Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC0CF16EB5FD11EFA93FE5A0762E951A.roa
File: BC0CF16EB5FD11EFA93FE5A0762E951A.roa (raw, json)
Hash identifier: 0aUq7qZhfITB84oIoOCS6XJl6uQuCPSfnnksQSt8oCI=
Subject key identifier: 37:47:F0:7F:DE:FA:84:B1:6E:87:F1:E2:BA:4A:ED:36:D3:32:33:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E16A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC0CF16EB5FD11EFA93FE5A0762E951A.roa
Signing time: Mon 09 Dec 2024 07:18:06 +0000
ROA not before: Mon 09 Dec 2024 07:18:02 +0000
ROA not after: Thu 06 Feb 2025 07:18:02 +0000
asID: 137443
IP address blocks: 156.236.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57706 (0xe16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:18:02 2024 GMT
Not After : Feb 6 07:18:02 2025 GMT
Subject: CN=675699ae-9e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:10:da:d1:bd:51:2a:bf:e5:26:b1:e8:ca:
98:0f:ef:71:af:f2:39:96:15:fc:1e:96:18:c6:f8:
2d:94:3e:a4:35:89:f8:f4:f3:c2:73:48:f9:a7:69:
0a:5b:13:3e:19:25:f4:47:87:0e:83:d8:dc:22:fa:
02:11:e9:e1:7e:28:42:73:7b:db:4b:5e:00:9b:71:
60:5f:87:b9:a8:a8:f4:1b:6f:e5:9a:a7:9e:37:46:
82:23:cc:53:7a:d4:b2:8c:c2:20:4a:d0:49:2b:3f:
44:4a:9c:9f:38:be:e6:90:93:e3:87:80:e1:d4:40:
0b:0b:8d:e2:4c:bb:e0:02:c7:32:fa:26:e0:d7:22:
eb:b6:35:72:a5:c8:6b:35:a9:9c:81:9c:94:65:7a:
db:c2:a8:53:e9:2b:e0:79:23:84:63:2e:2f:aa:5d:
02:93:44:e1:40:8a:4b:e2:35:3a:ff:4c:8f:1b:ba:
3a:cd:38:a0:4a:30:fa:da:7e:9d:d7:3b:ca:b2:d1:
5f:23:1f:fd:b3:98:a9:25:7c:ae:44:e4:cb:9d:fb:
f1:ee:bf:64:7b:71:6c:bb:5d:e0:82:1f:89:87:a2:
ac:91:fa:66:85:04:ec:dc:27:5f:25:eb:e5:69:b1:
b3:7a:c8:ee:7a:18:50:b9:ac:1d:ed:aa:e4:2d:d9:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:F0:7F:DE:FA:84:B1:6E:87:F1:E2:BA:4A:ED:36:D3:32:33:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC0CF16EB5FD11EFA93FE5A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.116.0/22
Signature Algorithm: sha256WithRSAEncryption
72:30:af:6a:2c:95:d6:e5:29:72:4f:21:60:a4:5e:7d:06:79:
5e:1e:d9:cd:ac:0f:d5:a4:31:c0:5c:4d:49:6b:fc:f3:b4:4d:
95:61:00:eb:57:9a:a0:0b:55:ee:45:1f:0f:c8:cd:72:65:8e:
be:a7:2e:cc:20:b7:0c:f0:6e:2a:81:dd:bf:ed:f0:c1:c6:41:
14:14:ca:8b:db:9c:c9:d5:24:db:26:c2:64:7a:a0:76:10:63:
f6:a4:a1:a8:72:c8:af:89:97:30:b1:cb:86:10:84:7a:1d:02:
c1:2a:31:ec:ae:cb:6d:56:01:92:8a:71:ef:0b:d0:0b:38:51:
a8:c3:08:dd:d8:39:29:d1:b3:bc:af:26:08:c1:a8:68:27:5c:
44:7a:59:a2:64:a1:a2:cc:86:00:31:d6:b3:f4:65:54:41:c2:
46:25:b7:92:3f:60:9f:56:93:8c:18:d2:00:84:51:3e:1c:6c:
eb:fb:c4:61:f9:d3:b9:f9:ce:7d:51:43:c3:e1:26:93:fc:a4:
2d:55:02:c6:91:69:5e:27:4f:31:e2:62:18:e2:17:48:74:5c:
f0:ef:a2:16:ef:e3:4e:42:f3:be:40:7d:5f:ad:20:5b:0f:b9:
25:49:03:58:c5:69:85:86:76:1b:54:58:3c:8b:69:f5:44:f2:
a5:8f:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:25 2025 by rpki-client