Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B82030C33111EF81551856762E951A.roa
File: F2B82030C33111EF81551856762E951A.roa (raw, json)
Hash identifier: MmUQvQar+Uj52rHyuanvgY3RlFKmZa3BUZFZ+7Hqf2M=
Subject key identifier: 12:38:B3:DF:04:52:FD:99:6A:28:35:91:E3:B0:EC:1D:F1:E3:8D:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B82030C33111EF81551856762E951A.roa
Signing time: Thu 26 Dec 2024 02:34:36 +0000
ROA not before: Thu 26 Dec 2024 02:34:33 +0000
ROA not after: Fri 10 Dec 2027 02:34:33 +0000
asID: 17561
IP address blocks: 156.244.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60185 (0xeb19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 02:34:33 2024 GMT
Not After : Dec 10 02:34:33 2027 GMT
Subject: CN=676cc0bc-df0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:0f:51:7a:f0:e9:df:ea:6b:c8:fd:c9:59:
7b:56:ec:f4:85:73:86:ed:ee:89:14:ee:02:7c:8f:
3f:d9:9a:a3:6d:59:ca:01:28:f0:3a:ae:d8:e4:3b:
37:8b:29:e2:e3:f3:b3:1b:86:7d:31:05:5b:30:0e:
bf:4a:8a:c4:0d:a6:52:0f:c3:09:dc:7b:23:4b:51:
56:ac:61:d2:d8:b9:ab:a5:36:8c:db:e7:fd:87:10:
31:b3:b8:7f:8a:f1:8a:58:06:3d:6d:cd:fb:91:2a:
cf:e6:d1:f5:d1:98:22:d2:c3:d2:b0:1c:0c:56:90:
fc:e1:c0:6b:73:c9:2f:e8:eb:88:25:c9:62:db:c8:
e3:81:96:b2:07:0d:78:ac:2c:d8:7f:57:0e:e1:8b:
b0:37:df:f1:64:94:1e:83:c3:b4:02:22:85:73:00:
3d:12:21:9a:8a:14:e6:b6:0c:59:87:10:8b:d1:c4:
9c:53:c8:8b:41:d5:11:a0:39:81:b2:7d:17:9c:5b:
d7:02:13:a0:7a:52:d3:c0:f6:8a:34:44:57:08:98:
6c:69:51:f3:28:38:ad:99:3d:c8:7f:3d:c7:f1:f1:
c3:06:82:fa:e5:4b:75:87:62:f2:a9:fa:7c:bf:61:
56:21:de:e2:ec:a8:5b:9e:d7:3b:9c:58:de:de:f6:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:38:B3:DF:04:52:FD:99:6A:28:35:91:E3:B0:EC:1D:F1:E3:8D:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B82030C33111EF81551856762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9d:3f:af:19:9b:23:c6:fb:69:78:52:22:10:41:9c:42:af:
e2:3f:47:f3:a6:61:da:c3:6d:de:c2:db:54:1a:d1:01:bc:0c:
8a:6a:1a:cc:95:c1:52:f8:e8:fa:d1:36:c4:3c:67:1b:0b:f5:
2b:73:0a:cf:5c:21:d6:56:20:4e:db:c1:8d:ca:66:f9:7e:02:
6d:30:90:c8:0b:02:70:a3:bf:64:1b:87:fd:05:a7:fc:df:56:
19:57:fc:f8:1e:87:0f:d8:2a:c2:d7:ab:29:e5:8e:e9:c4:79:
8e:e9:8d:21:f6:34:fa:60:a2:34:d7:7e:5a:f5:a4:dd:04:a0:
81:4b:f7:dc:36:44:cb:7d:c3:2b:e5:8c:d0:d9:42:fe:c8:cf:
e9:ab:ff:52:f0:be:e9:66:05:8f:b1:cd:2c:0e:49:e0:12:87:
b6:18:be:40:3a:c9:57:65:1b:aa:f4:b0:8e:f4:40:dd:19:6e:
11:01:91:fa:d6:88:83:2d:42:0e:31:a3:7e:e8:b3:d4:10:18:
e9:60:22:8b:1e:0e:7f:4b:c5:ad:bf:95:7d:24:28:6b:21:bf:
e7:4a:d0:7f:ea:9d:08:1b:9f:e1:80:41:91:52:35:1e:2d:86:
4e:6e:c3:f8:fd:ce:61:6e:c6:f8:be:f6:7e:02:37:4d:d6:70:
da:c9:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:54:45 2025 by rpki-client