Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEC4DB94CD0111EF81689AB4762E951A.roa
File: CEC4DB94CD0111EF81689AB4762E951A.roa (raw, json)
Hash identifier: HwyHO03txqZ79vWam/k/nxgJCyHcgK6IFwtGIbBmJmg=
Subject key identifier: A0:4A:4F:42:D1:4F:FC:46:BB:F4:BF:8D:B2:69:A8:C0:97:0A:66:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEC4DB94CD0111EF81689AB4762E951A.roa
Signing time: Tue 07 Jan 2025 14:15:12 +0000
ROA not before: Tue 07 Jan 2025 14:15:08 +0000
ROA not after: Mon 13 Dec 2027 14:15:08 +0000
asID: 17561
IP address blocks: 156.238.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64631 (0xfc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:15:08 2025 GMT
Not After : Dec 13 14:15:08 2027 GMT
Subject: CN=677d36f0-d074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:0b:04:9a:a9:25:db:f7:d1:4a:1f:32:5a:
d8:58:45:aa:7c:f5:72:b6:f0:ec:b9:c8:05:39:a4:
73:27:a5:a2:6a:0f:18:84:cc:05:57:2b:5b:c6:4d:
63:0c:24:9e:51:41:e1:a1:15:c4:18:5f:29:de:3a:
0d:45:7d:e0:ff:47:7a:06:88:a2:92:81:a1:b4:87:
f5:31:da:62:b8:c9:1c:7c:4b:ea:20:2a:1e:79:a6:
10:27:6a:62:40:86:a8:bf:55:94:c5:02:2d:70:43:
3b:94:51:40:f0:e0:82:8f:a0:13:c7:18:f9:fb:e6:
80:10:31:2f:02:59:5a:23:ca:8d:42:19:97:f0:47:
15:7a:95:4d:f2:a4:db:91:39:10:18:cf:f2:12:a5:
d8:b2:70:4a:dd:8d:15:8c:85:1b:8c:02:23:a1:06:
ac:20:31:97:12:a2:b3:94:c8:61:0d:a9:38:5d:ac:
db:16:85:83:c0:c9:5f:65:9d:3f:d5:e7:55:a8:c7:
25:e2:37:75:cb:6c:0c:3a:e2:f8:7d:e4:63:71:e3:
7f:a2:15:b5:77:db:f3:a7:e7:7b:7e:26:c8:80:30:
05:7a:e1:9a:b4:de:5a:4e:cf:91:bb:c4:b3:26:3b:
23:14:01:e1:7a:8c:16:8d:b4:61:f2:7e:e7:53:a9:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4A:4F:42:D1:4F:FC:46:BB:F4:BF:8D:B2:69:A8:C0:97:0A:66:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEC4DB94CD0111EF81689AB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.172.0/24
Signature Algorithm: sha256WithRSAEncryption
34:58:5c:38:18:3b:2e:da:37:b8:f3:04:c2:1a:30:81:8c:89:
6a:f3:1d:ca:fc:a1:a5:ab:04:2b:be:aa:73:b1:2b:b6:46:79:
ab:96:d5:ac:7c:17:53:eb:22:09:66:98:69:2e:79:1f:b4:ea:
92:6b:54:76:b3:45:d8:fc:f0:01:4c:9c:65:84:ea:dd:98:c0:
76:ce:44:1c:2d:71:33:fe:21:a3:e5:58:16:3b:b0:97:28:56:
fc:b3:a0:45:65:4f:23:9d:b4:91:1d:12:6e:9a:ce:c5:f8:8c:
d7:8a:2f:0c:9d:b8:20:15:e1:9c:f9:a1:71:b3:95:d9:22:5e:
84:fa:9d:6b:81:7c:e7:b1:4f:dd:2f:2d:4c:3f:ce:97:fe:c4:
1b:11:af:54:09:bf:3c:5c:1d:88:5d:e1:3a:4b:74:4d:bf:42:
99:ac:7a:b6:b3:a4:c1:96:fe:4b:01:a2:17:ec:67:d4:38:f4:
ed:14:63:c2:c4:3b:e9:5d:59:8a:52:7e:db:9c:ec:dd:eb:af:
e7:a5:a8:e4:92:ea:44:26:cf:f6:72:ee:cb:03:11:cb:89:6f:
10:a5:b7:80:23:76:73:6f:00:36:91:7f:14:b9:1c:04:1b:ad:
2c:f4:86:22:d4:af:59:6d:11:d4:b1:89:89:93:f4:b5:ac:d2:
6d:91:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:11 2025 by rpki-client