Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C77BA224B6DA11EF958DFA91762E951A.roa
File: C77BA224B6DA11EF958DFA91762E951A.roa (raw, json)
Hash identifier: DyXZlsk0gQ/nWS7y5bWQHgblSVqpwiJvA2CDc555qzg=
Subject key identifier: 30:45:49:75:0F:CE:27:2C:A8:E4:46:A3:66:96:7E:EA:CC:26:48:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E26E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C77BA224B6DA11EF958DFA91762E951A.roa
Signing time: Tue 10 Dec 2024 09:40:24 +0000
ROA not before: Tue 10 Dec 2024 09:40:20 +0000
ROA not after: Wed 26 Mar 2025 09:40:20 +0000
asID: 132839
IP address blocks: 156.242.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57966 (0xe26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 10 09:40:20 2024 GMT
Not After : Mar 26 09:40:20 2025 GMT
Subject: CN=67580c88-fec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:89:fd:2c:bf:ac:aa:f5:b9:81:92:d6:9b:
1a:4e:73:7e:54:d2:59:95:2e:63:0c:f9:01:c3:7d:
55:f4:a2:c1:c4:da:f7:fc:b7:e5:f0:59:f1:40:82:
f1:0a:21:1b:dd:1e:a3:48:40:d9:bd:b8:e8:b3:49:
7f:80:8a:75:3d:10:f7:f3:0a:ff:3b:46:04:69:84:
d7:4a:08:71:36:ce:29:47:d8:11:51:7f:ef:35:13:
3a:f0:f8:f4:85:da:c3:94:b6:5b:22:77:31:0e:aa:
9c:10:37:bc:34:04:f2:5e:62:b8:00:26:89:73:86:
30:eb:94:8b:d3:35:32:80:bd:99:65:35:fb:ad:15:
4e:cb:20:68:13:37:88:3e:87:8c:87:d4:8d:f3:fd:
05:70:a6:6c:7e:9b:6e:08:18:22:76:fd:25:26:77:
09:b2:83:f5:7c:df:2b:c9:93:16:68:83:d8:4c:fc:
00:be:81:b9:4b:94:54:04:32:8c:4d:22:37:90:ac:
39:31:af:bb:76:ac:2d:36:b5:e6:08:8c:6c:9c:ac:
85:b4:ac:0b:fb:a0:a8:17:34:dc:9d:05:5f:1b:c1:
d1:9e:8f:1e:bf:2b:a3:72:b6:ee:ff:2c:5d:19:9c:
b1:6c:1f:7c:cc:ee:0b:53:4b:32:dc:dc:16:8f:f3:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:45:49:75:0F:CE:27:2C:A8:E4:46:A3:66:96:7E:EA:CC:26:48:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C77BA224B6DA11EF958DFA91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:ca:f6:4f:a9:ca:b0:93:4a:c9:81:c3:ad:87:cc:cc:14:17:
fb:41:6b:60:f8:be:a8:83:1b:fe:9c:49:2d:14:71:e5:42:41:
3c:89:c3:6f:b7:d8:dc:ca:e8:82:12:8e:63:96:29:a7:58:94:
dd:d4:95:fd:e4:c7:1c:89:5c:09:e7:15:e4:df:aa:f4:6d:da:
66:52:11:a0:2f:ab:3f:9a:f9:46:87:6e:2c:65:4a:a7:49:13:
41:ec:b2:b5:1d:df:e8:98:af:ba:dd:45:88:e6:1e:94:f5:a9:
6d:b0:70:43:a2:78:bf:99:6d:67:9c:96:63:c8:05:c2:9b:b6:
70:cc:ff:b2:49:4c:b9:cb:da:01:45:48:c8:e8:69:b3:fd:6c:
9c:80:aa:65:f0:7e:d9:03:c6:d9:5d:27:09:8f:84:17:33:58:
ff:e5:d2:e5:47:be:b2:38:09:0f:99:6b:4a:a0:25:f6:ef:2d:
bb:f0:e9:df:6d:8a:b1:d0:dd:03:5a:c4:4e:71:61:33:2a:e3:
00:57:f4:65:fb:df:89:7c:94:09:13:f1:ea:d8:01:99:d7:18:
be:fd:25:96:ec:80:f8:f1:4d:3e:d2:09:b8:f2:10:6c:1b:97:
db:86:d1:4c:13:7b:03:cc:6f:ea:d6:1d:5b:63:04:09:04:ad:
d9:f6:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:52 2025 by rpki-client