Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0865D220C27D11EF89D44A61762E951A.roa
File: 0865D220C27D11EF89D44A61762E951A.roa (raw, json)
Hash identifier: rgJpwuyjZTvhsk4QfKOjqecgzKE1636slm9sqUkxjdQ=
Subject key identifier: 21:43:6C:F9:5D:1D:10:A2:AF:1B:37:51:AC:E3:EF:07:72:AB:0F:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0865D220C27D11EF89D44A61762E951A.roa
Signing time: Wed 25 Dec 2024 04:59:34 +0000
ROA not before: Wed 25 Dec 2024 04:59:30 +0000
ROA not after: Wed 10 Dec 2025 04:59:30 +0000
asID: 984
IP address blocks: 156.227.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59575 (0xe8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 04:59:30 2024 GMT
Not After : Dec 10 04:59:30 2025 GMT
Subject: CN=676b9136-0427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:cb:ac:60:c3:55:3f:18:ca:ae:19:2e:36:
87:19:5e:7a:c3:56:95:ca:08:0c:f5:c5:a6:d2:57:
e4:f0:f7:19:03:b5:a3:ad:2c:fd:f8:57:8f:b6:ce:
6e:60:19:c5:07:89:ac:b2:b3:89:1d:a1:cb:b8:c0:
98:4f:c7:83:1b:7c:51:08:65:8d:b9:87:84:2c:1c:
e0:db:0a:29:51:e8:43:10:f8:9a:4b:5d:11:b2:08:
a3:41:d6:42:28:59:dd:d7:d8:d7:d1:bf:8d:f0:6d:
b6:53:bd:66:d6:9e:d2:b6:65:59:72:50:08:d2:b6:
85:ec:36:5b:f7:82:6c:f2:4f:7b:00:9d:57:51:54:
7c:aa:26:46:bf:ce:dd:ee:f9:e4:ba:bd:7d:0b:4f:
38:96:20:0d:b9:e5:ca:4c:49:4e:95:a2:c9:0b:c4:
01:3b:75:e2:c0:24:cc:76:96:ee:65:ec:92:c5:32:
6d:4d:b4:e1:e4:67:2d:1e:19:e8:49:b4:03:16:88:
09:52:38:be:7b:e1:d4:a4:dd:56:66:de:af:0b:13:
8c:c6:0f:70:47:d8:c9:94:7f:6f:9a:c3:53:e0:c1:
c8:0c:83:73:c8:65:85:9b:50:4e:61:66:98:ae:65:
b5:99:05:75:bc:e7:9c:ab:28:40:c3:82:39:bb:e5:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:43:6C:F9:5D:1D:10:A2:AF:1B:37:51:AC:E3:EF:07:72:AB:0F:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0865D220C27D11EF89D44A61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:83:a9:1d:b1:b0:b3:9e:f4:12:7b:9f:54:4c:15:f6:a8:bb:
8e:62:bf:75:42:90:a0:b7:a6:f4:95:24:26:0e:6e:6e:2c:1a:
3c:fd:b3:fb:e9:05:6a:24:7e:57:fc:0b:d3:0f:16:a5:6e:4d:
6b:3e:b0:4b:96:23:e0:8e:30:ed:5f:6c:ec:40:4b:ab:77:b5:
6f:b0:eb:31:ab:d9:b1:03:1d:c8:93:57:85:3f:71:1d:bd:73:
02:4f:84:b7:54:fd:d5:fc:ea:a4:bd:15:81:5f:6a:c2:41:f9:
d3:3f:1e:94:f9:35:6b:4d:64:70:cd:63:f9:07:be:cb:c3:81:
d1:be:3e:7a:b3:fd:30:6f:86:af:58:e4:b8:6c:38:95:ec:a8:
68:14:23:56:5c:7d:a5:da:3a:42:4e:15:53:1c:d5:04:52:fa:
52:06:24:38:52:80:ee:ea:29:2e:97:a7:22:87:d6:0a:3c:cb:
b0:63:23:88:bb:0f:ad:43:52:d5:ff:0a:14:60:b1:06:e3:7c:
8a:68:4a:8a:8e:5f:bd:32:67:37:a5:3f:00:ba:96:ee:69:a9:
c9:d9:77:a1:7c:e0:77:9b:0a:e0:6f:b2:6a:9c:c2:92:51:0e:
89:85:5e:02:7c:ac:e9:43:99:7e:9d:21:d8:25:4d:09:e2:85:
ea:cc:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:40 2025 by rpki-client