Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/833F8A2ACCD411EF85F06997762E951A.roa
File: 833F8A2ACCD411EF85F06997762E951A.roa (raw, json)
Hash identifier: SFSdHqSqI2DupBKbT90nYG499lMbtHBNSKhLLUGnrQE=
Subject key identifier: 73:7C:AE:7A:A7:8F:F0:3F:41:5C:16:B3:8B:37:14:3F:0F:8C:D5:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FAF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/833F8A2ACCD411EF85F06997762E951A.roa
Signing time: Tue 07 Jan 2025 08:50:58 +0000
ROA not before: Tue 07 Jan 2025 08:50:54 +0000
ROA not after: Mon 13 Dec 2027 08:50:54 +0000
asID: 17561
IP address blocks: 156.233.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64242 (0xfaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 08:50:54 2025 GMT
Not After : Dec 13 08:50:54 2027 GMT
Subject: CN=677ceaf2-f1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:6a:ec:00:7b:f0:ac:2d:7b:c2:87:ac:e8:
75:9c:8e:65:18:07:6a:ea:8a:02:4c:b3:c1:c1:24:
5c:77:40:15:78:d2:4f:6b:01:c6:b7:16:c8:7d:0f:
39:0a:2d:aa:03:18:0b:64:76:62:f7:2a:92:09:90:
c4:e9:0e:11:32:08:c6:d0:e8:b5:34:d0:0e:14:38:
aa:5f:99:16:5c:34:d9:14:51:83:9e:90:6e:c9:fb:
e8:3e:2b:67:e4:24:dc:ce:9a:43:36:c4:dc:4a:46:
07:96:f4:e0:48:24:3a:7c:ef:43:36:6f:ff:3e:65:
39:11:26:a4:19:2c:f4:51:00:8a:f5:e5:90:5d:ae:
d3:89:4d:07:ec:da:12:10:80:7d:5a:48:10:c0:91:
e4:45:eb:4a:42:77:bd:1b:90:7a:0f:67:b4:56:81:
df:2e:cb:51:cb:74:fd:9e:ad:ec:67:f9:65:8c:00:
92:64:b2:db:af:f1:25:b5:79:c0:82:d2:f4:31:fe:
e8:43:52:76:68:ec:a4:66:ad:0e:60:3b:a7:49:80:
ab:08:f3:ae:9e:32:cc:69:d1:37:de:86:0f:57:7e:
6c:10:ca:b8:90:1b:eb:1c:2c:74:c5:36:bd:c4:f1:
61:0f:ed:dd:d2:af:de:9f:59:e0:1c:d7:07:56:e7:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7C:AE:7A:A7:8F:F0:3F:41:5C:16:B3:8B:37:14:3F:0F:8C:D5:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/833F8A2ACCD411EF85F06997762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.168.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8a:16:b4:01:6d:1c:1b:8f:50:a0:2b:a7:1a:70:30:25:3f:
78:69:5e:58:a4:f6:ac:c9:c9:1b:51:c0:8d:d3:b4:56:31:0d:
01:f9:8f:08:c4:0e:a5:e3:4e:69:65:e2:d7:af:29:a4:b8:83:
3b:bd:56:c9:03:70:08:2b:41:0a:1d:bf:a2:3a:0e:db:6e:72:
53:30:b6:21:8a:d5:80:06:aa:ce:ba:20:3b:df:34:85:d7:36:
f9:3d:0c:cf:d6:6e:84:c5:82:57:4e:73:ea:b0:6d:1f:b0:a5:
66:0f:52:e6:96:e5:98:47:ca:3b:ed:92:ac:cc:41:42:ed:ba:
17:13:84:88:18:54:84:05:e5:0c:4e:f8:d2:45:bd:9b:a2:e9:
fd:ec:9d:a9:a2:eb:32:8c:4f:1a:2c:14:8a:f5:b5:81:5a:5c:
a2:ac:e5:73:04:ee:21:1a:45:f5:35:fb:70:4b:93:12:6c:f6:
ef:5d:1e:d0:58:bf:3d:3f:93:52:00:e4:aa:8f:f7:31:f5:c2:
aa:2b:63:29:22:ff:37:1c:a2:d7:22:7b:09:92:94:fb:e2:8b:
0b:db:23:17:3c:25:60:dc:35:91:67:6c:bd:0d:c7:bf:04:21:
da:87:ca:c2:72:4f:a0:35:7a:32:29:92:a5:c2:a4:58:57:1b:
a0:fc:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:22:04 2025 by rpki-client