Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10F6483EC32211EFB746D360762E951A.roa
File: 10F6483EC32211EFB746D360762E951A.roa (raw, json)
Hash identifier: eaGvye9v+HaU3CKkueDPrjXGPnFywsXXjzybpzWtPDg=
Subject key identifier: 29:9B:46:51:2E:2B:F1:B4:59:80:DB:D2:96:8F:CB:60:25:79:23:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10F6483EC32211EFB746D360762E951A.roa
Signing time: Thu 26 Dec 2024 00:40:55 +0000
ROA not before: Thu 26 Dec 2024 00:00:52 +0000
ROA not after: Wed 10 Dec 2025 00:00:52 +0000
asID: 984
IP address blocks: 156.228.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59949 (0xea2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:52 2024 GMT
Not After : Dec 10 00:00:52 2025 GMT
Subject: CN=676ca617-67ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:73:ce:7f:e2:7c:c7:5d:e7:49:b0:91:25:
62:0a:5d:1b:05:c2:8f:84:5e:fb:56:c3:12:a5:c2:
b0:dc:23:46:d5:d7:79:b5:a4:8d:53:e9:ca:33:d9:
83:48:2d:99:d2:c2:61:ec:2f:68:c4:56:f2:12:96:
73:49:72:4f:90:f1:c5:85:82:1f:b4:1f:e1:f5:d4:
e9:fb:14:ff:f4:87:a5:dd:58:fe:35:57:0c:5e:f9:
37:af:30:7c:05:38:a7:3c:90:0d:32:e7:77:ea:12:
f5:79:88:28:fc:14:97:01:24:9d:7e:f1:e7:9d:df:
80:c8:f7:00:e5:29:38:9b:7d:ca:e3:9a:f9:a4:a8:
6c:4d:74:4f:74:0a:73:e6:b1:84:5d:4f:8c:3b:61:
52:44:96:17:b2:03:e3:14:98:66:0f:bb:02:72:34:
76:ca:6e:7d:82:26:6c:94:ee:23:33:41:b0:d4:63:
d7:4e:42:c9:43:19:d3:0d:9c:61:70:35:06:f1:96:
8e:73:6c:f0:34:de:f6:06:9e:30:e2:4b:4b:24:c2:
e4:a5:d6:4b:cf:92:46:82:5e:33:c2:36:c6:74:54:
3e:66:80:47:c9:d7:53:ff:59:9d:bb:d0:2f:08:6d:
5c:f4:7e:08:9a:88:08:b1:b8:6e:fb:75:1c:41:06:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9B:46:51:2E:2B:F1:B4:59:80:DB:D2:96:8F:CB:60:25:79:23:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10F6483EC32211EFB746D360762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.231.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d3:31:26:ae:66:0e:cc:61:40:b9:7d:33:3a:da:5e:35:fa:
13:80:8c:3d:17:0e:ca:66:80:cb:2a:b4:1a:d7:b0:ee:0d:ae:
04:15:71:1e:54:11:40:e5:17:5d:ba:9d:2b:82:7c:e6:1c:2a:
c0:13:d9:04:4b:98:18:e6:4f:48:ae:89:72:11:bb:76:e4:6b:
53:52:a8:4a:64:8a:fe:fc:ef:6d:ad:0c:16:a8:04:4b:0a:25:
f5:55:ec:2a:58:6a:5e:c9:0d:3c:50:62:86:6f:1a:a0:c0:a8:
8d:71:e2:fe:d6:9f:7f:c3:2c:73:8f:7c:57:a6:b7:77:e9:e6:
3a:a3:71:9f:e7:dc:15:26:84:b2:c6:14:91:16:0e:aa:69:3f:
67:49:61:f1:1d:b9:2e:2a:f2:4c:3a:1b:14:71:57:27:8f:ab:
4b:dd:34:76:e8:bd:83:04:f2:f5:83:85:d5:96:90:e2:4b:e4:
71:a4:14:03:fa:00:42:7d:61:29:53:32:59:4b:5d:74:38:a4:
4d:46:30:5c:97:15:a8:c9:49:d7:31:02:a1:87:34:8c:9d:f6:
26:e8:9f:1e:07:2f:a1:aa:7b:9b:6f:1b:a7:8d:02:d7:35:cc:
2d:95:88:ee:da:87:3a:bc:d0:8f:2d:f6:48:61:d9:9b:4a:2b:
fc:c9:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:54 2025 by rpki-client