Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF23BEF6CD5E11EFADCE6081762E951A.roa
File: FF23BEF6CD5E11EFADCE6081762E951A.roa (raw, json)
Hash identifier: mDND/WRE18HbNPwwOgazvW+yhlK6peOAI6eMNSxx8f8=
Subject key identifier: 8B:F8:C0:7B:84:7C:77:FD:B6:2A:7E:66:E1:8B:AD:B9:27:36:F6:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF23BEF6CD5E11EFADCE6081762E951A.roa
Signing time: Wed 08 Jan 2025 01:22:16 +0000
ROA not before: Wed 08 Jan 2025 01:22:13 +0000
ROA not after: Sat 13 Dec 2025 01:22:13 +0000
asID: 984
IP address blocks: 156.247.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65315 (0xff23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 01:22:13 2025 GMT
Not After : Dec 13 01:22:13 2025 GMT
Subject: CN=677dd348-9c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:64:0c:8f:49:cc:42:9c:79:4a:35:b5:e4:
1b:0e:bc:d1:a6:05:f5:67:e4:3b:ae:0a:70:fd:82:
c9:19:35:1e:b2:4e:c7:f3:7a:35:69:ac:96:a9:85:
e3:f1:5f:87:21:2c:75:8b:cd:77:e5:39:01:04:42:
48:50:53:72:1c:9f:d1:5e:e9:84:4d:51:72:44:0b:
e7:91:ee:96:b1:96:c1:20:57:99:42:96:c8:3c:83:
64:23:81:97:b1:c1:50:20:be:fb:14:cc:d8:dc:f9:
23:61:48:c7:c2:05:3c:0c:d8:eb:bf:01:e7:2d:79:
ad:a6:ac:be:1d:f6:b7:04:b2:db:d7:12:e6:30:b6:
44:66:e5:1b:0b:4e:b1:97:1e:ec:57:74:9e:f0:7d:
88:b4:e1:a2:61:5b:00:d5:9f:0f:22:e2:da:b1:d1:
91:af:38:e6:91:f0:50:6c:dd:e3:e8:bf:6c:5d:82:
71:ee:e3:2b:15:48:ae:06:62:3d:53:c6:fb:dd:bc:
47:cc:97:a0:bc:f3:7d:0f:7a:7e:95:13:b9:6d:14:
c7:60:6b:86:9a:38:79:4a:7c:3b:62:63:51:0a:8d:
7c:83:a3:ca:51:c8:ee:6e:1a:76:a3:bd:70:81:74:
45:ec:fb:b1:54:8a:a7:0f:bb:03:31:49:bd:d2:ce:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F8:C0:7B:84:7C:77:FD:B6:2A:7E:66:E1:8B:AD:B9:27:36:F6:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF23BEF6CD5E11EFADCE6081762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.89.0/24
Signature Algorithm: sha256WithRSAEncryption
53:29:1a:37:ee:8e:cf:b7:e7:c7:ad:91:c9:4d:62:5e:cc:f7:
76:e0:d8:96:12:f7:65:a9:b8:41:ed:81:a7:01:60:3c:47:ef:
90:22:12:0b:d7:c2:b9:b1:8c:32:35:2b:19:84:c2:a3:b1:9b:
15:29:ff:27:1d:8f:15:4c:4a:63:e9:2c:23:66:32:ac:9d:34:
86:22:36:ac:61:b1:a1:0e:ea:b5:d1:fe:6b:e5:b5:5f:76:e7:
07:69:d8:4e:23:1f:45:49:6c:e9:e1:3e:b3:2b:e9:fe:78:67:
67:93:51:01:d9:bb:96:8e:fd:e7:63:21:6d:0b:99:78:04:b4:
64:65:02:c5:1f:f0:d3:32:d7:49:58:c3:17:60:d6:17:f5:54:
0f:e6:62:90:df:ab:1a:04:2b:fd:f7:be:7c:37:14:23:fc:fd:
d1:8e:9b:78:44:e8:2d:5d:63:d9:5d:20:ae:62:0f:41:3d:7e:
5c:3b:50:76:3c:ad:3f:4d:82:6e:20:49:87:14:9d:d0:5b:2d:
8c:10:24:1f:50:64:41:c8:97:c1:7b:37:02:a9:f5:3b:d6:99:
a1:8d:8e:c3:4c:e4:59:88:c3:37:51:cc:22:01:32:e6:5d:14:
ea:35:a6:e1:d3:70:a7:1d:d8:fd:0f:6b:df:3f:6a:55:d7:ff:
5d:cb:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:40 2025 by rpki-client