Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEC70448C33F11EFAC9C1DB4762E951A.roa
File: DEC70448C33F11EFAC9C1DB4762E951A.roa (raw, json)
Hash identifier: 1qVffe9gYYbIK3GJ0lMp1Jui9yaVh3bpL7cWHmNcX0g=
Subject key identifier: 11:B8:D7:4B:92:25:37:2B:55:D9:15:05:9B:DB:CD:89:98:9B:F8:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEC70448C33F11EFAC9C1DB4762E951A.roa
Signing time: Thu 26 Dec 2024 04:14:16 +0000
ROA not before: Thu 26 Dec 2024 04:14:12 +0000
ROA not after: Wed 10 Dec 2025 04:14:12 +0000
asID: 984
IP address blocks: 156.244.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60349 (0xebbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 04:14:12 2024 GMT
Not After : Dec 10 04:14:12 2025 GMT
Subject: CN=676cd818-5fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:80:7f:22:ee:0c:46:6f:93:72:21:bb:e6:
20:43:59:37:33:e8:d8:cc:d3:d7:00:9d:17:5f:f7:
ed:35:73:27:fe:ca:9b:94:5b:3e:4c:0e:69:c5:19:
28:47:ad:f4:78:06:cb:b0:8b:fb:f9:44:e3:bb:c7:
2b:69:1a:67:58:db:51:a3:50:aa:7d:18:8d:31:d5:
b0:01:75:9d:25:e3:d2:72:53:a5:b8:f8:c4:70:a1:
3a:ea:e9:fb:32:b7:5e:f7:a0:e1:6e:d8:44:9a:b9:
7b:cf:3b:4d:90:85:4a:78:d3:ee:d3:c4:d7:0c:03:
14:fb:f9:a4:c8:0b:a2:76:ee:81:3f:47:18:a2:51:
d4:d0:29:77:ab:c1:aa:e3:aa:61:05:9f:ff:62:2c:
b8:3a:13:10:20:3f:4d:3b:ce:db:6f:9f:ff:5b:d4:
89:a6:a6:04:ff:22:d1:d6:0d:4c:80:02:4e:fe:f6:
e3:33:69:86:a2:51:b0:26:04:3b:b0:ac:c4:9d:e1:
74:56:8b:25:05:e0:37:af:23:1c:19:88:2e:57:a2:
8f:ae:e7:5a:f8:b0:29:b1:4f:b8:3a:be:d7:52:ea:
b9:4a:a8:52:32:47:76:84:c8:c8:b9:05:2b:c3:14:
ea:b8:fa:f7:37:7d:7c:df:9b:1e:e3:cb:f8:3c:72:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:D7:4B:92:25:37:2B:55:D9:15:05:9B:DB:CD:89:98:9B:F8:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEC70448C33F11EFAC9C1DB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.218.0/24
Signature Algorithm: sha256WithRSAEncryption
51:57:ee:50:78:ff:87:2a:2e:fd:5a:b6:b2:ae:8b:20:8b:f7:
ca:90:ac:9d:1b:27:a1:36:c9:95:f7:45:06:a7:24:6d:4f:f4:
f5:57:f3:d5:77:04:c0:5d:55:69:33:db:06:77:75:af:0c:a1:
03:39:d2:97:a1:66:c8:80:8e:ec:94:5f:4e:b0:17:73:d0:5d:
63:9b:42:c9:d1:67:c6:a3:26:21:56:16:a5:a6:d9:54:8b:83:
3a:5b:56:fb:95:34:7b:29:11:b0:28:29:40:68:8e:fe:6e:cb:
75:b6:2c:81:f5:3c:a1:20:19:42:e2:b1:78:87:d6:4b:c2:3f:
65:a2:e6:fd:a2:b5:5d:ab:81:67:84:51:12:91:7b:c6:f2:26:
6b:b9:b7:82:0b:6a:93:0b:14:29:b4:10:73:9b:c4:dd:e5:b8:
37:90:f6:da:0e:1f:86:a4:e1:dc:44:a4:49:0e:bf:1c:f2:3c:
e8:15:af:5f:9a:e8:13:aa:d7:70:08:35:9c:b6:47:f4:3a:0f:
5d:80:9b:f4:a8:66:be:41:06:cb:c7:52:8d:1c:79:c0:cf:97:
4c:68:da:cf:63:ee:20:ab:dd:c8:5f:de:85:20:bf:65:8f:79:
26:0f:5e:c4:8d:2e:48:9b:29:90:68:bf:70:92:7a:18:3a:13:
77:6e:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:43 2025 by rpki-client