Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F78ECF60CCC211EFA85EFBA7762E951A.roa
File: F78ECF60CCC211EFA85EFBA7762E951A.roa (raw, json)
Hash identifier: jnJpBGmzdnmZOiY3hux1LTbNKRMDX2DDgIxwLpY67/c=
Subject key identifier: 2C:AB:16:FE:DB:1E:3B:EA:73:93:C0:EF:64:E1:E0:71:4C:5D:6B:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA3A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F78ECF60CCC211EFA85EFBA7762E951A.roa
Signing time: Tue 07 Jan 2025 06:45:22 +0000
ROA not before: Tue 07 Jan 2025 06:45:18 +0000
ROA not after: Mon 13 Dec 2027 06:45:18 +0000
asID: 17561
IP address blocks: 156.233.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64058 (0xfa3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 06:45:18 2025 GMT
Not After : Dec 13 06:45:18 2027 GMT
Subject: CN=677ccd82-9704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:11:9a:a3:c6:6e:2d:2f:0d:72:4d:be:fb:
37:de:9b:5f:28:3a:cd:a6:de:b7:3e:c7:12:cb:00:
3c:13:31:a0:b9:55:30:bc:b4:40:e6:d6:77:d7:6f:
1f:82:02:54:95:7e:0e:41:75:45:69:6a:1c:27:2d:
8a:84:f1:ba:ff:f7:0b:f7:e8:f9:58:c6:66:e9:55:
db:91:8d:ea:0e:5f:02:5e:08:fc:cd:04:33:67:45:
05:e2:9e:a9:f7:6f:47:58:5b:79:ee:71:40:a0:f3:
50:9e:cc:98:8c:99:44:db:5e:a5:7f:ef:31:7d:23:
7e:f0:66:a6:47:a4:b3:67:c8:65:ec:fc:40:57:3f:
b3:99:29:47:ae:f7:0b:bf:9d:09:34:72:dc:8e:43:
c5:dc:37:09:38:a4:61:b8:1b:9a:75:10:0b:a5:3a:
55:48:a7:16:6f:79:2d:dc:43:f8:76:35:f5:73:8c:
59:a4:f8:38:ac:15:19:75:da:b3:f6:e0:6c:a1:8d:
6c:7b:dd:b0:6c:d2:9d:8c:04:93:af:7a:97:e9:8e:
bd:6a:47:21:8f:22:9c:ce:26:f5:06:6b:fe:bf:80:
39:57:28:36:2e:4c:9e:57:59:0e:26:37:34:f6:e2:
bd:6e:64:5b:c5:72:0d:4c:88:f6:06:ab:c0:74:7d:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AB:16:FE:DB:1E:3B:EA:73:93:C0:EF:64:E1:E0:71:4C:5D:6B:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F78ECF60CCC211EFA85EFBA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.49.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4d:1c:21:d5:0e:d5:2f:07:5b:03:ce:4e:56:0c:ad:06:54:
af:93:f4:99:fd:df:69:f4:b2:e2:9d:73:24:b0:4f:2b:71:c1:
25:73:78:e9:c7:77:85:00:75:2f:12:df:a9:4e:e4:c3:6b:0e:
b3:85:ee:5c:d2:59:9e:ee:2c:e9:fc:ba:ae:39:f6:8f:4c:0f:
20:f1:63:3a:6c:f1:a7:eb:86:1b:04:45:33:90:f4:73:16:50:
5e:31:a5:5b:8d:e9:bc:ea:85:40:72:45:86:3a:c6:5e:17:c8:
92:56:ae:a8:ed:c5:43:df:0b:32:8c:01:f8:89:32:3b:f9:c0:
ff:f0:7e:87:c0:f9:f8:01:71:dd:ee:d5:5a:1e:65:09:12:f2:
c7:42:57:3d:a8:c8:4c:6e:ff:3f:6a:ac:ec:b1:75:80:7d:16:
a1:22:a0:48:5b:ea:0d:23:5f:4b:c6:3b:ae:39:1b:0e:17:5d:
59:05:4d:60:87:61:5f:42:e7:c4:6f:c5:b7:d2:32:c3:10:e0:
17:42:21:9a:c0:90:5a:71:bf:32:c6:2b:95:d7:de:9e:a6:18:
7f:30:7b:05:b5:fc:3b:78:84:56:d1:db:93:74:1b:5b:c4:d5:
d3:77:73:3e:8b:e5:f6:23:a1:7b:da:84:5e:a3:e5:0e:70:03:
2a:9b:38:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:53 2025 by rpki-client