Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8ADF32CCAF11EFAD140CB0762E951A.roa
File: FA8ADF32CCAF11EFAD140CB0762E951A.roa (raw, json)
Hash identifier: eJtX5q6YmBpThpFBvJAo5JNTjn8dtHWpkTY1920lPN8=
Subject key identifier: F8:51:7C:12:F9:BF:90:1A:25:04:3A:3E:E2:69:D4:7C:17:D2:67:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8ADF32CCAF11EFAD140CB0762E951A.roa
Signing time: Tue 07 Jan 2025 04:29:27 +0000
ROA not before: Tue 07 Jan 2025 04:29:23 +0000
ROA not after: Sat 13 Dec 2025 04:29:23 +0000
asID: 984
IP address blocks: 156.232.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63984 (0xf9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 04:29:23 2025 GMT
Not After : Dec 13 04:29:23 2025 GMT
Subject: CN=677cada7-7cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:42:4f:6f:d6:a8:86:c1:c7:42:f3:1c:7b:
71:80:a8:43:f8:a4:2c:bd:9f:40:1d:86:ef:36:4d:
5f:0c:3d:5b:04:35:e2:a0:49:36:39:74:f2:9c:42:
d7:98:f9:96:ff:5b:2a:90:f8:38:19:b6:52:af:1e:
b8:a6:64:2e:e8:a8:74:16:8b:38:a9:ff:b8:53:c2:
91:83:f8:7c:d6:e9:65:9a:c4:3f:33:95:45:6c:4d:
96:77:c5:30:a8:86:86:ef:4b:be:d5:81:3f:c9:51:
d9:2a:fd:1c:5d:eb:a3:d3:96:27:fd:75:08:4e:9e:
90:93:38:c0:cb:3c:4b:30:b4:78:56:d6:fa:5f:a8:
e4:3b:ea:ba:58:1a:02:8c:0e:87:fb:e4:05:a8:b2:
40:40:ff:70:99:e3:d0:1b:38:05:67:ee:9b:29:e3:
a4:00:cd:dc:a5:22:01:bb:4b:77:6a:4a:92:0d:16:
50:34:6c:77:3a:2d:a0:d5:e6:d5:ce:15:f5:20:cb:
1e:fe:60:1e:9d:e5:45:8d:62:5b:3b:c7:98:d7:11:
d3:87:b1:9d:2a:fe:0f:ec:64:a0:69:0f:e5:2b:d2:
fb:8c:16:eb:b6:ae:62:80:1a:ae:9c:45:3f:1e:65:
90:67:87:6c:7b:ef:38:fe:8d:3b:d6:3d:37:02:7e:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:7C:12:F9:BF:90:1A:25:04:3A:3E:E2:69:D4:7C:17:D2:67:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8ADF32CCAF11EFAD140CB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.73.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2f:2a:6d:3d:37:71:fa:ec:7b:cb:7b:03:75:73:c3:22:c7:
dc:4c:9a:a1:63:03:1b:97:c3:e9:37:62:91:da:05:3e:08:9d:
2d:bc:a3:71:b9:d4:a0:88:91:df:9a:f2:9f:23:82:26:62:81:
33:e8:24:45:4a:c0:75:36:b2:1d:4e:d2:ee:dc:88:2a:5e:59:
f9:9d:96:f0:e1:55:c6:5c:c9:f4:87:6c:58:3a:f8:6f:5f:ae:
19:de:05:79:12:49:3e:bb:6e:d8:a0:9b:2a:33:d8:4a:a2:ab:
d3:2e:99:78:35:2b:e6:78:ee:fc:a4:ad:1e:d6:f3:9a:fb:27:
af:a4:f4:a7:ba:b1:59:cc:6f:3c:23:46:b2:12:f3:cf:25:f5:
54:02:18:ff:0a:f0:6e:38:f8:1b:01:83:63:77:e9:01:3b:80:
d8:5c:ec:5b:96:2a:50:fe:df:2a:3b:64:34:8a:06:54:8e:b8:
8f:51:da:f1:a2:d7:ea:a7:d6:6c:1b:be:e2:65:2c:04:d6:0d:
9e:1b:6c:86:fc:cc:0f:50:ed:71:fb:55:07:7d:59:da:e3:a0:
94:47:7d:21:b8:bf:77:47:f9:90:19:da:94:f5:61:9a:9c:b2:
98:1f:a3:16:d0:89:f4:8f:19:35:6d:43:4c:50:db:51:ec:f0:
79:d8:51:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:23 2025 by rpki-client