Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A981733ECCC411EFBAC8FDB0762E951A.roa
File: A981733ECCC411EFBAC8FDB0762E951A.roa (raw, json)
Hash identifier: RVfnkBpskz4OB+UQ+hHpAFvL0J92hCB6uiqw+GBuZfk=
Subject key identifier: 40:23:00:0F:33:7F:12:6A:4B:95:62:2B:FE:DE:31:33:11:30:B7:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A981733ECCC411EFBAC8FDB0762E951A.roa
Signing time: Tue 07 Jan 2025 06:57:30 +0000
ROA not before: Tue 07 Jan 2025 06:57:26 +0000
ROA not after: Sat 13 Dec 2025 06:57:26 +0000
asID: 984
IP address blocks: 156.233.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64076 (0xfa4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 06:57:26 2025 GMT
Not After : Dec 13 06:57:26 2025 GMT
Subject: CN=677cd05a-3a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:26:b1:2f:bf:ea:0e:82:e8:f2:b6:08:9f:
44:38:50:18:6e:2a:54:f0:0a:f9:91:c0:b3:50:f1:
08:69:31:15:c7:22:a7:1a:bb:6a:79:20:4c:be:b3:
73:cb:b6:cc:cf:7d:21:2a:50:70:4d:9a:8f:c3:ac:
92:0b:31:1e:5a:fc:e3:1b:9a:33:4d:83:56:68:88:
8b:63:ee:d7:0c:73:07:82:37:3d:af:a6:4e:87:dd:
12:52:0c:53:f0:81:6c:05:8f:4a:08:7b:a6:36:51:
4d:a9:5e:1d:6d:44:f3:d2:bc:00:e1:10:34:d3:4b:
89:5a:e2:74:9c:cc:9c:4a:43:ee:c7:8f:07:1f:71:
7a:75:c1:df:b2:2d:0c:b3:6f:7f:a3:cf:87:df:b3:
76:00:16:c1:2b:b1:8b:b5:c1:77:a6:e6:64:83:d1:
60:97:4f:39:25:61:83:04:4c:f0:70:09:c6:5b:82:
01:72:af:92:91:24:89:a7:7c:7c:bc:00:3e:3a:68:
e4:fa:4e:d1:c7:9b:51:61:e4:a8:67:d0:88:44:2e:
e5:45:4b:89:67:7c:d2:e2:d9:2e:bd:08:8c:83:08:
ce:1c:80:77:97:c6:b7:d8:61:e1:0f:e5:b3:a8:cb:
d9:92:9b:0d:83:61:11:e7:26:77:7f:05:ad:f8:52:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:23:00:0F:33:7F:12:6A:4B:95:62:2B:FE:DE:31:33:11:30:B7:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A981733ECCC411EFBAC8FDB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c0:1c:b0:07:cd:ca:09:32:d2:12:30:6e:a1:21:2f:86:87:
82:fd:f4:4e:a3:c2:02:af:04:03:a5:6e:c6:d3:0e:7d:64:de:
88:26:d6:ae:d3:c4:0c:7c:e5:03:3f:4f:20:06:00:c1:b3:63:
5e:3a:c6:18:d6:79:98:f8:ed:3e:38:3c:42:87:60:e3:09:3a:
3e:9f:6c:c1:c6:89:af:bc:75:b8:86:f4:87:d5:65:d3:fe:11:
c6:f5:27:7a:f4:93:02:ef:f5:01:52:fb:b3:4d:d9:20:50:ae:
a0:b9:34:e6:52:3c:16:86:ce:54:85:18:fb:60:f8:8e:e2:e9:
a9:17:7a:c7:96:b9:d8:29:90:57:2f:2b:95:7c:c0:d5:90:f2:
33:b4:94:be:cf:86:64:74:f3:56:99:14:98:52:40:0d:fe:8d:
09:d9:66:49:3a:b2:67:f9:57:34:1a:9f:f7:d9:2e:f0:2a:18:
67:a5:5f:b5:d0:b2:11:bf:fc:cb:62:8c:5d:d4:b9:11:ce:1b:
60:03:4f:58:27:74:c0:f5:f0:ff:f9:10:5a:86:b0:c9:cf:94:
f7:61:f1:b7:2d:b9:f7:f0:be:fa:04:17:0d:cc:0e:04:42:9b:
bc:c8:d8:87:60:25:22:f2:dc:8c:d7:01:8d:c3:56:06:43:6e:
80:0d:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:59 2025 by rpki-client