Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D534B82CCD7011EF9380D086762E951A.roa
File: D534B82CCD7011EF9380D086762E951A.roa (raw, json)
Hash identifier: iu8syqhZi/fF8MEIV/vCodZl6ktP2GPgnIU3eoluW6U=
Subject key identifier: 8F:EB:10:BC:A2:F5:07:7B:AF:C4:23:90:30:F2:F9:F1:A7:0A:C8:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D534B82CCD7011EF9380D086762E951A.roa
Signing time: Wed 08 Jan 2025 03:29:57 +0000
ROA not before: Wed 08 Jan 2025 03:29:53 +0000
ROA not after: Mon 13 Dec 2027 03:29:53 +0000
asID: 17561
IP address blocks: 156.248.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65417 (0xff89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:29:53 2025 GMT
Not After : Dec 13 03:29:53 2027 GMT
Subject: CN=677df135-4deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:db:4f:9a:11:63:f4:36:5c:d0:41:02:c7:
53:a2:47:f6:48:fe:b1:ca:b4:07:3a:f0:bc:fb:e3:
38:e3:07:1a:f8:e6:c7:75:29:52:cf:17:16:87:7c:
e3:d9:c8:a3:51:0f:22:32:bb:67:15:9d:e7:7f:76:
29:d8:c2:8d:30:58:ee:3e:5d:e7:21:87:c1:de:6d:
35:52:0e:fa:12:20:96:26:05:bc:3e:c2:cb:e2:15:
97:06:0b:1f:f1:dd:25:53:b4:ef:c2:91:31:e4:cd:
d9:ff:9d:ba:e7:4d:4d:9f:17:01:ed:9e:a8:8a:46:
98:96:83:de:f8:94:c3:76:48:7c:1d:9a:1c:39:66:
e5:3c:84:e7:0e:4f:0d:f2:67:7d:f2:73:bf:23:90:
5a:ab:99:f0:dd:0f:df:05:c9:78:ee:9b:f0:15:ad:
33:53:c5:6e:62:da:1a:9f:09:b4:fc:e4:dd:71:4e:
ef:73:44:4a:15:72:90:3a:aa:f1:f5:b2:e9:29:3e:
91:91:b9:4a:a9:75:35:64:3a:3a:40:95:36:da:c4:
a4:08:c3:3c:8a:8f:a7:35:33:66:1e:77:4a:21:04:
96:78:7d:26:4a:cf:54:f5:e9:c3:a1:bf:a6:82:47:
eb:f6:19:35:9e:70:4d:bf:5c:2e:50:34:52:4f:c8:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:10:BC:A2:F5:07:7B:AF:C4:23:90:30:F2:F9:F1:A7:0A:C8:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D534B82CCD7011EF9380D086762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.30.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:14:72:c2:e8:ca:71:1c:3b:d6:36:85:e2:61:ea:f6:28:44:
19:36:ef:3d:75:c5:33:b0:89:6c:1b:7e:be:76:7e:21:3c:36:
e8:8d:4d:7a:af:d7:80:6f:80:02:87:d8:7c:eb:f5:cd:11:52:
78:b9:d3:19:ed:fb:ea:00:33:6a:23:38:62:11:e2:8a:f3:e8:
02:f6:9a:e4:30:7d:48:ec:f7:4f:40:b9:fb:a4:20:77:52:6d:
10:5a:25:d8:da:74:b0:dd:aa:25:f8:79:0b:a0:69:71:fc:6b:
a0:22:a8:0c:4b:13:71:37:86:7b:c5:7d:92:09:52:1f:83:6d:
f8:4e:2c:c4:66:61:7b:f3:99:54:d9:21:62:6f:60:45:fd:3e:
c3:3b:32:73:6e:ec:5e:7a:25:9d:4f:4b:20:7d:70:1c:52:87:
ae:b1:2b:3c:65:0f:f4:d6:cd:60:35:7c:93:70:f6:1e:e5:9f:
7f:f4:90:fc:a7:09:4d:f5:28:c8:65:18:bc:09:6e:f0:0a:b8:
68:a2:56:3a:de:8a:59:56:77:9c:37:ad:1e:32:4c:c6:e1:d0:
52:6a:7f:a7:0b:8e:af:5a:36:a0:5e:2b:f3:c3:1d:d7:f7:66:
0c:55:86:36:40:a9:ef:e3:5a:70:21:28:fb:ee:1e:75:64:91:
d6:74:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:56 2025 by rpki-client