Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD387360CD3211EFBC0D4A69762E951A.roa
File: FD387360CD3211EFBC0D4A69762E951A.roa (raw, json)
Hash identifier: jdLl5WpG29/VsoApDGfTtW2gzokVqmz/fe35J9/8jxw=
Subject key identifier: 4C:5D:F3:C2:96:72:E3:C9:9B:C5:01:51:DC:66:1D:DE:98:0C:D4:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD387360CD3211EFBC0D4A69762E951A.roa
Signing time: Tue 07 Jan 2025 20:07:15 +0000
ROA not before: Tue 07 Jan 2025 20:07:12 +0000
ROA not after: Mon 13 Dec 2027 20:07:12 +0000
asID: 17561
IP address blocks: 156.243.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65025 (0xfe01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 20:07:12 2025 GMT
Not After : Dec 13 20:07:12 2027 GMT
Subject: CN=677d8973-1754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:06:e3:5f:ec:0d:13:75:de:a6:3c:53:3e:
14:3f:13:40:57:ce:aa:e5:1c:40:a4:46:99:ce:cb:
6a:c6:24:b6:e5:d6:71:af:d8:f1:fa:20:42:de:91:
5c:77:a2:a3:46:f4:18:13:21:ca:7b:0e:f2:8d:03:
c0:0b:84:87:6e:0e:ad:fe:b2:fd:6a:11:17:aa:9f:
f7:7d:76:db:c2:69:40:6c:74:ce:d6:20:20:81:d0:
d7:ab:70:8f:64:c0:71:43:c2:d5:0a:3f:66:2c:78:
d2:94:f7:a8:e5:69:95:66:88:23:e3:65:c7:42:48:
40:e7:21:ec:8d:fb:1e:c8:b4:04:b8:1e:13:11:c2:
77:25:b7:74:28:fa:3d:a3:61:8a:74:ec:3e:f9:9a:
33:07:3a:7f:d9:e8:da:5e:39:7c:ea:1f:cd:e6:85:
55:b5:c4:d9:fb:e8:d0:f6:0f:b0:7b:41:7d:c5:1d:
69:79:7a:54:8c:f9:f8:63:6e:87:63:2f:b7:cf:a9:
05:e0:df:46:1c:d9:22:d4:a7:94:0a:1e:fe:cc:bb:
80:9c:15:e9:ae:a5:4f:f6:b3:99:23:44:19:37:b2:
12:64:c1:a3:4b:34:ed:71:46:cf:56:8a:88:45:de:
6e:9f:5b:0b:77:41:20:9a:f9:21:dd:b1:22:e8:a7:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5D:F3:C2:96:72:E3:C9:9B:C5:01:51:DC:66:1D:DE:98:0C:D4:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD387360CD3211EFBC0D4A69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f1:8f:bc:98:32:ef:ac:be:57:e0:22:d7:2b:c4:07:2b:e5:
4b:71:32:dd:33:57:e7:07:93:8d:9d:e8:f7:fd:8b:56:94:53:
6d:aa:7c:e7:c7:0f:cb:78:37:d2:43:38:f4:d1:31:19:0d:49:
14:9f:69:bf:03:01:1e:8d:df:f8:78:65:14:0d:ea:8e:5b:9d:
ec:0c:c4:61:fb:28:5c:36:91:8c:89:ca:c8:5d:5a:34:d3:39:
01:0e:91:ff:0e:bf:da:ce:c4:43:08:c7:8c:40:f0:05:9c:71:
50:9b:03:bf:fc:eb:f5:0b:d5:c9:6f:09:13:62:60:8e:0d:75:
39:89:22:b5:a0:fb:43:8f:c0:6f:5b:64:11:78:f4:23:6e:e4:
2d:da:ff:dd:14:ca:c9:d7:3f:be:1a:32:3c:72:75:d8:23:01:
59:6a:07:52:c6:49:91:e4:5f:cb:c3:46:e2:5c:fe:29:04:a6:
03:e1:f5:76:b5:d5:92:1e:f3:e7:7a:07:01:df:60:42:72:20:
48:b6:c8:b6:79:7f:19:e0:f5:e4:5b:47:30:b9:8b:3a:30:1a:
45:e4:7c:58:eb:b2:d3:0c:55:6f:9a:31:44:26:ad:19:51:94:
33:b9:38:e9:86:e5:b1:a8:3b:31:64:d0:f4:b5:bd:97:c3:94:
a1:02:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:38 2025 by rpki-client