Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A9895B0C94711EFAB99C07B762E951A.roa
File: 1A9895B0C94711EFAB99C07B762E951A.roa (raw, json)
Hash identifier: TX2XpwmVggfV6/l6ut6pZJAFGfnrd6M7u3lRqozIQCw=
Subject key identifier: 84:61:4F:8F:2E:2E:9C:0D:42:7B:9A:90:10:36:73:CD:80:FD:1E:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F368
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A9895B0C94711EFAB99C07B762E951A.roa
Signing time: Thu 02 Jan 2025 20:21:10 +0000
ROA not before: Thu 02 Jan 2025 20:21:06 +0000
ROA not after: Mon 13 Dec 2027 20:21:06 +0000
asID: 17561
IP address blocks: 156.225.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62312 (0xf368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:21:06 2025 GMT
Not After : Dec 13 20:21:06 2027 GMT
Subject: CN=6776f536-3b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:e6:ee:8c:07:06:c9:80:12:d7:fc:a0:f3:
39:87:65:02:8c:72:df:7f:da:bf:30:f1:b8:4a:fa:
f6:b3:fe:88:ad:80:c0:3a:50:45:66:71:56:8d:fb:
47:4e:00:4b:a8:ae:f8:e5:e0:99:52:08:e6:f3:80:
2f:a2:a3:66:24:9d:c8:d8:c9:17:f2:35:2e:20:00:
1e:b6:69:db:63:0c:3b:62:ce:4a:85:46:fb:d8:54:
83:2c:85:66:5a:1c:ec:87:93:70:54:2f:3b:e8:b9:
9b:99:81:f1:2e:e3:83:65:ce:49:5e:db:09:8e:1d:
08:ef:0e:00:f3:c6:88:a5:ba:f4:8d:8f:e4:c9:ee:
96:66:e1:56:61:84:a7:80:6c:0b:3e:f5:e1:68:10:
42:6d:68:44:85:4c:c1:f7:47:66:c5:90:25:06:56:
1a:b3:1d:0b:92:80:40:9a:da:7a:2b:13:3a:7f:15:
38:dd:70:7f:b8:1d:26:5f:e0:83:7b:20:81:0a:e6:
4a:3d:0b:78:c1:57:4b:c1:97:00:b3:1b:b7:25:68:
f5:c5:fd:9e:e4:29:bf:f6:44:02:c4:7b:2f:be:1b:
ed:26:6c:53:91:1f:28:b0:2e:63:99:84:40:e3:70:
af:17:eb:d6:fc:c6:92:58:06:04:cf:c7:25:1e:d2:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:61:4F:8F:2E:2E:9C:0D:42:7B:9A:90:10:36:73:CD:80:FD:1E:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A9895B0C94711EFAB99C07B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:7c:47:32:7c:bc:92:a9:53:f1:f8:b1:e0:d7:a9:cb:1e:ad:
7e:5d:e4:18:b3:2d:33:20:c0:bf:01:7d:0d:2d:73:07:b2:8a:
62:1b:ef:14:85:79:fe:ff:c6:66:13:c0:6f:79:3c:56:8a:8b:
36:23:75:e4:ea:9c:55:e2:7f:0d:c1:85:5b:61:a5:b1:75:ac:
72:57:f1:2e:3e:a4:ae:8e:c4:28:fd:d2:f5:cd:d6:60:e8:49:
b4:43:6f:dd:c1:a4:d6:2b:f6:71:79:51:ec:de:1a:77:d3:fe:
a0:43:01:35:f8:72:d6:49:a9:7f:90:4b:43:6b:63:62:97:45:
a7:bd:e1:01:a1:a0:d7:46:0e:c0:7c:f8:04:4b:5a:59:92:ca:
fe:cf:f9:6f:a9:3e:85:27:99:db:54:25:79:99:51:6f:3d:12:
1f:62:6c:1a:7a:96:ea:6c:cb:00:78:c2:5e:30:3f:2c:66:81:
ca:ce:b5:7b:68:0f:c6:c3:08:71:41:68:19:00:89:13:e4:c0:
a9:a6:cf:86:34:f5:59:d4:06:1a:96:5b:93:8f:85:23:4f:b5:
c8:27:76:0e:44:e2:6d:2a:d6:52:ef:be:60:84:20:5d:14:55:
76:6e:00:bb:b6:26:64:63:e6:b7:50:c8:97:df:7f:d2:10:63:
21:bb:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:39 2025 by rpki-client