Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB4E1EF6CD6D11EF872E6E70762E951A.roa
File: BB4E1EF6CD6D11EF872E6E70762E951A.roa (raw, json)
Hash identifier: YVoN0wYaZNxbbwZ0EwCM3q6B335ZTxLVYjkPjBX1+Io=
Subject key identifier: BE:58:90:58:5D:6D:46:33:92:AD:2D:44:38:44:C0:DB:EF:E2:1E:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB4E1EF6CD6D11EF872E6E70762E951A.roa
Signing time: Wed 08 Jan 2025 03:07:45 +0000
ROA not before: Wed 08 Jan 2025 03:07:41 +0000
ROA not after: Mon 13 Dec 2027 03:07:41 +0000
asID: 17561
IP address blocks: 156.248.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65393 (0xff71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:07:41 2025 GMT
Not After : Dec 13 03:07:41 2027 GMT
Subject: CN=677dec01-765f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:70:a6:cc:7b:86:a1:1d:ae:10:0a:70:3c:
3f:92:54:ad:ac:4a:7e:57:a5:8e:9f:b2:fe:64:63:
a0:63:19:03:08:01:8f:0b:31:cf:8c:ac:93:f1:a6:
b8:c3:36:80:5f:95:8f:1f:d4:ef:67:76:a2:c7:48:
22:b5:8d:ef:e4:81:3d:50:07:ec:d3:7f:59:f5:36:
20:54:51:1a:c5:e1:ab:0f:f1:ec:95:39:89:ac:f8:
2e:fd:4d:b2:42:77:6a:ca:42:8b:ea:0a:5c:3f:b9:
25:4a:9e:80:57:c3:6c:4d:ba:b3:27:e2:de:3d:a6:
3c:73:9c:08:58:cc:16:73:3c:dd:a9:a1:f8:ef:ec:
2d:64:df:50:0a:9a:2b:7a:f2:56:1b:e4:d1:63:14:
71:52:cc:0f:9c:60:eb:e0:d8:b1:2d:ee:67:8b:ca:
d5:a8:6b:3e:ec:48:ce:28:e4:c0:dc:ba:b9:d9:e9:
04:4b:38:3b:b8:75:70:74:55:e0:a8:be:04:82:0d:
aa:65:46:2b:43:e0:fe:06:f5:b7:43:d1:a8:42:8c:
05:66:a9:bf:91:2d:4d:1e:de:8a:08:12:e3:7f:ee:
9c:e9:14:0c:0f:27:77:e5:5b:e1:0b:79:93:53:92:
6f:25:67:50:ef:84:c0:32:c1:de:80:80:c3:e6:c5:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:58:90:58:5D:6D:46:33:92:AD:2D:44:38:44:C0:DB:EF:E2:1E:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB4E1EF6CD6D11EF872E6E70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d4:4f:36:78:d2:55:2c:67:79:3b:6b:2e:0c:8d:28:db:bf:
4f:1b:37:fa:5e:9f:84:27:3d:6a:68:01:5e:ca:ba:e0:1e:d2:
29:13:17:43:25:b0:0d:b2:b7:b5:ad:79:d8:9e:92:fa:20:3d:
58:24:f0:8a:cf:1e:54:24:e0:c9:fe:d4:7b:04:ae:74:c6:17:
b3:50:84:02:82:ed:b4:b1:67:6c:29:99:1b:2b:22:d7:c8:71:
6e:66:af:ed:5a:8a:56:d8:9b:6f:bb:77:9b:01:8f:d9:9f:5f:
c8:6b:05:8d:b7:d1:69:da:06:22:0d:b6:92:39:33:52:30:58:
bd:fd:7c:85:6e:42:f0:d6:81:13:8a:41:4f:fa:5d:e0:d4:ea:
46:b4:e3:30:8e:ff:16:93:bf:ce:80:f8:ed:04:e0:ad:a7:45:
f9:55:0c:04:18:58:7f:0f:a7:65:e5:30:e5:7b:97:5d:90:a2:
33:66:51:68:02:6d:bf:7a:2d:11:f6:f2:e2:cf:1e:9e:d9:65:
20:dc:27:3d:57:be:b1:cb:2b:cd:10:e2:c9:4e:6b:cf:ef:cb:
ee:5b:dc:fe:be:e3:6d:7a:14:ae:df:9c:f4:5e:98:87:fc:c5:
25:10:92:a1:6a:c2:11:95:bc:79:65:e4:c4:58:d8:85:d4:94:
af:01:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:17 2025 by rpki-client