Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A248CA2CD2F011EF9F48EA65762E951A.roa
File: A248CA2CD2F011EF9F48EA65762E951A.roa (raw, json)
Hash identifier: lBPZu1k0AQr6acxM5RBHuv9i5rg6NfoSkkiAmRvSLxM=
Subject key identifier: 77:F3:77:44:3A:9A:7F:7C:A2:F6:7F:5C:26:04:2F:F9:02:F3:C8:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01077D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A248CA2CD2F011EF9F48EA65762E951A.roa
Signing time: Wed 15 Jan 2025 03:27:23 +0000
ROA not before: Wed 15 Jan 2025 03:27:19 +0000
ROA not after: Sat 03 Jan 2026 03:27:19 +0000
asID: 984
IP address blocks: 156.241.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67453 (0x1077d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 03:27:19 2025 GMT
Not After : Jan 3 03:27:19 2026 GMT
Subject: CN=67872b1b-fccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:f4:3c:4c:6d:c3:65:09:c4:1f:90:51:0e:
45:44:4f:b8:5c:f5:c2:6e:2f:0d:13:91:ee:72:3b:
f0:09:96:b8:93:b0:af:b1:9e:a3:3a:a0:8d:c0:1d:
23:73:73:6d:f7:2b:63:71:fa:90:e3:4f:5c:40:1a:
13:b4:7a:fd:f1:50:63:b1:3b:19:77:dd:92:26:be:
e9:d4:3c:8e:a3:1e:21:70:2a:b5:d5:9e:38:82:48:
22:08:98:dc:27:8c:68:20:58:7b:5f:d1:0d:3e:d0:
89:71:8c:ec:05:54:a5:65:75:b7:88:ac:2e:7b:a8:
14:98:cf:30:86:42:65:6a:1a:07:b6:5f:dd:6c:f7:
36:4a:77:64:9b:1f:42:84:64:d1:3c:78:c5:f5:42:
08:7f:95:04:0c:4d:49:44:21:04:96:f2:85:11:c9:
23:b7:0d:8f:9c:df:eb:d6:5d:fa:8e:a5:10:56:37:
dd:5a:29:eb:3f:f0:57:ef:a3:d0:ad:27:ad:ba:be:
ec:80:fe:e4:c4:6e:71:a3:74:47:93:a0:e3:df:3a:
81:ff:02:a3:36:c4:25:62:67:57:b3:35:d7:51:0e:
c2:d9:3c:c2:7b:40:d5:2d:2a:bb:a4:8f:58:30:81:
32:1e:e1:10:5f:39:b4:8c:0b:b9:82:de:6c:f9:52:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F3:77:44:3A:9A:7F:7C:A2:F6:7F:5C:26:04:2F:F9:02:F3:C8:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A248CA2CD2F011EF9F48EA65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.245.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ce:4f:35:72:9c:35:94:94:e2:8d:b4:71:b4:dd:bb:ee:12:
4d:16:d1:a3:45:94:91:82:79:1d:de:24:81:0f:4e:a8:68:f9:
57:38:48:35:24:29:b1:c1:68:6a:6b:05:cd:95:cd:20:d9:af:
db:f3:78:21:77:02:e8:63:01:6c:de:a8:ac:41:72:89:2f:8a:
9a:d7:f6:1c:00:67:7d:c0:52:06:42:7d:ef:ef:9e:58:ba:6a:
c1:34:32:38:b0:09:70:a3:ac:96:c1:08:c1:e0:97:c9:42:70:
43:7d:c1:8d:be:20:5c:54:e8:78:60:77:2b:b4:80:02:72:18:
df:37:6e:f5:5c:73:35:90:3b:9c:bf:da:d3:9d:3e:75:46:0f:
96:90:e2:72:a6:f5:c5:08:3a:47:fe:f3:4e:c8:9a:7e:c6:4c:
85:9a:48:4f:76:88:4d:fe:a3:7b:29:19:c9:08:5c:16:3e:f6:
9e:32:a6:98:f1:81:f9:a6:30:bc:e3:f7:3f:d2:76:5a:41:dc:
41:d8:a9:df:56:ed:8d:f2:86:ad:0a:76:87:58:a6:4e:f2:fe:
69:b1:19:7c:f4:df:f1:7c:0b:6e:76:2f:e9:31:af:69:1d:6a:
c4:a1:60:86:18:52:16:d3:48:be:1f:66:37:a7:96:f2:bc:7f:
60:c8:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:55 2025 by rpki-client