Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10D39C06CCA711EFBAEB9B79762E951A.roa
File: 10D39C06CCA711EFBAEB9B79762E951A.roa (raw, json)
Hash identifier: ssTQCJMXVg4rwFFlnVGwGrzIkbex9xN/UDE5hxZmC44=
Subject key identifier: 27:15:34:AC:2D:5F:43:C2:84:1B:0F:B4:75:58:AF:0C:5B:DF:01:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10D39C06CCA711EFBAEB9B79762E951A.roa
Signing time: Tue 07 Jan 2025 03:25:39 +0000
ROA not before: Tue 07 Jan 2025 03:25:35 +0000
ROA not after: Sat 13 Dec 2025 03:25:35 +0000
asID: 984
IP address blocks: 156.229.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63944 (0xf9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 03:25:35 2025 GMT
Not After : Dec 13 03:25:35 2025 GMT
Subject: CN=677c9eb2-2abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:52:80:35:4f:ac:74:19:c3:1d:91:1d:26:
13:99:78:a1:31:1d:8c:a8:34:01:a4:16:0a:da:ba:
52:8a:49:ad:26:af:e0:03:ae:92:0d:a2:40:c9:3f:
16:34:2b:53:ae:9e:d8:80:2c:2f:7b:1f:74:dc:e3:
5b:e4:06:2e:48:36:c1:76:41:60:73:65:89:4e:e2:
fd:4f:8e:ba:3d:5f:ff:fd:f6:77:94:e4:4e:d6:b5:
2f:b6:37:ba:e5:24:84:0b:2d:25:0b:2e:aa:db:f8:
85:ea:ae:fd:9d:9f:a5:e4:3d:ba:92:c3:9d:58:07:
5f:59:86:d4:53:cb:58:84:29:b5:fe:86:40:41:d1:
5a:ff:3c:f4:b5:2f:43:e5:47:5c:5b:fb:34:ab:63:
ec:c6:0b:38:b1:03:ec:80:63:9f:8f:c9:56:e9:2d:
08:4a:41:eb:63:29:b8:17:f8:60:9a:ab:f0:78:8f:
55:89:f2:7b:a9:98:59:5d:87:2e:70:3b:d6:b2:cb:
88:7c:88:01:09:6d:d7:4b:10:ca:06:c2:53:1f:1e:
37:00:22:27:86:45:74:75:8c:d7:53:96:3f:a1:e5:
84:0d:28:94:b3:3d:b8:98:26:fa:1c:ad:63:8f:55:
58:49:83:80:ec:db:3e:5f:4b:bb:15:25:e4:75:00:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:15:34:AC:2D:5F:43:C2:84:1B:0F:B4:75:58:AF:0C:5B:DF:01:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10D39C06CCA711EFBAEB9B79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.254.0/24
Signature Algorithm: sha256WithRSAEncryption
32:59:40:3e:0b:b0:cc:fb:2d:2e:e3:72:3e:84:00:b6:5e:97:
6c:31:f8:e1:0d:43:e5:59:e2:76:2e:2b:28:d3:17:7e:eb:28:
33:5a:25:bd:ba:88:80:6e:78:bb:6f:2a:6a:b7:00:10:9d:9c:
36:be:8a:6c:48:b3:ca:1d:06:3d:90:ca:3d:ae:6b:43:4c:f7:
24:2f:ec:5e:17:a2:92:d1:33:7c:47:82:2e:97:b9:3a:bc:bc:
59:46:c0:ed:9d:d6:0b:06:b7:f8:ab:12:a3:09:c5:f3:8d:e8:
74:14:52:07:95:ef:db:4d:97:16:4c:e6:61:20:81:9a:b6:40:
0a:71:86:35:eb:9d:ea:b4:95:0e:8d:83:66:66:3e:86:3a:0a:
ef:d2:d3:c3:ff:9e:f9:d1:0a:06:ab:f5:15:6d:da:55:c5:d2:
a0:de:8b:e9:4e:b3:5c:fa:f1:67:13:c5:fd:28:3d:8b:0b:a8:
07:fd:d6:c5:86:9a:d7:14:0b:a1:55:c8:6a:5a:09:59:ea:84:
94:ae:bf:90:4d:83:7c:a4:1b:bd:42:e0:2f:4c:a4:42:39:8c:
9a:30:cd:e0:f9:cd:82:b0:d9:88:c4:f8:10:47:a9:7b:79:49:
7b:26:df:24:4f:26:82:d8:f0:a5:8e:29:b3:59:b1:ba:64:30:
39:90:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:32 2025 by rpki-client