Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF016642C32C11EFA42851AE762E951A.roa
File: CF016642C32C11EFA42851AE762E951A.roa (raw, json)
Hash identifier: idM8PXD2ko0c4yal3/21qI2OfBrM//KL/JSL/RHZuJc=
Subject key identifier: 7E:B8:DE:0A:28:6B:25:BC:89:43:5B:D7:A9:90:43:19:01:CF:4F:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EADB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF016642C32C11EFA42851AE762E951A.roa
Signing time: Thu 26 Dec 2024 01:57:49 +0000
ROA not before: Thu 26 Dec 2024 01:57:45 +0000
ROA not after: Wed 10 Dec 2025 01:57:45 +0000
asID: 984
IP address blocks: 156.243.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60123 (0xeadb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:57:45 2024 GMT
Not After : Dec 10 01:57:45 2025 GMT
Subject: CN=676cb81d-f388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:79:45:70:ac:f2:b1:c6:07:34:7f:09:b6:
1a:19:60:d4:d2:b4:13:00:06:9c:33:66:61:51:9f:
45:32:2d:5a:bf:67:46:68:b1:f4:3d:cb:f1:ff:4a:
89:37:98:77:0e:17:34:6e:3e:a8:1f:87:8e:a0:21:
38:22:d4:87:ff:5a:28:86:87:a8:02:1c:61:8d:6b:
17:a1:22:08:7a:07:2c:da:87:ca:16:75:ee:6f:ae:
98:31:04:d1:1b:07:db:cd:38:67:c7:13:54:af:d2:
60:38:ae:4a:ba:99:b1:02:3b:6a:21:27:f9:01:ca:
3a:28:b7:59:e4:9e:00:70:2d:58:b7:19:a9:e2:c4:
ea:a9:5a:84:8e:d9:5a:0b:a0:65:e5:87:3f:60:6f:
d2:d1:6d:5e:d4:7c:62:73:cb:24:dc:eb:d0:31:25:
17:5a:5f:41:bb:8c:25:eb:ff:f3:df:59:b7:ff:57:
ee:48:a8:6c:8c:2e:4a:85:de:e1:44:f5:90:f3:00:
3a:b6:e9:16:1a:75:53:36:cf:17:4e:8c:dd:ea:13:
db:84:ff:aa:7b:56:a9:6d:95:20:4b:35:51:52:da:
eb:da:27:6c:53:c4:b3:65:f7:e5:d3:69:03:06:49:
d6:ca:9c:17:7d:c5:22:3b:0f:53:e4:a1:a8:33:2a:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B8:DE:0A:28:6B:25:BC:89:43:5B:D7:A9:90:43:19:01:CF:4F:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF016642C32C11EFA42851AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.206.0/24
Signature Algorithm: sha256WithRSAEncryption
08:46:d2:bc:73:99:c3:c6:b4:6d:7b:9c:02:20:15:5c:20:17:
81:34:1b:fc:ed:2e:50:5a:ec:cc:c3:dd:46:3c:aa:ab:fe:cf:
7a:e9:7f:b0:c3:c9:2a:8c:9e:0b:b8:be:a5:fc:47:28:0f:ee:
0d:23:ac:46:ae:3f:82:ab:b3:45:13:83:2c:22:40:bd:6a:81:
68:8c:7f:62:c7:2a:44:9a:91:fc:20:86:f9:69:64:c8:e3:44:
70:95:73:5b:9d:85:db:b7:d2:9b:fe:c9:d4:59:c0:63:b8:c0:
36:88:06:30:83:1e:5e:99:dc:45:5e:8d:5d:10:b0:77:7b:15:
54:4a:00:b5:64:0a:08:b1:83:e2:72:ca:84:3a:68:95:75:c7:
99:fb:76:eb:bb:f2:d2:fd:8c:2b:95:42:f9:5d:b5:4b:2f:74:
bb:be:90:7f:a5:a5:4b:37:cf:07:b4:6e:53:b8:da:d7:d1:07:
07:93:ca:5b:90:52:f7:5e:22:0b:36:a5:11:5b:c5:46:8e:87:
00:f3:d5:89:ae:06:ae:8c:e8:5b:05:a2:dc:07:99:90:5e:f6:
a8:46:be:aa:46:6a:62:fa:71:77:45:ac:58:d4:76:49:9b:c6:
f1:34:76:29:f6:85:8d:a0:96:4b:da:88:f4:05:2e:3e:e3:d6:
89:f2:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:13 2025 by rpki-client