Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B540E63AD2ED11EFB2DB3253762E951A.roa
File: B540E63AD2ED11EFB2DB3253762E951A.roa (raw, json)
Hash identifier: zrahykzddFgb+13BW2va4ShkAYhLerp7eYL2r/urEQI=
Subject key identifier: 71:6B:D2:56:9F:B9:D5:8A:2C:D8:83:E0:42:C3:AB:EB:7B:F0:0B:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010769
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B540E63AD2ED11EFB2DB3253762E951A.roa
Signing time: Wed 15 Jan 2025 03:06:26 +0000
ROA not before: Wed 15 Jan 2025 03:06:22 +0000
ROA not after: Sat 03 Jan 2026 03:06:22 +0000
asID: 984
IP address blocks: 156.233.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67433 (0x10769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 03:06:22 2025 GMT
Not After : Jan 3 03:06:22 2026 GMT
Subject: CN=67872632-20bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:88:c3:66:4b:ee:0c:48:11:d4:ff:11:b8:
0f:f4:be:e9:04:3f:cf:61:cd:ed:76:8d:1e:f4:f8:
c8:1c:08:c5:2a:eb:3b:ca:76:d7:51:7b:0a:30:8f:
6a:79:75:ec:56:bc:12:22:b4:43:b6:cd:2f:66:09:
32:ec:ea:70:ce:41:d2:48:cd:92:d8:6d:28:31:f4:
2b:2e:37:45:d2:43:af:39:c4:50:40:86:9c:c3:02:
25:2d:fd:11:5f:3b:71:97:0d:80:14:88:7c:13:65:
ce:93:7a:a9:f6:11:15:0c:bc:d8:28:f8:81:98:52:
82:fa:60:8c:11:01:1f:59:15:9f:ac:1e:d9:80:7d:
df:91:fc:66:8c:9c:82:d8:db:95:7e:1a:97:f1:5f:
f1:f8:4c:9b:48:a5:38:cf:49:70:b0:20:37:7f:7f:
67:e0:b0:e8:b1:8b:07:13:82:2e:8d:61:d6:b1:00:
d6:05:62:b9:90:6b:c4:c0:e9:cd:4f:26:2b:1e:08:
9c:ba:81:52:6f:9a:e9:bf:9e:57:42:33:48:52:d5:
5d:bc:5d:15:1e:2c:f7:eb:31:e0:7f:8a:ef:95:8a:
a3:cc:d3:e4:45:fe:2f:c4:07:b0:8e:aa:b6:8f:24:
0f:97:8c:36:8b:59:15:b4:6e:b9:2f:7c:0a:98:23:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6B:D2:56:9F:B9:D5:8A:2C:D8:83:E0:42:C3:AB:EB:7B:F0:0B:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B540E63AD2ED11EFB2DB3253762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.106.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2e:85:38:67:09:f7:d8:1d:74:9f:0d:85:53:d2:0e:32:cf:
da:67:c1:af:42:7a:0b:4c:ae:5b:f0:87:3c:de:e3:4f:1a:59:
d0:fc:f3:e7:27:0c:e9:8f:3c:03:18:13:b2:db:3b:97:84:24:
69:97:5f:b2:db:cd:78:cb:07:28:e7:06:c9:d5:c2:e0:24:d7:
79:b0:ef:91:ef:eb:01:97:df:13:63:6d:60:bb:23:bb:d0:14:
a7:83:f4:54:ba:1c:cb:a3:4d:09:63:de:f8:5b:56:88:78:54:
1e:ac:93:80:e5:95:b4:c2:6f:6c:8c:64:9a:00:26:99:ff:c4:
99:68:d1:0b:6b:e5:77:63:a6:e7:4e:df:7c:a2:4f:a5:9c:ff:
cc:9f:ff:13:c1:d7:73:40:f9:c6:71:ae:61:2d:4c:95:2f:df:
8f:27:d7:1b:f3:8d:d4:41:c2:91:4c:3f:24:e4:7b:df:99:d9:
8a:6b:f9:3e:da:72:84:8c:ee:cc:a5:57:3a:ce:e1:3a:46:0b:
3e:dc:b1:9b:05:7d:c6:d9:87:59:56:f5:2b:92:12:80:a2:79:
bc:0b:a3:35:4c:a8:cc:31:49:63:de:30:24:f3:9d:7d:07:ba:
c6:42:69:6c:7a:c4:7d:f2:08:e5:e2:6e:28:8f:d4:2e:ad:53:
8d:1b:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:21 2025 by rpki-client