Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/049448A0CC9311EF8A63E563762E951A.roa
File: 049448A0CC9311EF8A63E563762E951A.roa (raw, json)
Hash identifier: GNCrHPs6QANEvxz+IFnG53L8R2hEC3uP2dCsT6aPEYA=
Subject key identifier: 47:32:E9:74:09:AA:63:FC:16:6E:04:60:2F:AB:97:DD:F0:FB:AA:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F91B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/049448A0CC9311EF8A63E563762E951A.roa
Signing time: Tue 07 Jan 2025 01:02:08 +0000
ROA not before: Tue 07 Jan 2025 01:02:04 +0000
ROA not after: Mon 13 Dec 2027 01:02:04 +0000
asID: 17561
IP address blocks: 156.227.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63771 (0xf91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 01:02:04 2025 GMT
Not After : Dec 13 01:02:04 2027 GMT
Subject: CN=677c7d10-1655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:19:7c:c4:8a:6f:3c:ff:94:96:ff:a4:76:
27:2c:75:89:de:5b:c4:dc:d9:8f:4d:0f:c2:37:94:
4c:d2:eb:ab:b2:f9:e9:9b:18:f7:2e:a4:9f:bc:3a:
de:44:af:52:6d:65:f6:53:1a:a5:6c:79:c5:83:72:
a0:4a:8a:91:da:ab:1a:90:73:d7:fa:6f:84:02:55:
e4:b2:3e:64:89:72:a1:7d:e7:c9:5a:5a:e1:aa:06:
d0:fb:27:65:d3:48:3d:a9:65:d5:58:ce:ac:02:8e:
16:08:4a:75:dd:ba:2a:ac:07:e8:ad:33:4e:34:59:
d9:57:8a:3e:ab:b2:8d:13:bf:a9:ad:cc:fd:4a:48:
94:47:86:8e:fa:22:70:52:86:90:5b:58:56:8f:d0:
07:c2:2f:e7:66:e1:d3:60:91:a6:43:94:85:83:2b:
6c:d6:86:c4:ae:82:c9:d6:3b:16:76:9a:a8:92:9f:
36:fc:77:e4:8d:04:8d:d7:f6:0e:fd:a6:15:70:a9:
a5:09:d7:77:fa:56:9e:f6:a1:fb:df:6f:f5:66:fc:
36:f0:55:6f:d1:06:6c:e9:55:d6:a2:80:74:52:00:
87:89:f5:dc:99:13:01:2b:60:64:22:ef:b7:56:07:
e3:eb:81:98:94:d0:4e:cb:46:65:c8:59:22:9f:d8:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:32:E9:74:09:AA:63:FC:16:6E:04:60:2F:AB:97:DD:F0:FB:AA:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/049448A0CC9311EF8A63E563762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c5:1a:77:dc:94:29:d5:b7:d0:8b:cd:35:2f:cb:0a:da:ec:
aa:2e:8f:d1:05:9e:e7:e9:1c:65:be:f0:bc:79:a0:75:86:7a:
aa:2d:2f:ed:e3:7b:6d:20:19:50:07:7e:47:af:32:57:a5:d6:
a0:48:9e:2c:a0:28:3f:05:58:03:ce:5c:c6:68:c1:cf:b3:cf:
2b:37:34:7b:d4:11:00:ac:54:a7:ef:cb:9e:76:30:71:48:8c:
25:4f:34:dd:62:18:3c:2e:f3:88:af:85:50:e9:a3:40:b5:4b:
6a:c1:70:ce:29:fb:0f:f7:bd:9b:48:ec:ca:87:ae:62:11:2f:
05:a9:e6:bd:5f:57:81:ef:fe:98:75:cc:30:d1:24:f5:84:c5:
9f:8d:17:ed:25:4e:37:43:89:45:da:87:a1:1c:67:96:b3:b7:
ef:d6:9c:24:b5:fe:39:5c:da:d5:01:bc:11:57:fa:d5:73:75:
20:2b:57:a6:a4:ef:07:65:e8:19:f8:5f:e5:77:b8:9f:57:3f:
b8:7d:e9:7d:b4:6c:a1:be:6a:f2:45:32:b9:57:28:57:8b:6f:
ad:70:6c:2a:0f:28:03:e6:2b:f2:7c:d7:5f:3e:58:72:76:e0:
c0:60:b8:62:19:59:62:fe:9c:d0:7a:b4:b6:32:8b:61:ce:86:
51:59:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:09 2025 by rpki-client