Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE79F92C33611EF93E3BF78762E951A.roa
File: AAE79F92C33611EF93E3BF78762E951A.roa (raw, json)
Hash identifier: C8pXNzBKVuuFz4WrKCA9aMk8kE4QL+uGtrPrC23sj/s=
Subject key identifier: A3:A0:AA:DA:E3:A3:26:88:C2:95:FD:2F:EB:82:09:83:63:42:C9:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE79F92C33611EF93E3BF78762E951A.roa
Signing time: Thu 26 Dec 2024 03:08:23 +0000
ROA not before: Thu 26 Dec 2024 03:08:20 +0000
ROA not after: Fri 10 Dec 2027 03:08:20 +0000
asID: 17561
IP address blocks: 156.244.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60241 (0xeb51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:08:20 2024 GMT
Not After : Dec 10 03:08:20 2027 GMT
Subject: CN=676cc8a7-76a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:87:fd:d5:84:48:40:f9:de:bf:10:8c:d9:
4c:99:bc:14:9c:e5:d2:06:46:a3:1e:03:14:65:9a:
b7:04:24:99:52:9a:6f:51:8f:69:c9:6c:65:6d:8c:
58:fc:94:a3:14:c7:31:10:af:b3:35:39:65:c5:9f:
c1:09:f3:d8:1a:9e:e2:32:1e:ff:ee:45:04:c3:4d:
07:0b:f0:61:90:30:57:c0:7e:21:7c:16:6b:6f:50:
12:de:de:d9:ca:36:51:81:e2:60:d2:ee:54:7a:b8:
d7:a9:8f:d4:20:2a:3d:42:7c:ee:41:62:68:52:f0:
b0:c3:9e:de:f9:c5:f2:99:a3:9d:dc:0c:3c:f2:b7:
b5:f2:a8:7a:d5:71:5d:b3:b9:db:a3:45:94:af:e6:
c3:a1:cc:e5:1d:7f:ea:41:4b:b6:04:df:a0:66:11:
cf:1d:55:b0:72:61:41:ae:dc:61:08:02:ce:55:b3:
4f:93:d1:b6:48:f1:4d:3f:db:89:62:75:f2:0d:8a:
05:11:dc:ab:8e:ec:94:76:57:bc:35:f9:74:5a:5e:
ec:6b:5f:4d:e8:c0:91:26:6d:f1:45:05:80:9a:09:
06:ed:10:ce:7e:61:12:a2:9c:54:71:00:e1:46:e2:
0d:e2:60:50:a4:e3:36:d7:67:53:3b:c2:5f:67:77:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A0:AA:DA:E3:A3:26:88:C2:95:FD:2F:EB:82:09:83:63:42:C9:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE79F92C33611EF93E3BF78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.164.0/24
Signature Algorithm: sha256WithRSAEncryption
02:77:cb:e8:52:cc:78:b8:ed:c5:0a:45:cb:b5:75:2f:79:77:
c6:81:58:9e:58:6d:a2:98:37:b3:46:a7:fc:53:d5:6e:0f:9e:
2a:ed:ca:ad:27:ed:3b:a1:2e:09:b6:73:76:ca:8e:8d:c7:56:
e1:8c:4b:09:20:cc:1f:3a:35:03:ec:97:40:cb:39:54:9d:73:
dd:57:82:71:09:90:ee:6c:f1:13:9b:9b:7f:aa:68:3b:3c:13:
31:af:c5:81:58:4d:bf:ad:29:10:14:a6:a0:1c:b4:97:6e:60:
12:96:2a:73:7e:fd:75:23:40:4a:f2:3f:85:9f:f5:46:5b:05:
73:39:41:f1:93:a4:a9:03:e4:4a:a0:99:eb:a3:77:e5:29:41:
9b:b2:9d:66:c4:13:69:96:44:ac:4e:f0:85:f4:81:71:15:2f:
f2:95:92:b4:ef:91:e8:6f:89:83:aa:b8:e8:d0:42:30:de:52:
42:9c:d5:47:0e:2b:d0:10:da:e7:49:a9:40:83:d0:6f:39:3d:
b7:70:38:e9:ef:3b:49:6b:15:c5:6e:94:a4:6a:96:e4:d0:2f:
4b:73:d5:1d:6c:b9:a7:54:ae:8e:40:c1:7f:fc:54:01:0d:8e:
3e:a1:cb:30:ab:5d:77:ff:59:1c:4b:d1:5b:ae:c4:f4:c1:2b:
4b:3f:e8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:05 2025 by rpki-client