Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7F75B5ECCBF11EFA4208E92762E951A.roa
File: B7F75B5ECCBF11EFA4208E92762E951A.roa (raw, json)
Hash identifier: QIigjfpCpUbD+VYkG7u4XLdKA+atfAWIAhtjUAX2XS4=
Subject key identifier: 84:A2:63:CE:71:86:A2:45:D0:1E:C2:CA:E1:53:70:24:31:B9:E3:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7F75B5ECCBF11EFA4208E92762E951A.roa
Signing time: Tue 07 Jan 2025 06:22:07 +0000
ROA not before: Tue 07 Jan 2025 06:22:03 +0000
ROA not after: Sat 13 Dec 2025 06:22:03 +0000
asID: 984
IP address blocks: 156.233.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64022 (0xfa16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 06:22:03 2025 GMT
Not After : Dec 13 06:22:03 2025 GMT
Subject: CN=677cc80f-bfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:76:9b:eb:33:9c:13:98:02:e2:05:6d:19:
14:ef:c3:1b:b4:38:8a:ac:ab:6d:4e:b1:78:a2:df:
9c:52:d8:70:9a:d2:a4:d3:75:60:72:2a:a8:33:4e:
08:4f:2e:ab:a5:b4:70:72:2b:54:9c:28:32:c3:6b:
36:db:b9:38:f3:00:3f:7c:27:c8:f2:cb:22:5c:25:
34:83:ba:f7:e3:e9:38:74:1f:b8:92:97:67:6f:13:
ee:23:0e:a8:32:34:0f:23:61:dd:a5:f9:74:05:fe:
85:72:3b:19:25:af:18:e7:fb:20:30:12:af:9d:57:
36:0c:dc:4e:01:c9:a5:49:aa:eb:04:02:3a:e5:23:
72:ce:c8:e1:c4:ab:92:08:2b:91:30:4b:5d:20:70:
1e:6d:a3:29:e6:63:2e:d3:77:d6:76:08:3a:3c:84:
b1:1b:49:7f:08:80:f0:46:87:f1:ba:d3:65:59:86:
90:54:c0:36:9c:f5:20:ae:b5:cd:e6:fb:76:7e:f8:
d2:24:db:c0:97:98:62:f4:41:ad:9d:11:ea:45:40:
94:a0:32:39:2a:b2:73:d8:16:93:0f:67:3a:e8:41:
88:c2:39:99:73:e3:88:82:ec:12:3c:79:ed:93:e4:
d8:1e:fc:58:43:cc:5a:09:59:6a:91:38:2f:ae:f5:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:63:CE:71:86:A2:45:D0:1E:C2:CA:E1:53:70:24:31:B9:E3:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7F75B5ECCBF11EFA4208E92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.34.0/24
Signature Algorithm: sha256WithRSAEncryption
69:fd:b0:cf:54:24:b0:30:4f:f5:70:68:6f:47:85:43:3d:91:
58:a8:b5:a8:19:80:2d:20:f0:54:c6:0e:5c:9f:79:e0:13:a2:
b7:8f:07:00:a6:0f:b5:b4:09:4e:ef:30:bb:ec:94:58:42:23:
6e:7e:a7:e4:51:6a:53:78:98:47:5b:87:fb:7b:b9:4d:ce:97:
40:aa:66:c9:32:53:7a:ed:bc:4e:4d:c2:63:21:f8:14:52:c0:
2f:4e:a6:a0:ec:93:48:13:ee:a1:de:65:0c:6b:d2:e7:b7:32:
cc:e3:ea:f5:ab:da:44:47:38:16:c4:1c:51:27:a1:17:48:65:
89:80:4c:10:68:ae:ad:10:0c:1c:54:3e:af:1e:ec:03:a4:7e:
44:7f:dc:7e:d8:e8:01:04:49:df:3d:da:bf:63:a2:99:86:d2:
1f:28:84:4e:2c:1b:14:8c:6e:f8:c5:4d:cf:72:75:79:ec:c8:
95:fa:9f:82:5f:9b:cf:b7:bd:60:64:71:3b:98:8d:a8:b9:76:
42:74:a6:a4:4b:cb:76:74:66:f6:f3:cc:7c:c0:f6:90:6c:eb:
5b:ad:fb:28:07:81:76:d9:3e:41:74:c7:7c:31:5b:71:e1:62:
09:fb:95:77:9e:99:c2:d0:12:10:74:3f:9b:48:d3:3c:57:f9:
53:e8:cb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:42 2025 by rpki-client