Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A84AC99AC33511EFAEF61472762E951A.roa
File: A84AC99AC33511EFAEF61472762E951A.roa (raw, json)
Hash identifier: lH2+RL65ZHuWizOMsIlRU+ZhuNUDHpM/2JGciiFMPv8=
Subject key identifier: 82:99:14:7D:34:5A:BA:60:AF:EF:58:28:BD:B4:48:A1:D7:CA:DA:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A84AC99AC33511EFAEF61472762E951A.roa
Signing time: Thu 26 Dec 2024 03:01:10 +0000
ROA not before: Thu 26 Dec 2024 03:01:06 +0000
ROA not after: Wed 10 Dec 2025 03:01:06 +0000
asID: 984
IP address blocks: 156.244.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60229 (0xeb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:01:06 2024 GMT
Not After : Dec 10 03:01:06 2025 GMT
Subject: CN=676cc6f5-d0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:29:90:a8:b8:1e:8f:4d:56:92:85:2a:69:bd:
cb:3d:7e:88:6a:ba:ac:1a:50:c6:e8:02:b7:b6:ca:
53:dc:1e:07:17:6f:76:ca:49:9b:45:67:68:5a:d5:
27:49:41:e7:e0:12:7d:ed:ff:82:52:9e:1f:28:73:
41:f7:ea:97:7e:a4:ca:ce:8d:f5:35:8c:e3:17:77:
66:3d:83:2c:57:4c:1f:e0:20:13:2c:ff:c2:bf:f5:
16:22:0e:97:74:cc:f9:ad:7a:51:89:99:30:54:17:
95:29:ab:34:63:ff:b7:32:49:76:13:0d:2c:14:cd:
9c:80:47:3e:98:32:70:a7:c9:89:84:aa:dc:3a:cd:
99:96:14:b5:4c:c6:7f:dd:6e:eb:dd:3e:e3:71:13:
c5:56:30:91:eb:15:e2:e8:66:e7:2b:19:0a:77:39:
82:68:02:ed:c8:e6:ce:26:97:a2:ae:6c:eb:df:2d:
24:db:5c:e9:6d:fa:90:cf:ad:65:8a:ed:49:8e:52:
af:99:04:86:c8:af:85:f8:54:f3:2d:41:6e:e7:99:
fe:90:7e:71:df:64:76:70:67:9e:0e:f2:c1:85:71:
44:8f:4b:1b:40:4f:00:c5:b2:aa:9e:c4:2e:d6:f7:
26:ea:fc:46:69:d8:19:31:be:a5:78:50:7a:8d:3f:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:99:14:7D:34:5A:BA:60:AF:EF:58:28:BD:B4:48:A1:D7:CA:DA:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A84AC99AC33511EFAEF61472762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.158.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4e:3c:28:1d:86:35:1e:aa:58:30:39:bf:b5:d7:bd:9d:99:
88:3d:f6:d7:58:42:39:c3:6f:d7:0b:b5:fd:bf:fd:8d:32:dc:
d2:07:06:6d:4f:a2:c3:da:9d:c2:0f:35:7f:4c:eb:41:40:a1:
d2:59:b1:f6:4f:98:11:84:21:8c:1b:a1:8c:77:df:bf:40:d5:
2d:b2:be:e4:17:44:80:81:41:93:c1:8d:73:30:a8:af:a5:30:
b6:11:b9:0f:5c:7a:9d:10:78:e1:db:1b:22:71:f3:08:9e:00:
84:a7:50:9c:12:a9:6f:1d:f9:00:4b:09:2d:e9:a2:08:98:33:
10:29:4b:6b:be:b2:0c:82:af:b2:a1:d4:4c:b0:46:85:c0:4d:
49:a2:07:b4:a2:25:a7:d3:54:66:ef:60:5b:8b:18:7a:1f:bf:
b5:3a:3e:92:43:4d:b9:ba:a4:be:e6:20:18:2e:c7:42:bd:88:
dc:31:7b:2e:63:09:f4:9b:ef:0b:e6:10:3a:7e:66:0e:87:2a:
af:c2:83:ae:ac:88:9c:7f:4a:35:61:16:f0:73:03:6e:ec:0a:
a5:52:45:94:48:93:98:bd:35:26:e5:8b:03:73:18:fd:18:73:
81:3c:5e:2e:b4:b2:13:8f:bd:5d:72:e2:d7:37:5e:98:5e:ee:
27:ee:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:09 2025 by rpki-client