Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFB37D26D2EC11EFA726A04D762E951A.roa
File: CFB37D26D2EC11EFA726A04D762E951A.roa (raw, json)
Hash identifier: R9mQ4TeLOQwOwHkky/GOAB2qi1VzOHGMwZ2t4H68FVQ=
Subject key identifier: E8:AF:24:78:5B:10:73:A3:C7:A2:89:F1:FB:73:64:BA:5C:1B:CD:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010763
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFB37D26D2EC11EFA726A04D762E951A.roa
Signing time: Wed 15 Jan 2025 03:00:01 +0000
ROA not before: Wed 15 Jan 2025 02:59:57 +0000
ROA not after: Sat 03 Jan 2026 02:59:57 +0000
asID: 984
IP address blocks: 156.233.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67427 (0x10763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 02:59:57 2025 GMT
Not After : Jan 3 02:59:57 2026 GMT
Subject: CN=678724b1-6ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:5f:8e:d8:86:08:b8:53:f6:c6:1c:2d:ee:
63:27:f9:52:d3:04:17:53:e2:1d:48:39:f9:0d:6f:
ac:32:cd:d2:21:5f:87:cc:b0:54:f1:22:9f:67:39:
8d:2c:dc:53:3e:00:b9:a7:04:07:bb:62:01:54:7b:
47:0d:a3:4f:c2:1b:23:ec:44:55:da:79:15:77:a0:
2c:e2:a1:07:df:5f:af:95:a3:9d:a2:c0:af:f0:80:
97:b4:45:d2:7c:2b:c9:9e:9b:03:9e:ab:af:73:af:
6d:f6:e7:bf:e5:79:3e:9a:5b:cd:e8:7a:9f:15:9a:
96:59:aa:57:9b:ea:f0:a7:d5:b7:a0:25:3a:b0:8b:
46:df:13:1c:a1:06:aa:61:65:6e:fb:20:62:0a:f6:
83:a7:1a:c2:4b:dd:2c:23:1d:e6:a4:15:fd:91:87:
b1:3a:a9:70:24:e4:12:20:4a:ac:59:3b:d8:3a:1a:
50:43:e6:37:0b:64:b6:1f:0a:4d:c0:22:c5:7c:72:
78:0a:93:eb:9f:13:b9:a2:ce:35:f4:b5:0c:0e:ae:
b5:dd:02:e6:47:b2:24:bc:96:bc:77:fc:60:61:35:
1b:b7:62:8e:12:66:47:9c:a1:3a:25:13:df:5c:0e:
b9:ac:e8:18:28:f5:c9:4a:1d:1b:08:39:21:17:b7:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AF:24:78:5B:10:73:A3:C7:A2:89:F1:FB:73:64:BA:5C:1B:CD:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFB37D26D2EC11EFA726A04D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.63.0/24
Signature Algorithm: sha256WithRSAEncryption
68:65:81:63:bc:63:a6:87:9a:61:14:95:97:a8:36:dd:b6:ee:
1c:2f:9a:8c:49:8d:04:be:c8:e3:65:20:ca:76:96:93:27:16:
49:ba:0a:a1:f5:57:f4:3b:19:4e:65:54:a7:bf:c4:1b:f3:0f:
c9:3e:1a:b4:fb:19:e4:d9:23:c2:9c:fc:36:d4:95:5b:7f:13:
e1:19:89:b2:e9:e8:e5:82:35:05:c9:3e:19:fc:75:8b:8a:c9:
cc:99:d1:12:89:05:90:eb:3d:4a:ca:a2:f8:ae:6f:6e:91:20:
6f:94:10:70:60:c5:84:a9:4e:16:c2:c6:85:b8:49:2f:78:46:
bc:ab:ce:d2:cd:87:71:57:d9:25:a7:a9:31:96:24:a2:1a:eb:
07:2b:d9:ef:75:2b:30:ee:30:b7:75:72:74:fc:ed:00:ec:26:
50:77:78:50:e7:31:22:69:39:eb:bd:6e:4d:65:7b:40:bd:6c:
ed:2c:e2:77:9b:a9:c6:5b:6a:c9:3b:e6:5c:91:9a:3d:f5:6a:
60:fd:ba:16:8b:a9:35:6c:52:c6:df:a4:e0:6a:72:cf:28:23:
04:c1:02:38:ee:7b:e0:e4:1d:38:7e:b2:be:be:07:7b:a6:53:
00:04:8d:f7:e9:e7:c3:a7:e2:b6:2b:d9:6e:8a:1f:14:f5:60:
aa:8e:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:35 2025 by rpki-client