Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7C93946CD1711EFB24E08BD762E951A.roa
File: C7C93946CD1711EFB24E08BD762E951A.roa (raw, json)
Hash identifier: rVIEy+zJbXiI2ZzAcOsRlNv61amFuyHP5xY0nUJRqQA=
Subject key identifier: 7A:18:CD:78:F6:06:1B:AF:9B:B7:57:35:84:4F:E7:8E:FD:E0:9A:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7C93946CD1711EFB24E08BD762E951A.roa
Signing time: Tue 07 Jan 2025 16:52:29 +0000
ROA not before: Tue 07 Jan 2025 16:52:25 +0000
ROA not after: Mon 13 Dec 2027 16:52:25 +0000
asID: 17561
IP address blocks: 156.241.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64809 (0xfd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 16:52:25 2025 GMT
Not After : Dec 13 16:52:25 2027 GMT
Subject: CN=677d5bcd-04a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:30:ed:9e:25:de:9b:7a:83:77:75:d6:88:
4b:bc:8c:34:4b:e7:c8:bb:87:13:01:60:58:45:a7:
12:d1:14:2e:0b:b6:f4:27:97:e2:61:33:2a:c7:a2:
3e:25:60:9e:95:b2:3e:a6:ee:0d:56:e8:7b:a7:26:
ca:58:25:d7:b3:68:ac:b9:4f:e5:44:23:64:85:89:
20:3c:f3:19:02:32:94:75:96:46:83:73:07:ec:b8:
b6:82:b6:72:10:75:54:7c:5d:44:59:94:50:1b:ba:
40:ca:d0:0c:96:bb:5a:af:d1:da:ef:c5:26:82:4a:
bd:f2:e0:48:06:7f:40:be:1f:32:47:e9:5c:89:e5:
d8:7e:dc:83:2d:53:24:04:a4:f4:39:19:46:b3:cb:
d8:54:1e:19:01:d8:88:28:3f:14:28:5c:09:47:21:
2c:73:06:3b:b3:04:4f:e8:29:ff:c1:f9:f3:3f:4a:
58:3c:ee:b4:00:06:87:7f:f6:93:7b:63:7b:3a:d8:
21:70:b8:4b:8b:27:f7:d9:1e:f7:1c:60:c2:34:ca:
35:dc:10:c9:76:a7:1d:5f:e3:d3:dc:be:ef:66:b4:
aa:6d:78:6e:0a:e0:26:85:f8:5c:0d:ab:2c:98:54:
14:d3:1f:ea:6e:0f:44:b9:2e:11:bf:9a:4f:b2:a5:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:18:CD:78:F6:06:1B:AF:9B:B7:57:35:84:4F:E7:8E:FD:E0:9A:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7C93946CD1711EFB24E08BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.24.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3b:d7:15:8f:7c:69:7b:8b:6b:b6:bd:d5:81:c0:8f:8d:fb:
1c:e1:39:ec:29:04:d6:4e:88:12:5e:0c:54:5e:bd:5f:d3:11:
3d:9a:f5:1d:e0:c9:27:02:36:2d:e3:70:80:ff:62:4b:af:7c:
41:80:1f:84:63:5d:21:d0:ae:ab:cd:37:c8:af:2f:bb:1f:05:
47:4c:e1:8c:80:08:49:81:a6:64:56:ce:cc:0d:c3:88:13:35:
36:31:07:61:25:c6:39:2e:f2:e8:28:de:43:19:b0:b5:fe:b3:
30:b8:20:dd:e3:54:62:6c:f5:bb:55:d8:e2:da:ff:e4:11:49:
01:84:5c:59:27:bd:a7:bf:72:49:48:ae:2a:d3:e2:e0:8b:3f:
8b:74:b1:4f:de:f5:74:a7:58:e0:f9:50:0c:1a:a5:8f:aa:fe:
5c:3d:2c:ef:2b:3a:94:91:0d:c1:18:e8:67:9f:6d:4f:11:d6:
34:4d:0a:eb:c9:7d:c1:d9:d8:0a:18:7b:d6:6a:22:7c:d0:d3:
54:97:10:83:28:ad:56:db:a5:4d:56:38:4f:d5:c3:3f:42:ae:
74:a4:d1:73:1d:a7:21:d9:ae:c6:b1:56:e8:a6:3c:97:e2:4c:
31:6f:56:c2:bd:6b:6d:47:78:33:60:3c:0e:d3:a3:60:2a:2d:
e0:f9:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:44 2025 by rpki-client