Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCF377A4C32511EF8F46F97C762E951A.roa
File: FCF377A4C32511EF8F46F97C762E951A.roa (raw, json)
Hash identifier: Y/Q7Hi6bScPz7XSmFYlYuTDRNOdRh9xE8c6OnqXTxI8=
Subject key identifier: 30:2B:B4:98:E0:8D:B3:82:26:E9:C4:B9:72:44:BC:12:B9:73:91:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCF377A4C32511EF8F46F97C762E951A.roa
Signing time: Thu 26 Dec 2024 01:09:00 +0000
ROA not before: Thu 26 Dec 2024 01:08:56 +0000
ROA not after: Wed 10 Dec 2025 01:08:56 +0000
asID: 984
IP address blocks: 156.243.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60041 (0xea89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:08:56 2024 GMT
Not After : Dec 10 01:08:56 2025 GMT
Subject: CN=676cacac-7640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:d2:f1:8e:a3:24:db:da:7a:58:28:a3:7d:
01:68:3a:4f:e8:ea:30:97:a4:fc:40:de:50:97:0e:
22:0a:ed:5b:6a:cc:72:94:a7:fc:32:f0:7f:9a:d4:
8e:63:89:89:a0:27:86:a2:b4:34:a4:37:ae:6a:19:
e8:37:c9:eb:68:52:b1:2d:aa:d4:cb:d7:1f:8f:fa:
1f:93:5c:41:55:6d:1c:eb:c8:72:ee:f4:6c:56:66:
d0:45:74:e6:e7:f9:0c:bd:b3:9f:5f:bb:28:4e:20:
3e:90:be:13:3d:65:c8:19:1e:2d:12:0f:f4:ab:19:
ec:d9:d7:64:50:b1:dc:bf:0a:48:85:92:be:f8:01:
96:02:13:f8:f7:55:e7:bb:b0:61:1c:aa:02:04:f2:
de:1d:00:00:b9:40:c7:49:70:65:52:14:af:8b:b7:
53:3c:a9:dc:53:fd:bd:27:d8:da:c0:1b:4b:e8:77:
08:0a:1b:74:a6:11:d2:c5:72:cf:71:ec:a7:c7:ef:
fe:85:bf:5b:d8:d7:85:ee:53:0e:28:6a:b7:32:65:
e4:b6:05:14:32:d1:06:56:84:b4:80:aa:17:ae:c2:
c9:af:d5:3e:56:69:31:0e:b1:c4:64:ce:65:53:eb:
92:09:20:a2:ee:b7:da:ba:02:64:4f:4d:3d:e5:8a:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2B:B4:98:E0:8D:B3:82:26:E9:C4:B9:72:44:BC:12:B9:73:91:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCF377A4C32511EF8F46F97C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.131.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d7:c0:a3:e5:27:10:ae:d3:b9:e5:31:4f:17:f5:a2:f5:9f:
1a:d6:e0:4c:c8:2c:30:62:29:bb:aa:b7:e5:a9:44:3a:62:84:
56:7f:0b:5d:da:e1:6a:5f:d6:a6:0c:e7:54:93:12:aa:81:0e:
4b:08:1c:99:bf:2c:b4:68:29:d9:67:bf:09:e3:87:65:74:c0:
74:73:62:bf:6b:dc:45:1c:47:13:97:0e:e6:f6:b9:d5:17:fd:
b6:e0:5b:24:58:7b:10:13:63:b0:c1:66:4b:8e:21:45:da:70:
c9:38:21:36:31:a9:03:5f:ce:be:fd:d8:9e:13:08:6a:7d:42:
1d:21:86:ca:c6:a2:76:05:a6:e3:76:0d:e7:7f:73:c2:b8:ab:
36:3d:86:9e:9a:21:f4:d2:d6:0c:54:8f:bc:cf:a6:2d:87:b4:
b2:82:de:85:e2:07:a4:94:1c:b3:76:4e:24:2f:ff:f6:d5:e9:
0b:50:79:7f:8c:b4:7c:86:1d:6b:3e:21:f4:91:21:ca:d9:89:
2a:47:24:a2:1c:66:43:2d:c5:ad:c8:08:ae:03:a4:73:e0:db:
b7:37:4c:d2:72:6b:78:3b:20:9f:18:1d:a3:77:8e:12:a4:c9:
7b:fb:a6:84:57:ed:44:3c:cc:4e:08:33:59:81:4a:ff:9a:21:
e2:e5:78:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:54 2025 by rpki-client