Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1D8DBD4CCE111EF8E35A86B762E951A.roa
File: D1D8DBD4CCE111EF8E35A86B762E951A.roa (raw, json)
Hash identifier: iC0j95VX5ORvNJrWXlhaLnkT7+Ej701synFeVuyAj6o=
Subject key identifier: 4D:26:A5:14:9D:04:79:36:DC:54:3C:0D:1D:00:B3:34:52:65:08:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1D8DBD4CCE111EF8E35A86B762E951A.roa
Signing time: Tue 07 Jan 2025 10:26:13 +0000
ROA not before: Tue 07 Jan 2025 10:26:10 +0000
ROA not after: Mon 13 Dec 2027 10:26:10 +0000
asID: 17561
IP address blocks: 156.233.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64425 (0xfba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 10:26:10 2025 GMT
Not After : Dec 13 10:26:10 2027 GMT
Subject: CN=677d0145-7707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:01:e8:6c:99:2f:6d:45:e9:b1:e7:c4:89:
10:2a:f1:52:80:9c:6d:1c:94:7b:ee:aa:7f:9c:a8:
20:65:07:64:d1:cc:0d:a5:61:8f:2c:81:8e:b5:57:
97:ba:24:f3:34:a5:5e:09:f1:aa:d2:78:43:6e:0a:
f1:4c:76:21:1d:75:5b:10:19:86:d7:e7:86:c5:53:
06:79:0e:71:84:f0:01:76:4f:94:a6:dd:2f:bc:e1:
58:87:4b:55:50:a1:6d:37:1f:d2:10:95:e5:fe:7f:
e3:bb:77:57:d9:b1:0c:ee:19:f7:9b:e8:da:fd:c1:
10:e9:25:6e:07:19:0a:a8:a7:e6:57:79:11:3b:fe:
17:07:59:d1:19:98:a8:d3:08:2f:59:25:d1:2a:a7:
6f:b0:7c:f1:24:d8:c7:0e:ed:ef:ed:eb:0d:a1:2d:
77:50:c8:90:9f:35:e6:8d:d2:3e:19:07:4a:4f:4a:
a4:8d:cf:62:41:2b:6a:54:22:94:24:11:7f:24:aa:
17:34:2e:9a:8a:6c:a9:08:bf:0c:3b:61:18:3b:6a:
88:bb:c4:d0:85:3d:a1:83:f2:c9:5d:c9:b7:c5:48:
4f:2e:2d:81:db:1e:bb:ea:21:36:2f:44:66:31:40:
18:7e:4c:3b:5f:56:e8:9d:14:3e:83:0b:8a:6b:e0:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:26:A5:14:9D:04:79:36:DC:54:3C:0D:1D:00:B3:34:52:65:08:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1D8DBD4CCE111EF8E35A86B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.233.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3a:c9:08:55:98:a2:e2:a2:b6:a4:5e:47:44:53:59:0f:f5:
8a:93:57:be:7d:ea:e8:d3:8d:95:e6:78:f8:60:aa:be:4a:ed:
e6:ed:a4:fc:9c:ec:71:20:31:44:0e:0d:1f:ef:14:65:42:b1:
af:71:77:c7:8f:f0:93:ff:09:e0:a2:cd:fb:df:78:a8:b3:01:
5d:8c:4a:07:52:93:54:91:64:ad:f1:5b:16:ac:c9:c2:3a:19:
ec:05:53:40:e1:00:37:7a:0b:49:0e:b6:c3:fb:10:c4:ca:d3:
eb:41:48:b9:9b:9f:a1:ad:cb:37:4e:ab:4d:b1:93:40:2a:70:
8f:e3:b7:c7:6e:87:68:63:1f:65:18:65:a4:89:7a:46:2c:b5:
f6:19:f3:52:46:78:29:9a:39:f3:6b:a3:01:26:3f:cf:fb:b0:
60:fd:35:12:b0:36:88:29:df:0d:d6:b2:33:bf:fd:15:14:30:
d5:2d:70:d9:dc:61:5e:db:e4:d0:2f:46:52:e8:8a:b6:59:c3:
dd:84:ba:e8:7e:e8:06:4a:3c:9e:70:f0:95:eb:9b:c4:43:df:
9d:d9:84:8b:ce:d4:63:b3:11:d9:7e:a2:3e:34:35:bf:2f:72:
0e:4e:fb:8d:74:51:28:2d:1c:04:12:03:ef:69:dd:9d:cc:13:
2d:a5:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:50 2025 by rpki-client