Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F580D02ED2E911EF857246B7762E951A.roa
File: F580D02ED2E911EF857246B7762E951A.roa (raw, json)
Hash identifier: z/vRGFDiwudtiLUKPHVOg1c4qIwUDjw1HDbXAykUUOE=
Subject key identifier: 6F:42:35:D6:0C:D5:40:49:37:7E:3E:45:45:10:D0:FF:86:4C:D3:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01074F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F580D02ED2E911EF857246B7762E951A.roa
Signing time: Wed 15 Jan 2025 02:39:36 +0000
ROA not before: Wed 15 Jan 2025 02:39:32 +0000
ROA not after: Mon 03 Jan 2028 02:39:32 +0000
asID: 17561
IP address blocks: 156.226.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67407 (0x1074f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 02:39:32 2025 GMT
Not After : Jan 3 02:39:32 2028 GMT
Subject: CN=67871fe8-62df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:b7:8a:52:31:03:d4:ff:c9:61:19:89:8f:
a8:e1:0b:06:49:1d:8e:53:17:2b:09:2a:0b:75:2a:
01:54:64:8e:ce:b0:6e:31:96:c1:de:87:7f:5e:36:
64:6b:e4:8b:95:be:bc:14:13:2a:cb:bf:0f:f5:9d:
c5:77:b3:80:c3:6e:30:d2:06:ff:67:6c:d2:49:f5:
68:05:93:ff:91:a4:8b:68:66:c1:12:2a:b8:b3:10:
01:b5:32:df:64:29:ea:29:6f:97:20:5a:d7:3d:81:
0a:86:74:d2:6c:9b:b9:a8:df:c4:8b:2d:7d:cb:83:
73:bd:62:71:1b:78:b2:4b:fb:97:c0:27:b6:5b:12:
5d:a2:49:06:57:42:74:cf:93:e5:e5:ed:75:3c:38:
bb:c0:d3:7f:31:af:e8:b7:bd:92:9c:25:c3:92:a4:
b0:aa:74:4b:0c:f3:9b:f0:3d:fd:7b:66:8e:05:b8:
8f:7a:12:8b:f9:01:9f:40:4f:af:85:08:b3:1f:1e:
84:58:79:8c:eb:0f:70:2c:d4:cf:86:a8:d6:91:39:
a1:61:9a:84:6d:dc:d3:d8:fc:63:44:67:7a:d9:ac:
44:10:d5:8b:8e:60:51:56:3f:22:2a:21:47:86:0d:
1d:02:33:07:91:a1:f1:a0:68:e3:ab:3f:d6:55:68:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:42:35:D6:0C:D5:40:49:37:7E:3E:45:45:10:D0:FF:86:4C:D3:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F580D02ED2E911EF857246B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:21:3a:c8:2c:d4:83:02:79:32:c3:c1:9c:a6:55:d6:9c:40:
63:b8:65:32:c6:04:dc:aa:57:4b:97:ff:30:13:82:ab:d8:3a:
89:40:98:01:25:4a:b1:60:a8:97:58:fd:30:f7:52:d6:c4:44:
bb:3a:2a:8d:6c:0b:5b:3e:6e:7c:d6:f2:fb:7c:b5:35:5d:4e:
19:1e:cb:2c:51:77:23:d6:90:18:33:be:d1:71:ae:19:8c:1c:
df:41:d4:ae:b3:d4:16:31:a6:0e:c4:43:ed:22:fa:f7:85:8f:
68:1d:c4:ee:4b:c4:c6:53:83:47:81:ec:6a:2a:a4:8b:5e:5a:
f5:12:63:dd:e8:0b:43:45:25:59:8e:28:32:dc:f8:cd:43:d4:
fc:cd:81:68:62:09:bd:9d:f2:65:53:71:43:72:4f:e9:fb:4b:
aa:67:61:07:e2:17:0f:47:34:68:fb:e8:e1:51:33:0a:b4:aa:
f0:eb:3f:36:f2:3f:a2:9e:d3:24:b5:3e:c3:5c:ae:79:81:8d:
68:c0:64:4a:77:b5:b2:9d:c9:7b:33:a6:10:59:28:b0:65:b5:
51:a6:a9:c5:31:02:1e:80:f6:06:9b:93:87:1c:ba:42:21:31:
b9:5d:52:1c:23:68:7a:18:25:b6:8f:e8:14:7f:20:3d:5d:40:
16:10:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:06 2025 by rpki-client