Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AC03752C28911EF8A3B3BAD762E951A.roa
File: 0AC03752C28911EF8A3B3BAD762E951A.roa (raw, json)
Hash identifier: 7LfHPYsk5VdSNt4JNPdOQmTzzGuyjYG/lFE2KL/22wo=
Subject key identifier: 5C:52:F3:C9:25:DD:1C:89:79:9B:BD:93:6A:F6:F3:D9:E1:04:CA:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E94B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AC03752C28911EF8A3B3BAD762E951A.roa
Signing time: Wed 25 Dec 2024 06:25:32 +0000
ROA not before: Wed 25 Dec 2024 06:25:28 +0000
ROA not after: Wed 10 Dec 2025 06:25:28 +0000
asID: 984
IP address blocks: 156.228.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59723 (0xe94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:25:28 2024 GMT
Not After : Dec 10 06:25:28 2025 GMT
Subject: CN=676ba55c-0b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:6f:b5:4c:cb:ab:8e:d9:b6:e4:85:52:04:
83:f9:ed:cc:55:31:55:ce:d1:16:81:0a:21:d9:0a:
29:e2:74:8b:73:cc:a3:1b:ed:b0:16:5b:a1:f8:d5:
f5:e9:e1:67:9b:da:a7:12:80:78:0f:d4:54:8d:0f:
e4:aa:de:fb:67:90:99:05:60:aa:52:d0:70:2e:cc:
2f:73:e3:3a:d7:88:53:9a:4c:5a:b0:4c:e4:44:95:
25:ee:a6:ee:06:3c:3b:28:97:2d:5b:fe:da:d9:a8:
b9:d0:60:b7:3e:b4:31:71:7a:ed:d4:17:22:fe:71:
6e:67:f5:13:1b:b0:99:52:23:4e:0d:e3:93:1a:45:
17:0a:d2:38:61:10:a8:2f:a9:d7:bc:82:52:6d:1c:
8e:fd:9d:6f:47:fd:7c:27:07:d1:63:14:81:29:c6:
61:91:53:aa:5e:46:87:97:33:a2:28:f4:3c:e3:d9:
f0:b2:eb:b1:d7:7a:19:f1:19:d1:af:76:6e:75:4c:
3a:f9:c4:2a:37:ea:30:31:8c:5c:f3:b0:02:84:23:
ed:b1:bb:c1:56:bb:64:16:8a:83:59:c8:32:ef:bb:
62:d4:41:38:f4:bf:45:b4:d0:f4:d6:78:1b:21:ea:
fb:e0:55:66:c9:e4:b9:5d:c5:ab:33:66:6b:85:9b:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:52:F3:C9:25:DD:1C:89:79:9B:BD:93:6A:F6:F3:D9:E1:04:CA:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AC03752C28911EF8A3B3BAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.70.0/24
Signature Algorithm: sha256WithRSAEncryption
65:31:1a:a9:81:94:e7:7b:c6:14:31:f8:65:79:68:e8:d4:78:
ba:8d:40:44:63:5b:76:09:ea:36:cb:14:b8:58:65:75:29:7e:
e6:18:c2:97:a1:14:47:fb:5c:7e:10:37:cb:a1:f7:01:db:ad:
6a:74:e3:06:0f:fe:7a:1a:b4:52:f3:a2:e4:3e:dc:88:b1:1a:
11:52:99:bb:b9:b2:72:5a:5d:f5:84:e0:16:30:ec:8b:5c:02:
15:d2:a1:c0:b9:47:5d:29:2a:f0:20:df:45:eb:1e:41:82:92:
c4:2d:44:59:dc:5a:02:6c:8f:fd:98:e7:c4:ba:0c:69:18:3c:
87:c2:5f:56:25:2a:29:5c:ec:bd:94:0f:12:b4:14:0f:b7:35:
80:9f:3e:45:bf:18:da:15:22:ac:48:a9:e7:41:df:7f:7f:78:
72:ec:6a:d1:3a:7b:2f:69:af:35:c7:52:b5:c1:1e:a9:f0:50:
11:f4:46:e3:41:45:31:af:b4:33:1e:47:89:6b:0f:4b:d9:1f:
ed:0f:f6:bc:c8:42:0d:3f:84:7f:73:82:5f:14:38:eb:76:02:
47:5e:5c:44:66:6f:56:ef:9d:0a:61:50:cb:e4:74:1f:c6:f1:
15:ec:9e:61:a8:89:65:ca:eb:2e:17:7d:c9:c8:c7:43:3d:f8:
a0:1a:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:09 2025 by rpki-client