Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8A5340C33211EF8DD1F25D762E951A.roa
File: FA8A5340C33211EF8DD1F25D762E951A.roa (raw, json)
Hash identifier: 3mEGdKBcqLg+0gvLNbMBM51x3WQkrjZbHP70JtDoOIo=
Subject key identifier: EA:69:74:CE:DB:DB:41:2B:D6:30:71:7E:70:46:07:5F:A1:DF:EE:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8A5340C33211EF8DD1F25D762E951A.roa
Signing time: Thu 26 Dec 2024 02:41:59 +0000
ROA not before: Thu 26 Dec 2024 02:41:56 +0000
ROA not after: Fri 10 Dec 2027 02:41:56 +0000
asID: 17561
IP address blocks: 156.244.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60197 (0xeb25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:41:56 2024 GMT
Not After : Dec 10 02:41:56 2027 GMT
Subject: CN=676cc277-c315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:ef:82:a6:47:8a:ff:a4:ef:a7:d7:5b:4a:
97:63:84:14:95:cb:2e:1d:73:57:1e:1f:f7:57:68:
10:86:36:b3:aa:5e:f6:ec:0a:0e:9f:d6:20:5e:62:
73:2e:5c:e2:70:d3:72:80:6b:9c:a5:71:72:dd:a2:
11:cc:70:7d:ec:e0:e1:20:51:09:be:62:a7:37:7d:
8f:8c:e3:a8:b3:37:b1:8e:f9:6f:0e:bf:d7:db:d7:
db:a5:06:19:b1:49:44:00:f6:93:26:34:f8:ba:9c:
1c:69:e2:ef:e2:c2:07:6d:df:2e:91:7b:4c:1f:ea:
59:92:3c:d1:23:2f:30:6c:ad:7f:14:c1:0a:87:00:
dc:50:4e:eb:39:f9:fb:50:81:d0:ea:46:0d:b2:fe:
0e:ff:2f:ae:d4:bd:03:af:fc:bd:12:f5:5f:52:3a:
33:39:91:cb:bb:92:c7:b6:37:65:f1:b1:d7:f2:3d:
b3:fa:1b:05:9a:2e:ed:29:1a:36:47:f0:51:e4:a0:
87:97:39:76:33:61:b1:5a:0d:a2:14:d2:51:eb:fd:
28:17:8e:d3:66:d8:16:b3:98:4e:32:ff:8b:ed:fb:
65:a4:44:2c:45:59:b2:2c:63:cd:e0:60:b3:55:41:
8e:84:b0:f6:6d:11:2c:c9:cc:11:a9:e1:26:5e:b5:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:69:74:CE:DB:DB:41:2B:D6:30:71:7E:70:46:07:5F:A1:DF:EE:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8A5340C33211EF8DD1F25D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5a:53:f9:62:8f:13:4f:3b:43:31:0e:78:e9:57:0d:d0:3e:
a6:61:c8:1f:d7:7a:43:d4:69:49:ca:39:be:e3:bb:3e:cd:db:
c4:bd:bf:2d:1a:cb:6d:63:dc:d4:32:07:8b:b2:c8:e6:6c:e3:
c0:bb:e9:de:f3:2e:6f:5c:6c:a5:41:eb:72:96:de:ce:f2:af:
d6:02:35:59:4f:b6:eb:e6:e4:54:68:c0:cb:5e:7a:1d:ec:d4:
5c:10:8a:2c:26:ea:db:61:41:94:27:9e:c2:a4:84:1b:d9:ff:
5b:6b:cc:cd:13:c6:43:1b:9c:92:21:0d:a2:c0:d8:f5:a0:a5:
45:b5:6d:8a:25:93:6b:80:6c:49:39:09:32:0c:58:c6:06:5a:
d3:13:19:0d:fb:91:a9:86:9f:0d:c1:a9:68:73:8b:01:bd:9d:
94:04:53:24:38:94:57:b6:9b:68:fd:f4:53:30:8e:b4:d0:5a:
00:42:77:60:b8:03:b6:32:0d:d0:78:11:f0:07:ec:32:ee:2d:
0f:73:2c:3f:f1:25:8c:85:b4:fd:3d:07:27:1c:db:8a:4d:93:
87:e2:6f:c0:6d:58:ad:33:1b:30:29:6e:76:29:e8:85:d2:ef:
e5:6b:c5:40:ac:a8:23:a4:4c:2e:28:dd:e5:9c:09:f3:42:cf:
9f:3e:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:01 2025 by rpki-client