Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B844DBC4CD6711EF9F39DD42762E951A.roa
File: B844DBC4CD6711EF9F39DD42762E951A.roa (raw, json)
Hash identifier: 1cmwOgQuo4q5MuU+alp8mE9piZQJ1r1dOip/VocRsis=
Subject key identifier: 2D:7A:1B:1D:3F:0A:3E:99:FB:81:63:A7:4E:0E:BD:7A:E6:55:3D:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B844DBC4CD6711EF9F39DD42762E951A.roa
Signing time: Wed 08 Jan 2025 02:24:43 +0000
ROA not before: Wed 08 Jan 2025 02:24:39 +0000
ROA not after: Mon 13 Dec 2027 02:24:39 +0000
asID: 17561
IP address blocks: 156.247.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65359 (0xff4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:24:39 2025 GMT
Not After : Dec 13 02:24:39 2027 GMT
Subject: CN=677de1eb-de59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:10:04:df:12:2b:77:22:f0:79:ed:fa:9d:
9b:f7:af:a8:18:74:97:ce:0b:72:9c:17:5e:91:31:
a6:4d:55:42:86:5a:45:a9:3c:64:92:af:e1:7c:fa:
53:d2:75:39:72:4e:9a:64:93:f2:0a:28:82:1c:b3:
1e:4d:65:45:33:09:94:cd:5c:68:ec:df:c7:79:d6:
ad:26:d5:62:fb:db:8d:8c:04:f2:a6:6f:17:ee:75:
cf:7a:8f:1c:56:8c:62:db:93:1a:45:06:e6:d8:1d:
68:15:28:52:71:6e:48:7a:3f:c8:98:05:53:14:5d:
a6:b9:a7:4f:d9:06:ef:4d:02:89:72:c9:fa:c6:2a:
b8:4a:24:30:a0:b1:c5:da:7c:e8:8e:be:65:62:35:
6c:41:36:76:24:42:6f:19:da:7e:12:0d:ca:a8:da:
ce:50:34:a7:25:d3:34:31:40:ef:94:cb:df:d4:c2:
07:00:ea:1d:11:7c:88:56:68:c7:71:24:0d:a4:41:
82:22:b4:12:c3:cc:0a:bb:41:a7:ff:b9:33:d1:22:
3b:5c:98:fd:18:d6:56:38:1a:a3:6f:ae:2c:ab:21:
56:fc:55:24:3e:00:ba:db:f0:cd:bb:0f:02:04:ff:
90:2f:58:8c:0c:15:07:33:19:7b:0e:ae:80:5b:15:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7A:1B:1D:3F:0A:3E:99:FB:81:63:A7:4E:0E:BD:7A:E6:55:3D:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B844DBC4CD6711EF9F39DD42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.114.0/24
Signature Algorithm: sha256WithRSAEncryption
63:86:2f:62:17:f1:da:12:04:c7:9f:ea:95:17:62:21:98:20:
56:60:4c:b0:d1:e7:ee:85:ea:bd:47:1b:84:54:de:df:9b:9f:
b4:54:de:3c:31:62:5d:c3:3d:d4:50:06:c6:44:fb:ca:dc:d5:
14:f6:4f:17:a6:17:8b:34:2b:4b:df:2a:ce:6f:ba:8c:dd:9a:
4a:1a:88:d4:a2:ea:a7:e7:e7:26:bd:a2:71:8b:b8:4a:69:69:
02:5e:30:1b:5d:94:cb:c6:b9:7e:62:1c:c2:e6:b8:95:05:97:
a4:87:79:3f:09:58:69:93:20:c7:66:0f:b2:35:25:72:9a:78:
10:7b:d7:2f:b0:0a:95:56:ef:f4:6c:02:3f:c1:c2:10:3e:13:
74:36:0e:f4:66:01:e6:94:91:9f:72:1c:b3:35:ca:07:cc:92:
f3:eb:3b:95:61:79:f7:37:14:f3:5a:09:df:96:f8:d7:25:c4:
ca:3a:2b:aa:1b:42:ed:03:19:a5:47:65:9c:7c:5c:3b:fc:37:
fe:04:30:1d:b0:c1:44:51:7b:6b:6e:13:31:c3:41:d5:5a:03:
88:5e:4d:41:66:ee:c7:6b:87:ff:a4:80:0c:ed:22:46:3e:fe:
cb:ff:f8:1b:5b:b4:e8:b9:d7:46:2d:a4:be:2f:ec:c9:51:49:
a2:eb:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:15 2025 by rpki-client