Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB6EF7CC32F11EFA9BE7244762E951A.roa
File: 9EB6EF7CC32F11EFA9BE7244762E951A.roa (raw, json)
Hash identifier: /DxiUH8TksPmT/XcR3l/XNfcTq9kawzHuYQuNT5eqZc=
Subject key identifier: FE:F4:F4:3B:49:7A:9E:DB:11:14:0F:C3:80:A7:94:65:6A:7D:57:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EAFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB6EF7CC32F11EFA9BE7244762E951A.roa
Signing time: Thu 26 Dec 2024 02:17:56 +0000
ROA not before: Thu 26 Dec 2024 02:17:53 +0000
ROA not after: Wed 10 Dec 2025 02:17:53 +0000
asID: 984
IP address blocks: 156.243.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60157 (0xeafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:17:53 2024 GMT
Not After : Dec 10 02:17:53 2025 GMT
Subject: CN=676cbcd4-5ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:5f:4b:24:36:93:79:82:68:a3:20:2e:86:
8d:6c:3d:9e:fe:28:0f:6b:59:0b:b5:eb:d0:d9:b8:
02:bb:a4:87:d4:8c:a1:94:80:27:02:00:a8:2c:15:
e5:cb:bc:44:32:13:49:8c:3f:4f:c5:a7:fc:3c:62:
e9:ff:35:b3:f8:e4:a3:bc:a0:a3:df:0a:12:19:47:
bf:35:53:24:ae:59:e5:59:3b:86:87:bd:e1:c7:32:
80:04:a3:2d:1a:66:5e:06:3c:be:b2:ea:2b:84:c4:
d9:66:da:d1:d1:d8:1b:ec:5b:7d:13:31:d3:55:9b:
c9:9d:cd:ab:3d:18:2b:91:c5:ba:e4:91:8d:a5:6b:
1d:68:5d:9f:32:92:12:fc:8f:86:19:82:19:50:6e:
a2:80:ad:d6:d9:3e:15:c2:cb:fe:de:1c:a7:ce:d7:
0b:11:da:61:e6:9b:ff:64:28:75:b9:94:25:fe:51:
5f:06:20:a0:7e:eb:d2:d2:2e:13:62:29:b2:4d:ab:
67:e8:27:f1:51:0a:68:63:93:71:84:48:0d:fb:69:
01:b1:d8:58:a1:34:13:6e:2e:a6:71:b3:01:38:ec:
ef:fc:ca:d0:d2:06:75:8c:db:5c:2b:4e:aa:c4:43:
47:53:6c:01:1c:6b:e1:21:62:24:94:3c:17:48:45:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F4:F4:3B:49:7A:9E:DB:11:14:0F:C3:80:A7:94:65:6A:7D:57:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB6EF7CC32F11EFA9BE7244762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:59:42:94:6a:89:94:7c:7e:94:21:81:ed:74:f9:32:69:85:
ae:d1:97:57:20:af:7d:b7:0e:9b:5d:a5:ef:7b:bb:2c:4d:55:
44:7b:ae:30:c6:39:f6:43:8e:34:46:22:a1:a5:af:e9:f1:65:
14:56:aa:ce:89:1a:11:2b:9c:89:48:e8:02:6e:a7:37:73:65:
7b:dd:b4:1b:5d:b5:5f:e7:b0:5a:3e:31:1b:d6:22:66:dd:0c:
e2:e6:10:e8:1d:ed:84:a8:07:48:24:9c:7f:5d:7e:4a:82:e0:
9a:53:d2:a7:6d:00:91:30:fb:de:db:8a:ed:b2:7e:a1:16:33:
2c:d5:65:ce:f1:a0:61:0b:f3:67:1c:00:6c:71:9b:bb:1d:59:
a2:b0:ff:c2:2e:cd:93:22:9f:fe:26:84:c0:27:5e:f7:19:fe:
86:72:e7:12:ff:14:f3:f1:ad:38:46:2e:66:ad:42:60:8e:93:
58:dc:20:3c:6f:a2:a9:1e:4b:76:71:58:57:d7:bb:e6:0c:47:
ee:24:f5:9b:84:10:48:cd:bc:3b:71:f2:8d:37:8f:80:20:d8:
06:11:bc:7d:50:99:b2:8a:9e:50:c8:78:b9:d4:ef:da:c5:ef:
b9:d3:39:99:fa:92:4c:c9:8d:af:72:6d:e9:b3:c5:98:4b:d8:
5a:d9:46:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:34 2025 by rpki-client