Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E43A12CC35A11EF8FDBA85D762E951A.roa
File: 9E43A12CC35A11EF8FDBA85D762E951A.roa (raw, json)
Hash identifier: 8nuJ3WLp7aivv6f3dg9LYXrfwz4ip7CHKDXOr2ZGGnU=
Subject key identifier: 92:1A:B3:41:83:B5:70:04:7E:71:F1:F6:F9:67:D7:71:72:14:FB:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E43A12CC35A11EF8FDBA85D762E951A.roa
Signing time: Thu 26 Dec 2024 07:25:44 +0000
ROA not before: Thu 26 Dec 2024 07:25:40 +0000
ROA not after: Sun 23 Feb 2025 07:25:40 +0000
asID: 138915
IP address blocks: 156.225.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60509 (0xec5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 07:25:40 2024 GMT
Not After : Feb 23 07:25:40 2025 GMT
Subject: CN=676d04f8-6f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:8f:c0:49:29:f9:4c:7b:bf:28:22:a3:f5:
53:28:03:5f:24:20:2e:93:6b:59:17:a4:17:1c:55:
99:cd:8f:33:91:ce:e3:7c:24:f7:cc:9a:a0:2f:9a:
40:c9:27:45:19:7b:2a:9d:a3:ab:40:ef:b5:72:9d:
7f:13:c7:7e:dc:43:51:bc:b2:04:f8:57:75:a0:34:
f7:4e:5f:e5:db:df:5b:25:e4:8a:2b:e8:57:7a:de:
cb:b3:19:2e:c6:7f:d9:7b:bc:7d:96:88:80:0e:f0:
97:19:fc:8d:d8:d5:1c:5c:bc:31:e2:f5:26:c6:40:
da:5d:7f:b0:99:58:8a:e0:e8:0d:bd:9f:c4:a2:98:
46:57:63:cb:9b:c7:12:30:ad:1f:18:f2:dd:5c:de:
08:89:39:02:3a:54:5e:28:0d:af:31:1f:b6:91:37:
0c:e5:29:99:f3:9c:9c:10:47:ee:7a:22:82:02:61:
a4:d3:58:ec:9b:d5:83:be:cc:16:02:21:de:d5:9d:
a4:e3:70:75:8a:2d:94:d4:72:28:89:d1:10:ed:48:
5d:a8:3b:34:9e:98:b5:b1:10:72:26:05:b1:a6:d9:
ad:43:64:24:76:ae:28:fd:2b:f6:cd:02:6d:bb:f2:
02:99:46:1b:56:ae:93:dc:ff:b7:a6:6a:35:e1:46:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1A:B3:41:83:B5:70:04:7E:71:F1:F6:F9:67:D7:71:72:14:FB:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E43A12CC35A11EF8FDBA85D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.117.0/24
Signature Algorithm: sha256WithRSAEncryption
79:3b:04:95:02:7b:38:f2:e9:76:e5:58:46:e9:20:a4:63:6f:
81:8d:2e:ae:1a:ea:43:13:e4:b1:51:15:2b:c2:81:96:70:5d:
f6:0b:11:39:34:07:bc:c5:b8:be:ce:bc:b4:69:f1:a8:81:42:
fb:e7:dc:c2:2e:d6:04:80:5d:ed:cd:c6:20:14:ac:9d:ec:6e:
27:b9:47:ec:03:32:6a:9c:b6:b9:4b:f8:88:56:db:c9:58:4c:
92:34:15:fd:c8:4c:93:16:95:2b:b6:2b:5f:67:ae:cc:a3:f5:
36:02:f8:21:70:21:69:14:89:25:da:6b:f2:83:35:7c:6c:72:
50:d2:63:4e:3d:b2:5c:4c:05:75:ab:51:14:c8:83:18:af:10:
12:1b:55:94:ad:42:6d:a5:f3:32:f3:f3:4e:ec:41:cf:2c:09:
71:22:53:2c:73:bd:26:ba:10:de:d7:28:d4:4a:f1:f5:8f:26:
ec:5d:c6:2b:d8:3c:dd:11:4a:cb:c6:a2:d1:4b:d3:1f:92:15:
b3:a6:9b:18:4b:e5:4f:0b:9f:ea:5f:9e:e5:6d:80:43:96:8e:
77:69:aa:91:5c:eb:72:39:a5:99:2d:fb:f8:86:14:90:9f:a0:
5e:6f:71:70:c3:da:ff:6d:39:9a:9c:10:fd:47:b2:24:d4:3f:
95:8f:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:04 2025 by rpki-client