Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F769317CCE3611EF8B66EA75762E951A.roa
File: F769317CCE3611EF8B66EA75762E951A.roa (raw, json)
Hash identifier: lOAFjFx2YwzwQywlM5ElAOwBtP3HjJMgO+RbStSdHUg=
Subject key identifier: AC:A7:CB:7C:99:65:D6:55:88:CC:75:30:88:87:D9:E6:29:B3:DE:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010227
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F769317CCE3611EF8B66EA75762E951A.roa
Signing time: Thu 09 Jan 2025 03:08:15 +0000
ROA not before: Thu 09 Jan 2025 03:08:11 +0000
ROA not after: Fri 09 Jan 2026 03:08:11 +0000
asID: 17561
IP address blocks: 156.247.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66087 (0x10227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 03:08:11 2025 GMT
Not After : Jan 9 03:08:11 2026 GMT
Subject: CN=677f3d9e-07eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:bf:82:38:ff:de:35:18:f7:62:89:5e:7f:
78:08:e4:8b:32:94:70:de:cb:86:a9:88:77:11:1b:
ad:8e:5c:48:c9:8e:e7:95:49:19:84:bb:87:ea:ae:
00:81:97:6b:76:f2:92:7c:45:da:66:72:97:40:7e:
d3:83:a6:46:83:ff:00:64:1b:f4:9a:70:2a:f4:66:
7c:42:b8:36:9b:7c:32:94:dd:ed:b0:1e:23:cd:bb:
8d:1e:16:ff:86:35:4b:26:42:9e:b8:03:42:88:69:
3e:cd:d2:9d:74:be:9f:5b:61:4e:fd:e5:f7:fb:2f:
dc:cd:d9:ac:a7:9c:44:0b:26:de:6f:5e:30:ff:82:
28:0e:ca:35:2a:cd:ee:a2:dc:95:bf:3d:68:04:a5:
f1:4c:10:89:b5:99:31:b8:e5:d6:42:5c:e6:be:41:
94:f3:c6:fa:38:e5:73:77:56:8b:2a:37:4c:95:92:
70:6d:4c:3c:64:90:87:4a:64:64:97:7f:44:86:6f:
56:17:20:6d:95:ef:6a:1c:f3:f3:54:2b:5f:d7:1c:
cb:30:62:2e:4d:07:78:37:d4:99:67:a3:0e:99:c9:
c0:c8:90:73:21:11:89:55:7b:05:5a:eb:e8:70:10:
4a:20:bc:5e:7a:f5:69:cd:9a:81:6d:76:c5:9e:62:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A7:CB:7C:99:65:D6:55:88:CC:75:30:88:87:D9:E6:29:B3:DE:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F769317CCE3611EF8B66EA75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.39.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e8:dc:fa:ca:f6:f6:8c:23:74:50:81:10:5f:b9:d9:17:19:
1b:9b:0d:7c:54:0c:46:3c:2c:8b:b0:f9:7b:67:c0:97:ba:8a:
9e:2a:02:45:57:a7:33:c6:93:2e:55:8b:5b:71:98:a3:8e:d3:
be:ef:5a:28:61:40:07:25:b3:96:e5:8f:b9:8a:e5:05:d5:88:
7a:31:22:fa:4e:cb:24:3c:bc:68:71:5d:82:1e:9a:34:a7:c6:
5f:84:f5:51:51:30:5e:6b:af:60:95:5c:11:41:5c:65:f0:c0:
7d:ad:94:e1:b6:a7:a0:36:7d:14:b2:a8:1c:46:f5:fa:b3:c3:
f6:4b:3e:09:b6:f2:8f:a5:1b:f0:4c:25:c3:85:61:7a:c5:2f:
32:b0:6f:74:b6:c3:de:cb:de:8e:b9:51:9c:1e:86:3f:cf:70:
55:36:63:20:99:f0:f9:8a:9a:3c:d2:4c:8e:c0:59:36:d0:35:
23:5b:bb:ec:11:5f:b9:2c:69:a0:f6:7e:fa:30:d2:17:93:0e:
e6:89:16:8a:54:72:8e:93:c8:e7:3a:50:c0:33:30:8c:fd:c6:
cf:a9:d4:b4:4e:e7:bb:f2:1d:fd:99:e9:9c:82:5e:dd:04:de:
21:8f:9b:02:0b:ea:bc:d1:a4:5d:40:e3:e8:08:1d:5a:80:39:
d8:4f:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:49 2025 by rpki-client