Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F250D3EECD7211EFAF33E794762E951A.roa
File: F250D3EECD7211EFAF33E794762E951A.roa (raw, json)
Hash identifier: tdNdBesv5xpfa60+viW/mfrkV8eIwEii5Lo+nPF2Rsk=
Subject key identifier: 58:4B:1B:FE:2E:AE:A6:9B:9C:7B:28:34:39:93:62:D9:73:5D:14:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F250D3EECD7211EFAF33E794762E951A.roa
Signing time: Wed 08 Jan 2025 03:45:05 +0000
ROA not before: Wed 08 Jan 2025 03:45:01 +0000
ROA not after: Sat 13 Dec 2025 03:45:01 +0000
asID: 984
IP address blocks: 156.248.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65433 (0xff99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:45:01 2025 GMT
Not After : Dec 13 03:45:01 2025 GMT
Subject: CN=677df4c1-29f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:55:96:c5:ba:be:0e:15:68:b3:79:3d:3d:
f4:00:1e:cf:2a:32:e9:31:27:ea:a4:70:74:d9:3b:
06:61:b1:b6:e8:f2:92:1f:2a:7d:9c:16:9a:54:a5:
b9:54:1d:ab:b7:ca:ed:2f:1f:6b:d4:ba:c5:49:1c:
b9:c1:3a:83:d8:2d:8c:42:52:25:8d:72:3e:28:a7:
f4:66:29:51:77:99:22:e9:77:2a:81:08:fa:44:4a:
9b:55:2e:c6:f2:52:ca:e3:57:b4:05:b9:a5:0f:bb:
a3:20:c8:e5:66:30:6f:c7:42:e2:67:e1:0c:9a:93:
31:8f:ff:9f:87:f0:46:d7:20:64:b5:c8:dd:8b:5d:
c3:3a:e6:a1:05:eb:03:9a:3a:dd:1d:84:18:64:1f:
a5:5d:04:f5:6c:a5:c3:00:62:02:3e:8d:05:be:fc:
5f:70:86:ba:d9:15:e1:f6:8f:92:ea:b3:b7:b1:1c:
85:54:65:c6:04:e1:ad:01:67:8d:a5:b5:71:e0:16:
de:97:be:3f:60:72:eb:e2:ca:96:65:04:5c:83:14:
7b:bf:3e:f0:35:61:0e:05:3c:9b:9e:c3:f7:16:15:
82:81:14:7e:2d:f7:bc:f4:4e:84:c1:d8:13:24:48:
25:2d:db:7e:ce:24:5c:a5:0e:e8:c3:8f:f7:e8:cc:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4B:1B:FE:2E:AE:A6:9B:9C:7B:28:34:39:93:62:D9:73:5D:14:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F250D3EECD7211EFAF33E794762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.70.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:52:1e:5d:ae:df:40:e4:73:86:b9:db:27:d4:ab:6e:f7:64:
3c:10:59:60:90:f9:87:18:87:fd:82:41:64:6a:64:b4:7b:dd:
a0:54:67:ea:b3:5c:af:a3:2a:98:ed:6a:7e:da:6a:4c:05:e8:
1c:e8:e7:72:55:c1:32:6a:28:72:16:e5:40:17:ba:5d:f2:26:
a9:9b:d8:9e:4e:c1:1f:56:92:cd:5f:16:6c:d0:39:be:6b:bc:
b6:9a:dc:44:87:30:31:f5:90:56:31:c0:4e:89:d4:da:76:d8:
ee:43:13:a8:d6:99:7c:b4:20:15:76:c3:93:f7:4f:33:2f:32:
49:51:24:16:2a:6c:05:d9:f4:e5:90:75:7b:ca:2d:e4:ae:53:
0f:ca:16:a0:f4:b2:a8:33:35:f5:8f:94:45:7e:23:7a:b7:b5:
a3:33:38:c8:12:c0:f3:b0:f3:ef:d2:99:f6:f3:ea:ce:86:12:
f7:27:87:c4:76:90:dd:d1:cc:6d:b0:cd:13:fa:71:87:ef:82:
e6:b1:fc:69:21:44:80:ae:b1:f7:ad:59:77:69:7e:2f:50:c5:
17:1f:8c:88:ad:2a:47:cf:a0:82:80:5a:63:7b:5c:6e:81:32:
cb:ca:60:13:32:49:ed:00:db:70:b2:f3:c8:68:b7:bc:9a:59:
4c:15:aa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:27 2025 by rpki-client