Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D79E52C0C32611EFAC984684762E951A.roa
File: D79E52C0C32611EFAC984684762E951A.roa (raw, json)
Hash identifier: HbZTnWEutxaAXoXvDDX44lhCbs6DT4Q7eITe2y2wO9c=
Subject key identifier: D0:5D:8E:18:84:48:B6:40:BE:FF:22:AA:78:D1:31:57:AA:AF:32:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D79E52C0C32611EFAC984684762E951A.roa
Signing time: Thu 26 Dec 2024 01:15:06 +0000
ROA not before: Thu 26 Dec 2024 01:15:03 +0000
ROA not after: Wed 10 Dec 2025 01:15:03 +0000
asID: 984
IP address blocks: 156.243.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60051 (0xea93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:15:03 2024 GMT
Not After : Dec 10 01:15:03 2025 GMT
Subject: CN=676cae1a-7206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:83:b0:9b:56:28:ab:b7:85:5a:27:ca:a7:
8c:07:82:90:b2:ad:b4:83:27:74:2c:ee:ee:fd:02:
ae:60:7a:da:31:16:0b:10:1d:49:f2:8f:c8:32:cc:
a0:d8:d2:9e:d4:6f:8e:d7:8e:5d:86:fa:91:a4:ca:
b1:bd:d1:c4:4f:2a:e0:23:9f:ba:7c:26:6b:14:27:
5b:2f:37:7a:16:6b:6e:f8:6a:51:62:1e:50:ee:cc:
eb:be:65:99:b0:52:55:c5:c5:73:b8:32:24:eb:86:
94:05:45:56:35:15:47:ab:1e:92:ed:cd:32:cb:28:
f0:37:a5:43:ca:b6:6f:3a:80:54:82:cf:8a:c4:e2:
6a:e7:50:ea:71:93:c3:5b:2a:06:60:bd:03:cd:b4:
a1:02:a6:62:6d:f8:af:0e:2e:04:5c:25:4c:e0:28:
38:29:d2:09:04:e2:e0:85:b7:9c:f1:25:14:64:c6:
09:e2:7c:ab:4f:11:be:21:cf:47:bc:61:35:f6:1f:
13:06:4b:50:fd:48:46:b2:a9:1a:96:07:3f:8a:6b:
cd:cf:5e:1d:bb:fa:34:90:c2:57:27:e4:55:36:7e:
b3:87:29:e9:60:d5:43:0e:96:61:22:ee:07:fe:51:
1a:d5:6d:1e:e3:29:da:b8:f6:8f:52:93:42:dc:12:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5D:8E:18:84:48:B6:40:BE:FF:22:AA:78:D1:31:57:AA:AF:32:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D79E52C0C32611EFAC984684762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.137.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e4:83:b1:2b:07:33:9c:12:b0:94:e6:e7:a6:aa:cf:f7:2d:
de:8e:f0:f1:ff:9c:cd:2b:58:58:70:37:eb:48:dc:3d:02:d2:
13:66:6d:8a:52:c0:c3:88:b5:a0:61:72:39:d7:5b:d1:fa:2f:
70:03:36:23:27:27:52:da:32:ae:b6:0a:be:62:1e:4d:c1:f0:
75:c8:d9:72:52:cd:e1:52:31:25:ab:13:73:7a:b9:48:4c:57:
2c:57:76:e4:8c:d0:c5:b3:d8:a8:66:9a:06:73:4f:ba:e0:53:
fa:32:fb:27:99:31:27:45:51:28:7b:e8:56:c3:32:54:b9:33:
9e:f0:28:7b:e4:f2:8c:bb:37:bd:77:38:be:13:18:b7:bd:21:
6d:80:e0:58:76:cb:e3:c2:98:ae:4b:fc:a9:f1:d5:4b:7b:99:
2a:3e:7c:df:80:89:d0:03:16:ea:4f:3e:f6:42:1f:b4:b0:97:
c9:65:fd:5a:c0:00:7f:03:e4:58:de:01:94:0a:ea:20:3a:ab:
40:e1:b1:95:c2:2b:2f:a6:b2:0e:d3:45:60:b6:93:0a:09:ef:
1f:68:bf:47:38:8d:6e:7f:df:5f:f7:88:1a:84:dc:5f:d6:f8:
20:2d:25:5f:99:77:0f:c2:31:34:a0:2c:79:11:43:54:84:72:
b8:e3:66:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:46 2025 by rpki-client