Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B08C1FE0CD7211EF8299E792762E951A.roa
File: B08C1FE0CD7211EF8299E792762E951A.roa (raw, json)
Hash identifier: OlAfMR7EEM9DVMOCyUknULs4CmW4TA69GBPPtIx9BL8=
Subject key identifier: 91:99:F4:55:56:AE:22:5C:42:04:E6:8B:FD:3E:83:B4:9C:CE:0F:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B08C1FE0CD7211EF8299E792762E951A.roa
Signing time: Wed 08 Jan 2025 03:43:14 +0000
ROA not before: Wed 08 Jan 2025 03:43:11 +0000
ROA not after: Mon 13 Dec 2027 03:43:11 +0000
asID: 17561
IP address blocks: 156.248.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65431 (0xff97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:43:11 2025 GMT
Not After : Dec 13 03:43:11 2027 GMT
Subject: CN=677df452-72d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:07:0d:c2:1c:6f:03:f5:69:63:b9:7a:ab:
8d:a5:bb:40:70:2e:89:51:50:1e:ea:ce:83:58:30:
7b:f1:0c:f3:88:84:7f:5a:26:8c:0f:5c:ba:30:46:
d3:c8:be:73:55:0c:c5:cc:d3:94:4f:fa:32:3f:23:
62:49:47:10:d0:8f:b8:dd:6d:81:88:e8:33:83:28:
fe:0a:36:2b:df:0c:53:5d:13:69:ff:90:1a:b5:d6:
f3:d5:78:fb:7b:5c:f5:e7:9f:f2:c0:df:47:ec:da:
18:ac:37:36:e7:d4:f6:49:6b:7c:fb:13:69:8b:75:
3f:2e:79:09:0b:85:af:07:32:5c:a3:36:ee:cf:c2:
31:2b:51:12:49:0b:40:50:96:58:be:7f:61:8e:f6:
57:18:57:7a:4b:7d:38:76:6e:20:3c:3d:68:19:fb:
d4:cc:23:97:46:fe:78:f9:14:6c:90:33:2e:c4:a9:
18:f7:7a:eb:95:91:3a:50:c9:c0:5b:76:d4:a0:f1:
31:12:38:ac:b5:23:0a:59:31:0a:78:01:0b:77:58:
70:37:71:d3:1c:21:38:e2:eb:81:71:37:bd:be:b7:
cb:2c:fa:64:4c:e3:28:8d:5f:b2:d5:73:47:ef:2f:
41:b2:a1:28:de:22:a7:52:2a:75:2a:07:9a:91:97:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:99:F4:55:56:AE:22:5C:42:04:E6:8B:FD:3E:83:B4:9C:CE:0F:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B08C1FE0CD7211EF8299E792762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8d:d0:92:ea:36:8b:7b:b3:44:1f:9f:fe:8c:f6:aa:5b:d7:
cf:8f:3f:7e:2b:7e:9c:03:4b:94:81:f5:24:76:fc:dd:26:1f:
9d:10:79:be:a8:8a:97:dd:82:e8:c0:f5:40:0b:0d:aa:4f:e4:
79:da:5d:49:08:47:1f:6b:46:fe:db:cd:cc:1d:d1:54:36:f4:
46:8c:02:84:76:e5:a3:3f:8a:3f:c7:e5:b1:60:38:d8:0e:33:
a6:f1:28:52:e7:23:35:73:9a:e9:37:0c:df:c3:f9:33:9f:ee:
dc:e5:35:38:e4:c1:1a:76:a0:41:99:d1:97:50:05:14:e9:c5:
3b:8d:5e:d8:09:1b:98:93:29:4d:2c:07:6b:01:5f:a2:5d:c2:
ce:0b:e7:4f:2c:5a:8f:0a:98:c6:25:19:33:0b:bb:24:22:86:
fc:c3:ee:a8:f7:54:cc:ec:b7:9e:81:d3:13:82:60:8c:5c:96:
9f:82:ca:69:00:11:12:15:6b:33:59:dc:5f:88:7a:79:5d:5e:
6a:62:1c:7d:4b:99:39:84:0a:f2:c8:c0:bd:a9:80:65:7b:dc:
1c:9f:a0:4d:a5:67:31:47:70:b6:21:46:83:9b:7a:b8:45:35:
ea:0c:d1:58:7d:b2:32:78:7d:5a:3e:0b:a1:0d:7b:e5:ac:db:
e0:d1:e1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:26 2025 by rpki-client