Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04C69CECD0611EF99B48C54762E951A.roa
File: C04C69CECD0611EF99B48C54762E951A.roa (raw, json)
Hash identifier: V91phFRD7A7wrPRnCn2a47pJ3Ot4wl+if6/9r6NglSE=
Subject key identifier: 91:34:3E:64:4C:17:2F:5E:17:9E:97:43:E5:08:31:97:2B:62:20:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04C69CECD0611EF99B48C54762E951A.roa
Signing time: Tue 07 Jan 2025 14:50:35 +0000
ROA not before: Tue 07 Jan 2025 14:50:32 +0000
ROA not after: Mon 13 Dec 2027 14:50:32 +0000
asID: 17561
IP address blocks: 156.239.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64671 (0xfc9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:50:32 2025 GMT
Not After : Dec 13 14:50:32 2027 GMT
Subject: CN=677d3f3b-6ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:f2:3a:22:e3:a5:8c:be:e3:14:10:aa:b0:
d2:39:f9:a2:f8:25:1c:de:8e:67:ce:d4:c4:63:ff:
41:a9:89:0c:6c:d4:eb:b4:14:c4:fc:a2:5e:b4:5c:
81:b0:95:82:51:d6:b7:85:16:e4:47:68:78:e3:49:
e0:45:c1:ba:90:7b:b3:60:64:28:1f:ee:a4:95:29:
5c:dd:19:0f:7b:df:2d:9b:14:0b:00:ee:32:03:4b:
05:b5:dc:3d:62:0b:bc:ef:ce:d8:a3:9d:f0:0c:3a:
c7:95:9f:7a:83:4c:76:21:89:29:b6:22:56:00:82:
ba:57:bb:be:24:fd:27:dc:a3:a6:08:26:d8:4f:91:
54:7e:f3:13:6c:19:2d:db:13:f4:ff:66:6f:4c:51:
7a:66:6d:01:d6:a6:3c:ae:9b:22:97:65:02:ea:9f:
fd:32:03:2d:c0:a7:85:a0:a4:6a:64:6e:ef:72:cd:
90:d7:d8:1f:f3:ba:e6:79:61:51:0d:aa:18:52:97:
9a:09:79:5a:be:a3:f6:f5:6e:ba:e1:50:be:1b:8e:
39:64:13:71:16:91:84:4d:2d:6a:5a:cf:4f:9e:3c:
9e:29:47:a3:47:2b:d3:b8:7f:a9:4d:d8:84:1f:86:
9e:13:33:10:66:aa:cb:45:1d:10:4c:99:d3:12:55:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:3E:64:4C:17:2F:5E:17:9E:97:43:E5:08:31:97:2B:62:20:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04C69CECD0611EF99B48C54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.33.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2d:16:9d:b9:02:31:fb:f6:81:cd:e7:e2:e7:30:78:41:95:
3e:57:0d:80:83:ed:0b:6f:00:39:40:55:b5:6b:f6:c5:90:05:
9e:b1:87:e6:6b:b2:7c:14:f4:3f:d5:f3:88:ee:68:82:4c:8c:
11:1f:ec:99:68:41:23:cf:2e:d4:d0:0b:0c:db:58:36:d4:6c:
d7:7c:7c:eb:76:79:4a:bb:38:0d:29:da:3a:68:46:33:88:11:
70:98:e8:5e:22:24:ec:b1:78:bf:3c:31:af:d0:2a:9f:4c:cd:
3c:28:da:c6:0d:e3:28:20:72:21:64:01:05:62:08:e7:ed:2b:
23:b5:59:24:1e:3f:76:e9:c6:38:65:fa:7e:c6:98:1a:e2:a6:
cd:5e:35:83:41:58:7c:0e:e1:17:07:71:34:81:57:3e:88:d9:
bd:80:40:27:f6:35:48:f2:14:c6:90:01:51:10:09:d5:5a:bd:
63:0d:eb:1c:c4:fe:c7:f5:d4:c9:74:ca:eb:36:28:7f:b4:d3:
b8:20:83:66:32:58:94:92:b8:43:a3:40:8d:fd:45:c0:4d:15:
21:e1:63:bb:dd:15:8d:58:18:06:10:86:8f:b5:d2:c2:0d:14:
7f:c1:e9:02:67:16:54:66:6e:19:19:27:56:54:cf:70:35:ee:
be:69:8d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:31 2025 by rpki-client