Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAD750DACD9311EFA0240C61762E951A.roa
File: AAD750DACD9311EFA0240C61762E951A.roa (raw, json)
Hash identifier: BXVCtioWqVqeJHL8+4srx1xRD7uOC1EVRRrqcvIuzgs=
Subject key identifier: 8D:BD:63:70:F6:64:B6:D8:5D:AB:BD:6A:22:16:33:B3:21:AD:A5:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01006B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAD750DACD9311EFA0240C61762E951A.roa
Signing time: Wed 08 Jan 2025 07:39:18 +0000
ROA not before: Wed 08 Jan 2025 07:39:15 +0000
ROA not after: Sat 10 May 2025 07:39:15 +0000
asID: 140925
IP address blocks: 156.238.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65643 (0x1006b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 07:39:15 2025 GMT
Not After : May 10 07:39:15 2025 GMT
Subject: CN=677e2ba6-dd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:39:07:8c:57:e6:60:12:55:88:07:17:dc:
6d:3f:6d:d5:c0:99:52:50:25:63:a0:16:5f:3c:f9:
b3:92:65:15:3d:d9:72:73:5d:1c:28:5a:25:0c:12:
48:04:96:1c:06:50:ce:d3:aa:6b:59:29:60:c8:7e:
ef:bd:15:0d:8e:78:4e:ae:45:b4:62:d1:5a:f4:5a:
7d:f1:15:86:f1:2d:73:cd:bf:0e:50:2a:75:d0:40:
87:d1:ff:d2:40:6b:81:f1:00:1c:c5:54:60:04:f7:
b3:6b:ef:3f:f7:27:05:8d:eb:11:d0:5b:87:ed:a8:
0f:83:d4:80:85:79:4f:4c:de:5f:21:10:a9:82:e2:
ae:9d:73:37:fb:3a:97:38:e9:e8:e1:9a:03:9e:7a:
11:3c:66:1a:2c:42:e4:78:d1:19:4d:5f:37:20:80:
10:cb:a8:4b:40:43:45:f2:41:aa:5f:ee:d0:7c:14:
d7:a9:ee:8b:95:2d:16:af:1a:77:b0:cf:83:37:8d:
08:54:01:37:55:5d:98:1e:82:a1:af:79:54:d1:79:
bd:c2:f4:d0:d3:a3:e3:42:11:52:c6:1f:40:56:5a:
e2:ac:5f:54:88:22:77:d4:6d:35:c0:2a:2a:32:fb:
f4:31:3c:47:28:64:06:cc:f9:1c:da:cb:9c:f3:f5:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:63:70:F6:64:B6:D8:5D:AB:BD:6A:22:16:33:B3:21:AD:A5:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAD750DACD9311EFA0240C61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.112.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ae:5a:90:28:c2:2a:6e:a7:fa:e5:14:18:e1:8b:a8:51:21:
01:e2:3d:1e:1b:5e:63:e6:3c:f0:25:c9:04:6f:52:a4:3e:c1:
77:bd:8b:c6:44:ec:e7:cf:9d:b5:a1:3e:f0:f6:3a:86:07:13:
d1:38:eb:7d:48:84:de:9b:98:0c:64:31:84:39:f8:ed:97:d5:
0d:f1:d0:9c:42:f4:b2:56:cf:a0:af:28:08:f2:7d:8a:f3:33:
eb:64:ed:e1:78:c7:39:1d:0c:af:c5:7d:3c:d9:40:6d:c5:1e:
ea:02:75:6b:27:7b:25:c9:47:c7:4c:15:65:c9:35:a8:43:13:
d7:4f:cd:48:e7:81:cc:cd:f6:c2:2e:a2:35:bd:c0:40:d4:95:
b7:cb:2e:4d:89:3a:17:a8:f3:8e:76:76:e0:ba:71:c1:7a:4a:
7e:a7:17:ed:1f:94:d8:fb:f7:15:e8:08:c6:b0:43:cf:4c:f1:
06:fc:be:4b:fb:a1:fb:7a:25:ca:7f:21:58:fb:57:ab:ee:e4:
da:a7:e7:0d:ba:2a:9d:cc:13:b9:b7:2c:1f:18:fc:59:a3:87:
f8:7e:2d:65:c5:06:89:dd:73:6c:aa:3c:cf:86:aa:01:db:55:
9f:ff:f1:b0:66:5f:c9:d1:19:58:e7:54:af:ee:42:d7:6e:df:
32:2e:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:11 2025 by rpki-client