Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E26D334CE4B11EF9701857A762E951A.roa
File: 9E26D334CE4B11EF9701857A762E951A.roa (raw, json)
Hash identifier: ArY0W54v2M9dv9t722sjguDlGmBodmyOT+QEPF3F2g0=
Subject key identifier: 04:42:E0:0D:8C:D9:C8:3B:09:B1:11:F4:45:1E:0F:7E:60:9E:95:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E26D334CE4B11EF9701857A762E951A.roa
Signing time: Thu 09 Jan 2025 05:36:04 +0000
ROA not before: Thu 09 Jan 2025 05:36:00 +0000
ROA not after: Fri 09 Jan 2026 05:36:00 +0000
asID: 17561
IP address blocks: 156.238.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66239 (0x102bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 05:36:00 2025 GMT
Not After : Jan 9 05:36:00 2026 GMT
Subject: CN=677f6044-49c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:9f:5d:8c:2a:1b:a6:33:64:e1:52:3c:e7:
5d:f5:24:dc:61:f6:2f:94:00:51:16:9e:14:68:a0:
39:f4:54:70:79:53:68:e4:2f:cd:eb:f7:b3:6d:c9:
8e:59:61:01:71:e4:62:3a:1d:9d:7a:4a:d1:2d:6e:
75:3e:b2:fd:eb:06:37:79:32:3b:cd:bb:ac:5b:77:
82:a2:9b:1a:d3:cc:f2:55:14:3f:50:bc:a7:2c:19:
9b:bd:3f:54:4f:9b:8c:32:f5:4b:3e:9d:bd:fb:cc:
9a:f8:b0:6e:49:e1:0b:35:be:e8:02:e6:8b:73:5f:
40:33:61:c8:0d:64:c3:62:a3:ba:fd:3e:3e:8e:c1:
eb:38:41:77:7c:77:d0:f0:71:eb:c4:38:59:75:01:
0a:f5:27:fc:9c:70:53:ad:93:d8:e4:06:22:de:ea:
41:1a:54:c9:95:0a:f7:e6:24:7d:c3:92:1e:14:ef:
b3:c6:28:51:d1:dd:8c:ff:7d:ea:7b:40:9f:5c:d9:
6d:0d:59:5d:6d:66:ed:dc:63:8a:c6:43:7a:8f:9b:
cc:96:c0:14:3f:07:e7:d7:d5:65:17:2b:ac:40:8f:
8b:eb:84:9b:85:c2:02:16:3b:99:e3:87:df:d6:75:
bd:23:82:81:e6:6b:bc:b5:7c:37:77:50:90:68:b9:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:42:E0:0D:8C:D9:C8:3B:09:B1:11:F4:45:1E:0F:7E:60:9E:95:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E26D334CE4B11EF9701857A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.51.0/24
Signature Algorithm: sha256WithRSAEncryption
46:22:b6:d4:5b:a5:e8:3e:47:b0:fb:4f:be:ff:da:34:3a:bd:
da:4c:70:a0:e0:07:4d:75:ca:a8:9e:a2:62:d8:9a:e9:53:d3:
df:9d:b3:81:67:2e:79:be:86:60:df:59:fc:93:a9:09:75:85:
1e:23:a3:cb:2f:93:2b:c5:e4:ee:67:2a:62:fc:37:3c:2e:96:
6e:63:81:b5:1f:23:37:02:16:0a:da:54:d4:40:52:25:e4:7b:
ba:6a:3f:85:d7:b2:31:4d:2b:af:52:dc:37:68:79:72:d2:1b:
7d:5d:09:10:6a:23:9f:40:05:ea:6f:ca:5d:2d:a1:65:1e:4a:
4a:b1:5c:e4:85:be:4d:f3:2a:eb:43:3b:cb:12:83:d5:a9:68:
72:6b:a6:b1:a6:a2:f1:e2:f7:61:ce:2b:46:9f:1c:5a:75:9b:
c5:f9:d1:79:66:9c:2f:b7:e3:bd:2c:54:8b:b7:b0:6f:e9:5c:
88:3c:24:a8:22:d8:d1:ba:3b:ca:af:16:ed:3f:3c:ae:5f:d9:
5c:99:d1:3c:f2:64:94:d2:f6:c1:5f:26:62:5f:67:23:04:4c:
0a:b8:2a:5b:c7:45:1c:f8:04:b1:68:01:9c:50:bf:5a:b2:f8:
a0:25:90:53:a1:46:83:2b:16:93:c3:5d:9f:82:d8:a5:40:7e:
c4:25:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:29 2025 by rpki-client