Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6477728CD0911EF9C42E067762E951A.roa
File: F6477728CD0911EF9C42E067762E951A.roa (raw, json)
Hash identifier: Onz577ChFdUKGMgFKYe/7Lk+9qAvb1jLA4zyrc7Uqwc=
Subject key identifier: 07:95:5B:DB:44:B6:D2:CE:F9:1E:F1:40:EE:03:77:25:EA:5B:27:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6477728CD0911EF9C42E067762E951A.roa
Signing time: Tue 07 Jan 2025 15:13:34 +0000
ROA not before: Tue 07 Jan 2025 15:13:30 +0000
ROA not after: Mon 13 Dec 2027 15:13:30 +0000
asID: 17561
IP address blocks: 156.239.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64697 (0xfcb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 15:13:30 2025 GMT
Not After : Dec 13 15:13:30 2027 GMT
Subject: CN=677d449e-ee12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:69:d5:df:72:b0:7a:a7:bd:16:05:24:d9:b6:
89:d1:f5:d0:40:2a:18:e1:39:92:c3:3c:0e:58:4a:
4b:a2:99:26:3a:e1:a3:ed:8d:3d:74:4b:9b:6f:b6:
38:d7:60:0b:dd:69:3f:c4:52:2f:6c:4a:bc:cc:92:
e2:8b:16:ff:86:1c:8b:e5:09:7c:c4:94:ea:de:eb:
7f:34:28:31:5c:98:ec:28:b7:6c:9c:0d:4c:8f:2b:
7c:6d:6f:66:ac:5e:c3:e6:de:01:e8:91:df:8e:9e:
92:02:01:c5:ef:d5:80:c3:1c:0e:d6:64:cb:69:95:
70:5a:be:89:03:b7:3d:32:35:0f:c4:76:89:9e:36:
59:06:e2:d3:99:5d:45:83:01:8d:8b:c5:3b:5e:b5:
22:2c:ea:c2:e7:2c:5e:d9:38:53:54:8f:cd:86:59:
fb:3b:eb:e2:90:95:fe:28:d2:b1:f2:d8:4f:c8:1a:
3a:7e:7e:b4:9e:50:4b:6a:02:dc:c4:85:29:cc:90:
ad:c3:00:e9:2a:d7:5e:28:c6:e4:20:55:4f:1a:ef:
b5:6c:3c:a5:d0:c8:5a:99:59:52:34:d5:ed:6b:2a:
b4:a5:71:17:46:f9:e7:89:ef:40:b9:19:04:7c:f2:
00:1a:25:b1:08:cc:7a:4e:36:b6:25:a6:33:14:9a:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:5B:DB:44:B6:D2:CE:F9:1E:F1:40:EE:03:77:25:EA:5B:27:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6477728CD0911EF9C42E067762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.46.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:70:bc:13:5b:86:49:43:89:d7:e5:4b:42:25:40:3f:d7:e4:
d2:b5:97:fc:af:2e:64:22:73:8b:47:b5:3f:70:19:6d:b2:1b:
71:3c:36:89:3a:37:03:70:1a:82:34:22:4e:c9:ec:45:71:d2:
bc:e0:af:7e:2f:48:f7:52:23:f7:2e:d1:f9:53:39:e7:8d:96:
40:eb:cd:98:ec:0a:a9:b8:c8:13:d0:9a:63:2f:31:42:51:d2:
b4:f2:f9:64:de:fa:5c:75:35:6f:ee:2b:c4:b9:50:88:44:3a:
ab:75:6e:f8:f5:87:fb:34:01:73:19:8f:cc:3e:82:ed:b4:1a:
17:4d:82:5a:85:b6:ee:d8:a6:28:b5:92:38:cd:0d:e6:d5:ca:
f1:99:26:00:21:59:4c:da:50:66:b4:16:e0:a6:45:7c:cd:81:
66:f0:17:b8:78:c6:b4:39:59:2a:8a:cc:be:41:52:fc:12:ab:
fc:04:e0:7c:e7:6c:18:79:64:9a:3f:2e:1d:99:66:e5:86:de:
ef:73:a9:b9:0e:29:9f:40:05:0a:05:ed:11:ad:3c:5b:29:29:
71:14:f1:9c:ec:7b:3c:f5:fe:05:92:32:56:03:f7:6b:d7:a5:
a3:11:af:f1:a8:a5:32:62:d1:73:b0:1b:35:26:9b:d6:e5:36:
d5:bc:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:56 2025 by rpki-client