Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAA347AACD0A11EFB9BB296C762E951A.roa
File: BAA347AACD0A11EFB9BB296C762E951A.roa (raw, json)
Hash identifier: g/3I35IM+4CYN46mRgJ4o4od0VR4aIzeI+p2Hp1vE6k=
Subject key identifier: 14:E1:09:8B:2B:FC:11:07:BB:81:12:AA:D8:AA:D5:10:30:AB:B0:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAA347AACD0A11EFB9BB296C762E951A.roa
Signing time: Tue 07 Jan 2025 15:19:04 +0000
ROA not before: Tue 07 Jan 2025 15:19:00 +0000
ROA not after: Mon 13 Dec 2027 15:19:00 +0000
asID: 17561
IP address blocks: 156.239.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64703 (0xfcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 15:19:00 2025 GMT
Not After : Dec 13 15:19:00 2027 GMT
Subject: CN=677d45e8-d90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:98:c9:4f:b2:2b:ec:35:ac:3f:49:5d:dc:
e8:37:7d:7f:7e:da:ef:0f:3a:e4:0e:0f:3e:71:c3:
a7:08:dd:6d:af:4f:5b:12:50:d0:f4:13:69:57:3e:
83:78:07:e9:d6:cb:7f:cd:30:28:5e:f8:46:c4:b6:
d9:b7:2f:17:5d:1b:33:c6:d0:4e:d8:20:cc:e7:c3:
2f:66:8a:e7:0c:b3:e0:71:d7:c7:25:3b:13:04:6c:
d2:38:00:82:a2:c8:4e:ff:51:1e:cf:6d:df:71:70:
8e:20:ce:3e:79:50:98:26:fa:4a:cd:ff:49:48:6f:
56:62:de:62:72:be:8c:5c:2d:45:8b:0e:c0:dc:44:
ca:e5:34:02:66:c3:73:70:b1:f9:47:53:3a:00:c4:
8d:75:89:4b:9b:25:6a:27:81:1f:82:5a:04:a8:8b:
1c:1e:f3:4b:29:bd:c4:d2:bf:09:d0:19:36:63:f0:
9b:e2:a5:54:78:fd:69:79:64:79:fd:04:fb:2a:23:
46:fe:b9:a4:46:92:29:99:8a:43:1b:7c:f4:01:01:
50:c9:03:a3:bf:36:38:c1:cc:67:e0:aa:4c:47:34:
94:bb:ee:ee:ab:f9:cf:5e:16:c8:1f:ce:69:6a:9c:
e5:d5:d4:02:f5:63:5e:d5:02:de:45:81:43:34:1a:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E1:09:8B:2B:FC:11:07:BB:81:12:AA:D8:AA:D5:10:30:AB:B0:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAA347AACD0A11EFB9BB296C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.49.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ef:0c:94:07:36:5f:16:9a:74:c6:68:03:07:81:01:6c:5b:
11:e1:2b:fb:76:a6:f9:bc:a3:f0:67:1c:5a:fc:79:13:23:b1:
e9:4d:50:41:46:05:a1:87:36:54:b0:82:66:de:fc:8c:2e:dc:
08:0d:f7:fd:d5:17:32:1e:3e:f7:a7:bf:ba:5d:9d:d8:d7:46:
90:62:63:16:1f:3e:9b:1b:f8:2c:7b:7e:71:7b:a9:7b:90:9e:
f1:71:a5:54:88:f4:5d:94:da:76:4f:dd:4a:f9:86:03:ed:27:
dc:35:fa:43:52:0f:46:ec:b0:42:e8:b7:8f:49:b2:b3:47:79:
50:b2:c5:ce:d9:0d:00:33:5c:4a:64:e4:ac:fb:d9:e3:ac:91:
01:e4:08:ce:ce:88:3d:53:0a:c8:19:3a:f6:90:6a:b6:19:94:
e9:0b:74:44:a3:7f:d7:09:4b:d1:d7:19:cf:c3:b0:c2:ed:7a:
e6:81:02:14:08:ce:89:76:05:a7:b8:08:43:29:f5:1b:f3:f8:
b8:43:bb:74:98:ab:c4:07:eb:5c:9c:d6:e7:1d:aa:0c:97:c7:
e9:8d:33:b8:4a:39:3c:fa:4b:36:51:c9:b2:2b:9d:0d:fc:da:
2d:7d:76:da:16:09:ca:fd:88:73:62:79:e1:7e:51:21:c9:48:
59:45:26:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:03 2025 by rpki-client