Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEBE2A92CD3911EF8FD4FD94762E951A.roa
File: BEBE2A92CD3911EF8FD4FD94762E951A.roa (raw, json)
Hash identifier: NtrZqd8CstcXw2QiO8QKUESCph1LcSZ0ebWHkHlPtPM=
Subject key identifier: 2E:B7:88:C3:9F:E8:DF:A1:CB:76:C7:40:9B:87:8B:C8:5E:74:EE:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEBE2A92CD3911EF8FD4FD94762E951A.roa
Signing time: Tue 07 Jan 2025 20:55:37 +0000
ROA not before: Tue 07 Jan 2025 20:55:33 +0000
ROA not after: Sat 13 Dec 2025 20:55:33 +0000
asID: 984
IP address blocks: 156.243.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65079 (0xfe37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 20:55:33 2025 GMT
Not After : Dec 13 20:55:33 2025 GMT
Subject: CN=677d94c9-f2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:a5:64:e8:9f:a4:37:d5:76:ab:57:f7:ab:
43:e3:9b:a1:8b:88:90:78:be:c6:67:d5:91:ec:00:
e5:a2:f1:63:a6:ae:65:07:f3:0f:e2:0a:23:f3:68:
cc:80:04:95:16:24:07:58:90:d7:e1:02:61:3a:ac:
2e:eb:8a:1f:3d:d7:65:f7:84:f3:61:1d:f1:99:a8:
8f:47:bf:e5:a5:e7:94:3a:71:ea:2c:be:d2:14:66:
49:36:f3:50:9b:5a:09:ff:d7:7b:59:b4:85:48:ab:
dc:c5:74:eb:97:0c:0e:01:62:26:89:42:4b:9d:57:
c2:0a:0d:85:34:ab:9d:e8:f6:e6:0f:96:78:f1:b9:
c7:0e:d3:f0:67:34:e3:96:84:f1:52:4c:bf:d2:9d:
39:64:55:7b:9a:6f:06:44:fe:c9:b9:92:46:42:04:
f3:4c:16:88:5d:d5:43:d0:a7:b9:e7:17:18:38:01:
68:e6:87:30:f3:44:ed:61:f8:2e:aa:11:35:ce:c5:
78:97:ed:27:3c:f5:a2:00:e7:ff:96:50:f8:04:35:
59:f0:2c:5c:42:05:8c:67:4f:15:ea:43:61:1b:63:
e4:d5:d0:74:a8:c2:c9:48:4c:81:00:f4:e4:f8:c8:
04:8a:97:a1:ec:f5:4d:ab:ce:4e:0e:f2:05:9c:c9:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B7:88:C3:9F:E8:DF:A1:CB:76:C7:40:9B:87:8B:C8:5E:74:EE:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEBE2A92CD3911EF8FD4FD94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:25:82:18:cd:06:6c:73:07:8e:d1:29:ba:84:20:2c:0b:0f:
cb:e2:63:3c:e9:a4:8a:64:81:0d:fb:70:5e:23:eb:92:90:6f:
a4:7e:fe:ce:ed:e1:ef:0b:9d:d6:bb:24:e4:e3:3e:5d:9a:f8:
13:b3:35:ca:cf:6b:c2:4d:63:97:17:e1:e5:f4:b2:79:52:54:
7b:65:e9:55:1d:1f:81:89:1c:e9:08:69:bc:2a:f9:54:e4:e4:
40:f6:eb:c4:31:c5:7c:f1:fd:e5:cd:14:8f:74:a7:44:2a:f3:
09:4b:f3:5c:68:ec:60:c2:eb:4b:9a:85:df:b7:21:63:2c:bb:
37:e4:8b:f3:59:01:0e:39:0a:14:86:c2:1c:4d:6b:4d:6c:f9:
b4:d4:bb:fc:32:de:cb:c0:4d:e7:a2:53:b4:67:79:11:0c:33:
c1:a1:e7:d2:27:d0:6f:af:5c:6a:9c:7e:c6:2a:9c:e1:5c:59:
25:ea:b0:a0:f6:5c:5c:cd:70:0c:15:6a:9c:54:a7:e3:e4:4e:
27:9a:ca:24:5f:e3:f8:84:31:a1:5f:c4:d9:da:bb:c4:af:f9:
ac:97:a9:16:96:96:0d:1d:f0:b7:2e:a8:3d:c5:42:67:b2:5f:
e5:e7:e9:f3:d1:82:9c:03:43:43:b4:70:e1:29:12:d9:53:b1:
07:65:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:32 2025 by rpki-client