:
cb:36:3e:98:4a:1f:e9:b1:0d:94:af:cc:fc:8a:79:77:01:fc:
8d:14:98:07:ff:7c:eb:e9:24:3e:4f:0a:4d:e9:6b:f2:f3:02:
bf:5f:93:0c:2c:47:e0:91:aa:13:a4:e4:cf:ce:b6:3d:db:25:
5b:2b:7c:41:f1:8b:f8:d5:2a:d4:10:e9:9e:f0:0f:96:86:a1:
c0:ff:1e:cf:f6:d5:b7:c9:35:f2:90:5c:3d:67:70:ab:eb:0a:
7e:d8:ac:59:4d:13:40:c4:1c:ce:09:f2:d0:c4:1e:70:1d:f1:
1a:ac:9d:1a:93:92:ad:a8:e4:dd:2f:e5:fb:bf:52:e7:8a:83:
4b:2a:d1:15:63:b1:ea:9f:2b:ab:d5:7c:22:69:88:fe:02:2d:
81:af:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:40 2025 by rpki-client