Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0A0EB6AC2A511EF8EB61562762E951A.roa
File: F0A0EB6AC2A511EF8EB61562762E951A.roa (raw, json)
Hash identifier: qY+cARVJPvQt7kqkO6D15izuo1tZXHEUyZ+a0OoL998=
Subject key identifier: 3F:8F:93:01:CC:C8:DE:60:AA:0F:99:18:BE:AB:41:D5:47:F8:14:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E9FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0A0EB6AC2A511EF8EB61562762E951A.roa
Signing time: Wed 25 Dec 2024 09:52:23 +0000
ROA not before: Wed 25 Dec 2024 09:52:20 +0000
ROA not after: Sat 15 Feb 2025 09:52:20 +0000
asID: 138915
IP address blocks: 156.244.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59903 (0xe9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 09:52:20 2024 GMT
Not After : Feb 15 09:52:20 2025 GMT
Subject: CN=676bd5d7-9f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e5:89:e8:46:35:51:f8:61:aa:51:67:55:46:
e8:db:f7:55:e7:2d:14:4d:2c:56:47:c2:6a:39:c9:
31:3c:49:5d:b7:b7:6c:0a:56:b6:b4:10:cc:87:f7:
e1:3e:d0:f6:d7:19:16:78:a5:d3:64:38:11:63:a7:
a2:ee:db:1f:37:a0:17:19:af:86:86:d5:fd:e7:1c:
cb:10:9b:91:36:74:50:c4:ec:91:09:73:8d:d9:0b:
9a:70:84:9c:00:1c:dc:03:aa:39:b9:7a:0e:99:3e:
6d:22:b1:7f:c4:26:af:53:32:5b:a3:4e:12:63:02:
56:1f:bd:19:13:01:61:4c:73:f9:cf:12:38:e5:3d:
74:99:70:ea:58:54:24:e8:a7:6a:69:10:c8:f4:fa:
8f:07:77:c2:48:76:4b:df:09:63:aa:05:c2:e0:36:
d7:70:20:af:f8:63:5f:1e:81:46:d4:1c:0a:af:93:
da:61:51:47:ed:3b:fe:e8:f8:e9:38:f2:f9:2b:3d:
50:9b:91:c0:37:96:2f:92:4c:ba:4f:7f:7a:b9:b1:
e6:6b:b5:b3:24:a7:f3:d2:2d:2b:22:83:db:0a:31:
29:39:cf:0e:f2:3e:85:e1:f3:89:7f:9b:c6:01:a6:
a0:80:22:0f:1b:46:7e:b7:1d:b0:a1:46:ee:0f:cb:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:93:01:CC:C8:DE:60:AA:0F:99:18:BE:AB:41:D5:47:F8:14:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0A0EB6AC2A511EF8EB61562762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c2:3a:52:31:43:f8:59:e9:bb:d8:92:5b:01:d5:bd:cf:29:
61:4c:0b:0d:69:b6:91:b7:76:c0:7e:5f:d1:70:c6:ad:4a:1d:
a1:79:c0:5a:94:3b:ad:10:93:11:05:7f:31:19:ab:f0:72:0a:
64:ba:9c:a5:d3:06:61:98:6b:ea:4f:4a:7a:f3:99:fd:bf:0d:
22:00:75:8e:26:f8:26:78:50:3b:a1:ab:5a:b9:76:84:0f:55:
2e:97:dc:23:27:cb:cb:de:01:0f:05:99:c5:85:06:32:b7:ef:
c5:d2:9c:a7:91:32:c8:79:a8:d0:92:f1:41:3a:03:59:03:b1:
03:96:fa:b1:2a:31:6f:cf:53:e6:da:9e:16:c8:50:44:2f:ef:
0f:14:48:70:d7:3d:38:4f:e1:28:af:99:6e:e3:9e:85:52:94:
5d:f2:1c:71:c0:5e:3f:b2:f6:cd:36:fb:dd:9b:1d:7a:0a:b9:
c2:b0:2b:96:91:28:26:ed:ae:66:fc:d0:1a:a9:15:3c:6a:6e:
fe:b5:c1:36:b0:8a:f5:e9:82:ad:51:d9:76:16:96:c0:6f:e4:
7b:6c:2d:a8:62:fb:22:74:fd:56:bb:f7:66:79:09:63:3d:eb:
f1:e5:ba:cb:77:c9:a0:b5:30:8e:41:fb:4b:57:cb:48:c1:c8:
f0:5d:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:16 2025 by rpki-client