Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9E19D8EC99211EF8743F96F762E951A.roa
File: A9E19D8EC99211EF8743F96F762E951A.roa (raw, json)
Hash identifier: 3rIwar245Lr4pSNw00+4aldTgrvYyLn2iHUe0BZTnVk=
Subject key identifier: 00:03:E4:81:0E:9F:A5:52:17:68:AB:8B:DE:4F:80:12:FF:94:8B:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9E19D8EC99211EF8743F96F762E951A.roa
Signing time: Fri 03 Jan 2025 05:22:02 +0000
ROA not before: Fri 03 Jan 2025 05:21:59 +0000
ROA not after: Sat 13 Dec 2025 05:21:59 +0000
asID: 984
IP address blocks: 156.233.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62963 (0xf5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 05:21:59 2025 GMT
Not After : Dec 13 05:21:59 2025 GMT
Subject: CN=677773fa-dec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:3c:d4:6f:90:98:5b:7d:fe:90:39:ee:26:
28:92:f9:52:0c:57:32:d4:2d:d1:d1:d7:7f:67:12:
69:3d:65:fd:fa:08:56:d8:55:76:20:91:01:21:df:
29:cc:d2:f6:71:55:da:95:ab:90:f1:67:d1:d1:f4:
1e:8f:e7:b0:f0:5a:e2:54:cf:49:9a:f6:a7:be:eb:
0c:fd:7a:aa:d6:5e:67:f6:2f:07:fd:bf:2f:6a:c1:
fd:0c:2a:ae:bb:b9:5a:0d:0b:6e:c0:5d:ac:35:4f:
28:d4:8a:85:4b:37:f7:39:16:fa:e2:b9:ef:dd:14:
58:38:f0:4e:d9:1d:3b:89:01:43:6d:a3:83:ae:ab:
55:e2:7e:dd:8a:99:1f:e5:28:28:ff:6e:d8:e6:f7:
a8:0a:84:fb:8f:82:41:b6:3f:8f:12:fd:3a:b5:cf:
38:d5:95:9a:e1:30:15:10:87:95:ff:63:7c:b7:6e:
cf:46:80:02:5b:7a:13:c3:26:cf:8b:bd:37:8b:93:
ba:68:7f:70:f7:3d:28:e1:e5:68:05:16:b4:a3:6f:
74:b4:51:73:24:cb:af:d8:d7:75:3e:28:cd:d8:3a:
aa:b3:65:78:64:fb:c1:2b:6b:85:50:a6:2c:8c:18:
f3:02:98:c7:a6:6a:eb:ee:ae:d1:e1:5d:eb:0d:52:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:03:E4:81:0E:9F:A5:52:17:68:AB:8B:DE:4F:80:12:FF:94:8B:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9E19D8EC99211EF8743F96F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.117.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a0:36:98:16:08:42:03:5c:77:29:5f:9f:25:a3:c2:f8:e9:
fb:55:40:3a:d5:f3:a8:7f:34:e3:ab:f9:b9:aa:25:35:6a:6b:
6c:67:29:30:f9:f5:c4:32:04:05:48:7f:4e:38:37:e2:26:3f:
7f:b8:8e:69:67:f1:e6:82:ea:0f:93:3b:af:3a:df:8e:81:f3:
2a:73:04:20:d0:eb:10:79:6f:84:3e:cf:15:c8:a8:45:27:69:
e7:cd:f2:53:0b:0d:96:70:9b:df:99:13:f5:8e:c8:4d:17:b6:
19:12:b2:da:2d:8b:a9:8c:41:70:0e:4f:ce:ac:13:fe:28:fb:
62:7b:a8:8c:12:2d:2a:d2:e2:62:d1:6a:ac:c5:9b:ff:d1:1b:
7d:40:d3:9e:ab:7e:43:c2:7e:e5:b6:84:4e:65:59:dd:bf:0c:
1f:65:0f:20:eb:3f:64:4a:58:a5:88:56:25:cb:18:49:2e:e3:
de:6e:69:40:db:c1:95:8d:75:ad:b2:d7:48:58:91:fc:fb:4b:
c4:a9:06:c7:4b:1c:56:1a:2a:63:5e:15:16:f5:4c:5c:26:0f:
7c:7a:99:f7:da:c0:00:cc:a3:7a:71:70:ae:89:2a:60:2c:cd:
7b:78:f2:ef:95:0b:f1:6a:b2:09:2e:1d:c9:64:3b:2f:23:99:
c1:cd:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:22 2025 by rpki-client