Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D989619CC2A411EF8A3C6F5B762E951A.roa
File: D989619CC2A411EF8A3C6F5B762E951A.roa (raw, json)
Hash identifier: P0L7+fQJHddQ81NXWKQBZQGl8VE3idUZPS4d2EfgNzQ=
Subject key identifier: 7A:12:B1:42:AC:72:D5:C4:15:B9:24:AC:97:42:97:01:F2:58:82:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E9FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D989619CC2A411EF8A3C6F5B762E951A.roa
Signing time: Wed 25 Dec 2024 09:44:35 +0000
ROA not before: Wed 25 Dec 2024 09:44:32 +0000
ROA not after: Sat 15 Feb 2025 09:44:32 +0000
asID: 55320
IP address blocks: 156.244.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59899 (0xe9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 09:44:32 2024 GMT
Not After : Feb 15 09:44:32 2025 GMT
Subject: CN=676bd403-2dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:67:aa:42:63:88:9c:ff:17:39:b0:55:e3:58:
46:64:a7:10:81:5e:44:a9:66:c5:81:9e:78:19:2e:
ab:25:81:de:46:c8:05:92:ec:b2:bf:50:54:ba:45:
bf:1e:49:02:1c:c7:c4:88:6d:cd:4c:b8:68:87:3e:
40:d4:1e:79:83:ba:4d:58:79:04:14:8b:fc:dc:3b:
1c:ac:1a:35:b7:34:b9:bb:ed:9e:3b:4b:12:92:bd:
bd:1f:8a:28:43:fb:1d:a3:d0:18:2a:62:67:46:a6:
da:7f:d8:7a:ea:e0:25:be:63:7a:6f:15:2a:44:00:
8e:12:69:68:b2:a5:87:7e:06:c0:fd:90:f0:38:3f:
eb:47:e0:3d:23:02:e9:1b:73:4c:63:7c:4d:ed:33:
06:fa:d9:00:37:a2:b9:d6:a6:c9:9c:3a:ea:60:a6:
36:19:4f:db:39:82:f5:e7:0e:74:a5:ae:a1:a6:81:
77:77:25:89:25:dd:cd:ab:a8:9c:a2:30:54:f3:97:
91:cf:f3:07:be:74:b7:58:20:28:c8:ba:ac:c4:d8:
f7:d1:97:6c:44:b8:dc:bc:4f:15:c7:2b:eb:e6:c1:
fc:26:ca:8b:4e:e2:ca:57:a5:dc:08:71:6c:41:c8:
a3:ca:79:61:92:85:a7:57:95:79:0f:74:9e:4e:dc:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:B1:42:AC:72:D5:C4:15:B9:24:AC:97:42:97:01:F2:58:82:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D989619CC2A411EF8A3C6F5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1b:19:89:76:f9:b7:46:90:1b:4d:24:d3:88:50:04:ea:6c:
2a:cd:d8:22:79:03:89:c2:dc:e4:3b:f2:2b:df:ed:50:61:0d:
3c:d1:57:48:72:a5:15:94:30:17:83:ea:45:03:b7:08:47:05:
a8:db:0a:0e:86:92:c4:4a:34:fe:7e:42:fa:7c:20:f8:0f:cd:
93:74:e4:ed:98:35:19:6a:a8:23:69:74:62:13:aa:3f:92:01:
40:0d:ee:d4:a1:c3:78:cc:92:73:48:66:ae:38:52:6e:db:73:
75:49:e6:1e:be:12:c8:9e:61:66:4b:21:b3:f9:e1:a4:df:c4:
1c:d7:4d:58:ed:54:08:79:ed:5b:81:da:d8:51:30:67:86:f5:
49:eb:5b:58:4f:2e:ad:85:2b:19:29:1e:ee:5a:10:3c:b7:33:
25:71:72:84:c4:c8:81:dc:f0:5c:ff:f5:d0:19:0b:4a:01:6e:
0f:33:93:0e:2f:bd:4f:05:13:a3:3f:af:d2:d4:d3:11:d1:80:
04:80:4b:43:79:50:e8:f5:ff:bc:60:2f:72:00:aa:6e:ca:8b:
f0:a3:64:a2:7b:fe:f5:f0:3f:56:8a:28:41:60:61:8c:c1:f8:
c6:68:0d:d4:87:71:6c:e0:62:32:13:26:3b:41:e8:6d:99:a1:
2f:39:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:41 2025 by rpki-client