Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02AA4348CC1411EF85CFAD4D762E951A.roa
File: 02AA4348CC1411EF85CFAD4D762E951A.roa (raw, json)
Hash identifier: krIXoYQp2ObJecmlIzHWediMEKgEGpikv4O1X8i3pkg=
Subject key identifier: 3F:5A:BA:36:76:55:06:D2:FA:86:68:81:8B:65:A3:E2:85:9B:3A:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F87F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02AA4348CC1411EF85CFAD4D762E951A.roa
Signing time: Mon 06 Jan 2025 09:52:59 +0000
ROA not before: Mon 06 Jan 2025 09:52:55 +0000
ROA not after: Thu 06 Feb 2025 09:52:55 +0000
asID: 200373
IP address blocks: 156.228.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 09:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63615 (0xf87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 09:52:55 2025 GMT
Not After : Feb 6 09:52:55 2025 GMT
Subject: CN=677ba7fb-c110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:76:4f:b9:0b:f7:02:1f:55:8e:78:dd:fc:ad:
75:c4:49:c2:cc:4b:ae:58:04:e1:e6:85:47:ee:7d:
68:44:b1:f0:89:e9:70:75:9d:7c:ee:e6:1f:16:e5:
a1:f2:8e:61:dd:22:2a:76:49:7d:bc:75:08:9f:51:
27:f6:2d:f7:7c:d5:75:59:78:d1:66:b5:b8:50:fd:
80:7b:7d:7e:4b:40:04:b4:f1:f6:e5:c3:81:ba:71:
3a:38:7c:58:80:bc:c7:45:7e:8a:65:4e:98:4d:96:
11:a5:dd:ec:a1:ba:d7:d8:12:ae:53:e7:01:e1:c9:
c0:14:72:f1:05:41:9d:67:67:cd:df:1d:b4:8e:21:
55:ab:6e:62:1a:cd:af:a7:6d:1f:98:2e:fc:68:a4:
55:d6:83:3f:75:9b:c0:8b:1e:54:ed:ba:b3:79:f8:
7f:c8:36:b6:e1:cb:ed:2a:29:b0:62:ea:e3:d3:8d:
1c:63:95:c5:42:24:c3:69:0c:84:f9:2b:52:e4:b9:
34:eb:a3:a8:aa:de:c0:d8:36:11:e3:2e:eb:7e:87:
cd:53:49:bd:9b:bb:d8:a1:4b:d7:97:88:6e:65:83:
04:11:fe:43:09:02:36:b5:85:ed:e4:f4:0b:5d:d6:
a0:02:34:fd:62:64:d6:1e:1f:27:3a:73:85:f1:d2:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5A:BA:36:76:55:06:D2:FA:86:68:81:8B:65:A3:E2:85:9B:3A:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02AA4348CC1411EF85CFAD4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.112.0/21
Signature Algorithm: sha256WithRSAEncryption
77:22:6e:32:05:7e:00:98:96:94:75:d3:c7:a2:6a:3f:b3:ca:
d3:58:77:38:71:02:c4:37:6e:d0:ea:2d:de:6e:4f:50:6f:82:
48:46:8f:e3:31:ec:b0:39:8c:49:d8:26:77:68:52:62:c9:68:
02:58:dc:51:2e:c6:35:78:50:fa:37:4e:09:97:93:5b:34:45:
4c:e8:fc:1b:32:94:0a:24:e1:30:c6:93:1a:b6:38:36:5a:39:
ce:22:d9:1c:95:c8:0f:d7:7b:91:7f:a4:2e:55:b7:84:1a:d0:
e2:08:da:c0:78:0a:11:93:49:f5:c4:52:aa:2b:95:57:ed:6a:
f2:02:f8:80:64:93:97:55:86:cc:3b:99:b7:3b:0d:e4:00:ba:
b7:bd:d8:28:72:aa:7f:75:1e:d6:dc:52:7a:4d:ac:04:4e:dd:
db:5b:9f:14:99:75:44:4b:a6:f6:e1:50:94:a0:dc:32:3f:cc:
c1:a4:fb:c6:85:ca:c8:a3:71:11:57:a5:cd:a7:fa:59:b1:6d:
7c:f1:b2:65:5b:1a:f5:96:22:bc:08:f0:79:0b:f3:28:51:e7:
72:a4:a4:d5:fe:ae:ad:b4:04:b1:b7:96:dc:ca:68:cc:d8:01:
de:4f:e6:9b:08:ab:3f:50:13:17:21:d9:c7:51:6e:5f:62:27:
63:aa:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:13 2025 by rpki-client