Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7FD8A48CCC911EF8B11D952762E951A.roa
File: A7FD8A48CCC911EF8B11D952762E951A.roa (raw, json)
Hash identifier: DQU3/GjcdM6iYYVTnPlEJoYdDgF0QyW9U56UjREjS6s=
Subject key identifier: F4:0D:25:A6:87:8C:46:A6:11:FC:F3:95:5A:F6:4F:DA:BC:09:DB:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7FD8A48CCC911EF8B11D952762E951A.roa
Signing time: Tue 07 Jan 2025 07:33:15 +0000
ROA not before: Tue 07 Jan 2025 07:33:11 +0000
ROA not after: Sat 13 Dec 2025 07:33:11 +0000
asID: 984
IP address blocks: 156.233.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64110 (0xfa6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 07:33:11 2025 GMT
Not After : Dec 13 07:33:11 2025 GMT
Subject: CN=677cd8bb-9a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:91:d2:58:0f:b2:4e:73:c9:69:53:0f:9e:
98:26:8e:ba:26:b5:fa:b5:61:29:2d:c4:22:d2:29:
b0:51:01:92:9d:b4:1e:c3:e0:37:43:e6:e8:13:83:
37:db:a8:fe:06:e9:5f:ce:2d:c5:92:57:46:cd:b7:
6d:01:22:a2:f7:29:5f:91:5c:ac:e1:47:ae:02:6b:
5a:e2:bf:ef:8b:9e:1b:e9:e4:31:f4:23:ec:72:4e:
19:fe:07:18:9f:c5:f0:34:13:46:c8:6f:18:5b:5a:
d7:93:ea:c0:53:e5:39:9f:f4:39:ab:ec:3f:71:97:
f5:2b:51:92:f3:28:33:1a:20:92:cf:d7:16:cf:d7:
2f:1b:5e:63:4f:7a:d9:33:e2:a7:c5:de:21:b9:55:
6e:18:8f:c7:0e:52:8e:a0:5c:4d:2d:68:8f:1b:21:
94:69:b6:23:c7:b7:01:e4:03:c0:37:dc:b8:1d:ea:
94:5b:71:2d:a8:c5:2c:88:37:b9:1f:e1:f5:80:02:
6f:1e:64:3e:cf:7c:76:5e:3f:13:c8:54:a2:ce:6d:
fb:fd:2c:cb:a9:90:5f:24:75:a0:1d:50:77:b9:db:
be:dc:87:96:94:ef:47:03:b9:de:e2:82:04:32:31:
0e:7e:82:24:f2:e9:63:02:e3:dc:bc:be:73:7c:71:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0D:25:A6:87:8C:46:A6:11:FC:F3:95:5A:F6:4F:DA:BC:09:DB:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7FD8A48CCC911EF8B11D952762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.82.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:84:c2:a6:43:4a:bc:77:b8:69:08:3d:cf:ca:a7:12:22:1d:
2c:84:1a:55:b0:b2:da:9c:6d:25:e3:06:c1:38:27:d0:b7:db:
89:23:ee:35:d7:a4:b1:49:b1:fb:75:dc:14:88:dd:eb:2e:f2:
fb:cf:59:cd:70:75:c8:a4:73:54:16:4b:46:c3:7c:19:81:9e:
9d:a9:d6:d8:86:09:2f:1a:ca:6e:46:11:54:c4:be:fc:a8:68:
d5:05:a4:d0:96:c2:eb:34:64:d3:8e:ab:82:95:cf:ea:f5:d0:
19:1b:79:7c:54:b5:26:9c:51:95:c0:8b:ba:a8:9f:9f:9c:36:
20:9b:31:30:a1:23:2a:5f:91:29:63:5d:0a:2d:09:18:40:7c:
4b:ef:84:64:fd:e5:b8:22:0b:7a:5d:64:0a:77:9b:f6:5c:97:
7e:a9:cc:87:24:a3:a0:35:8d:20:43:6e:9a:38:55:86:e7:d7:
06:6e:88:eb:04:69:2f:71:b5:06:3d:b8:fa:9f:3f:dc:f1:8c:
3c:31:7a:f7:07:6b:89:df:48:75:6c:ec:12:0a:99:d8:b8:09:
35:f8:37:7a:44:41:f0:c7:8e:3c:dd:2b:aa:cc:3a:5c:76:57:
d1:61:ea:9a:84:b4:27:79:b3:37:c4:63:a8:f6:2e:cc:4a:94:
69:49:1c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:19 2025 by rpki-client