Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4AF321ECDAB11EFB26EB778762E951A.roa
File: A4AF321ECDAB11EFB26EB778762E951A.roa (raw, json)
Hash identifier: Dkf+ai3Qm5MB+FkE+sfAgKBw+SVT6GETzdEaSxZfWZ0=
Subject key identifier: E8:03:9A:C5:2B:6C:76:33:E8:15:89:91:BF:1B:F2:AB:39:FD:86:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010155
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4AF321ECDAB11EFB26EB778762E951A.roa
Signing time: Wed 08 Jan 2025 10:30:56 +0000
ROA not before: Wed 08 Jan 2025 10:30:52 +0000
ROA not after: Mon 13 Dec 2027 10:30:52 +0000
asID: 17561
IP address blocks: 156.255.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65877 (0x10155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:30:52 2025 GMT
Not After : Dec 13 10:30:52 2027 GMT
Subject: CN=677e53e0-6220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:6c:31:e0:39:d5:51:da:df:06:12:4e:57:
37:a0:45:40:16:2e:60:28:d8:ac:a2:82:a9:20:b5:
d0:a2:ac:4b:23:f0:ff:80:b3:4f:3a:f7:a7:c5:af:
8f:c6:9b:45:d3:b7:34:2e:9b:01:d9:2d:9e:37:cc:
d2:03:18:8b:bd:b4:76:6f:1b:31:8c:da:c5:07:74:
68:71:5a:18:79:d5:97:ed:db:a0:94:62:b0:79:d1:
68:95:38:4d:1e:c9:a8:61:b8:18:0a:f1:d5:cc:4a:
4c:dc:32:c2:79:19:08:6a:9a:5c:7a:c7:c0:ac:e0:
0b:6f:80:7c:2e:06:8a:ff:c8:20:7a:dd:2b:42:13:
d3:78:eb:bc:3c:79:e7:5e:a4:33:b3:b4:08:0c:c3:
54:06:f7:da:b4:9f:4d:79:71:60:4d:6f:23:01:33:
4a:81:12:57:ba:b7:90:97:e1:4f:86:e5:b2:eb:22:
c2:aa:63:24:d8:9f:41:c0:45:25:2e:62:8d:69:ea:
0f:4c:1b:5c:74:40:20:bb:ba:71:76:b2:59:b1:d8:
27:4d:db:4f:de:d4:ff:a3:6b:48:1a:de:04:83:ed:
93:19:a7:81:06:ca:45:b1:b7:4d:8e:c4:42:cf:f2:
83:d2:62:39:0b:f8:8f:66:3b:f7:0e:d7:08:00:cd:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:03:9A:C5:2B:6C:76:33:E8:15:89:91:BF:1B:F2:AB:39:FD:86:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4AF321ECDAB11EFB26EB778762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f4:55:15:fa:91:2a:04:56:d0:b6:c7:a8:d6:68:d4:6b:ba:
72:f4:35:00:74:4f:c6:67:13:88:38:76:32:35:89:b4:a2:66:
17:d6:0b:e5:9c:18:00:09:bb:6a:df:c7:9d:29:99:82:01:a4:
61:31:0a:6f:a7:4f:7a:8f:a0:4c:37:f4:4d:e2:aa:70:2e:d4:
86:ba:cb:76:93:9a:3a:13:fc:53:e0:8f:4e:ed:17:46:26:86:
21:5f:80:50:61:be:fa:3f:04:c5:c2:c7:8a:43:f9:9c:ab:b6:
45:45:10:7c:a5:9d:d0:2b:0d:c7:4f:81:ff:b5:ba:96:83:f0:
2d:ef:cc:b2:2f:0f:00:5d:dc:57:97:ad:1d:85:2c:7a:cb:3e:
8e:b0:ac:ba:80:79:88:c9:59:05:e9:f1:d6:5c:a1:be:25:9d:
49:6c:53:11:c9:3b:60:a8:cb:bc:3a:db:98:c3:cf:c5:ac:b1:
af:6b:e2:08:6f:44:14:0a:b5:28:83:3a:d5:2a:67:3f:f3:c9:
aa:40:ed:8e:ba:30:39:77:0e:d5:ef:ca:ca:42:5c:a8:ff:47:
21:84:cb:dd:94:30:45:4e:83:7c:c7:64:ec:f1:e9:eb:6c:ac:
0f:ed:dc:55:10:0f:01:a1:a4:62:8e:45:c4:82:fd:74:c2:60:
d4:08:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:24 2025 by rpki-client