Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A633C574C32811EF9E25E690762E951A.roa
File: A633C574C32811EF9E25E690762E951A.roa (raw, json)
Hash identifier: In7g1zp+SqtSne33W558dohFQxyf8jWLZUm59Gg7O8U=
Subject key identifier: 65:26:92:2A:25:F9:42:19:B4:B4:E0:93:C9:B7:E4:DB:97:6F:B5:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EAA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A633C574C32811EF9E25E690762E951A.roa
Signing time: Thu 26 Dec 2024 01:28:03 +0000
ROA not before: Thu 26 Dec 2024 01:27:59 +0000
ROA not after: Fri 10 Dec 2027 01:27:59 +0000
asID: 17561
IP address blocks: 156.243.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60073 (0xeaa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:27:59 2024 GMT
Not After : Dec 10 01:27:59 2027 GMT
Subject: CN=676cb123-f498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:d8:74:ea:39:e2:c7:a9:ea:a2:85:72:81:
86:8a:1c:eb:e5:71:ac:1d:c3:63:93:eb:9b:12:e2:
84:ca:c4:92:e4:d9:ce:1e:eb:32:94:c5:60:9b:8e:
8f:5b:7b:90:c6:c4:6d:eb:41:17:15:43:be:95:9c:
88:ab:af:71:ea:b4:7c:c9:d1:82:7b:d3:53:28:16:
25:98:cc:91:1f:c3:c8:76:9b:0c:81:68:53:b8:d0:
95:31:63:f1:36:4f:dd:85:6b:da:ad:2f:3a:1b:29:
b7:70:4e:63:96:66:1a:ef:b6:97:63:39:68:50:c4:
bf:eb:2d:1f:03:71:fa:49:68:d5:35:2c:f3:7e:43:
ec:ab:35:54:0b:db:2e:ae:46:74:39:a9:72:84:93:
6f:e8:13:ac:a5:a0:72:84:95:c4:66:fd:61:63:4c:
2b:66:0a:6c:44:ee:22:98:82:cf:49:d8:17:f1:e7:
11:df:e1:24:d5:bd:8f:86:9d:d6:c7:b9:a1:60:02:
ef:ab:10:46:fe:10:7c:cb:dc:e5:9d:1f:8c:51:61:
c4:f7:a1:40:27:64:81:6a:cc:97:b4:80:64:fb:10:
c3:4f:84:b1:d9:3f:81:89:6d:b9:44:9d:c8:ec:7d:
36:53:b1:8d:7c:c5:88:ca:bc:cf:85:ce:e8:41:0b:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:26:92:2A:25:F9:42:19:B4:B4:E0:93:C9:B7:E4:DB:97:6F:B5:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A633C574C32811EF9E25E690762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.148.0/24
Signature Algorithm: sha256WithRSAEncryption
73:69:ac:ce:bc:c2:3a:5e:61:32:d2:57:14:1b:a6:a7:e9:2f:
98:a5:d3:4d:6f:86:19:75:19:75:b1:0b:e6:c3:4e:6f:8a:06:
ad:fe:d3:d8:f0:8c:c3:fc:ff:c8:43:5f:9b:7c:51:05:73:27:
05:2e:7c:8e:32:d1:7f:23:e1:00:e8:ac:7d:b9:f5:85:d5:7f:
28:89:4e:6f:de:31:07:a3:a9:36:f9:b5:43:d9:8d:1f:20:8d:
00:c3:8d:a9:0a:32:4c:eb:99:03:c6:7c:0d:b4:19:43:62:f8:
67:d5:6f:cc:31:bc:1b:24:00:5e:4b:3a:0f:f2:81:4c:57:d8:
65:75:af:c7:ea:f8:f0:76:a3:97:ef:01:4e:a9:27:57:0d:e1:
5c:bd:b6:9c:3f:93:d8:68:dd:28:45:cb:3d:69:71:65:9b:07:
b0:a9:43:1d:e9:56:ff:2b:6d:95:ec:96:f4:d0:06:49:6d:34:
a0:19:a7:5c:57:45:1b:f9:c0:0f:4a:17:51:28:f2:37:fa:a6:
a0:28:7a:53:a7:8d:58:96:af:eb:33:cd:69:e5:e5:c2:42:a2:
68:2b:15:88:e7:35:3b:7d:0b:9e:25:21:1e:69:20:68:02:d9:
c0:e9:75:b7:65:25:34:f2:c2:53:30:0b:c8:b2:8a:f8:68:04:
48:e1:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:44 2025 by rpki-client