Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D609ECCC94811EFBB6B2B82762E951A.roa
File: 1D609ECCC94811EFBB6B2B82762E951A.roa (raw, json)
Hash identifier: 8YgqiiiCtChJ0aFDCEneGtkElnRzSqMf/rA+SEu9SXY=
Subject key identifier: 4A:76:85:C2:32:8C:48:88:6A:FA:7A:A5:9E:ED:2E:12:17:73:FA:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F372
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D609ECCC94811EFBB6B2B82762E951A.roa
Signing time: Thu 02 Jan 2025 20:28:24 +0000
ROA not before: Thu 02 Jan 2025 20:28:20 +0000
ROA not after: Sat 13 Dec 2025 20:28:20 +0000
asID: 984
IP address blocks: 156.225.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62322 (0xf372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:28:20 2025 GMT
Not After : Dec 13 20:28:20 2025 GMT
Subject: CN=6776f6e8-9492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:3a:4b:cd:62:88:bc:58:60:c7:c7:8b:5f:
c9:e6:47:f7:97:96:c0:85:87:1a:00:18:3e:b8:b6:
94:76:dd:c3:0a:52:ce:03:b3:a0:6f:1a:c5:e6:34:
28:14:b8:f9:db:eb:54:c4:25:30:7e:68:dc:1e:c1:
84:17:32:4e:ca:01:71:bb:1b:0c:65:93:dd:1c:7a:
d4:dc:15:ba:f2:c6:2b:74:f4:b9:a9:25:17:a7:9b:
78:26:14:97:83:ff:ee:ba:7a:c2:4c:58:11:a1:0f:
9f:f9:49:5e:c2:9c:65:50:05:3b:f6:b6:c5:4d:56:
96:de:7b:a0:af:dd:3a:f6:4c:1b:ea:4f:9d:27:09:
7f:ff:11:af:3f:33:75:f7:e5:0b:ec:7c:c7:9e:e1:
c2:a8:af:88:72:17:65:da:72:ec:2d:77:f9:3a:4f:
29:13:d4:e3:9f:18:1c:1f:89:bc:5b:c6:77:04:72:
d1:f5:a1:94:bc:e9:a1:2b:47:e6:2f:c7:5f:c8:2c:
f7:23:e6:4e:a8:a4:35:0e:45:e0:7d:a0:45:50:3f:
35:f3:8f:a6:b3:67:87:d7:96:cc:1a:a0:95:ea:ae:
0e:f0:55:d0:70:8c:5f:2f:0e:c0:e7:39:7c:cb:12:
c4:0c:40:46:83:5c:2a:4d:29:3e:3b:98:c0:0a:89:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:76:85:C2:32:8C:48:88:6A:FA:7A:A5:9E:ED:2E:12:17:73:FA:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D609ECCC94811EFBB6B2B82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.52.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:af:17:9a:a9:82:45:83:b8:9e:dd:df:3f:49:85:79:ad:d1:
d4:6a:41:80:74:28:c6:1b:ad:10:57:e9:cf:cd:3a:5b:35:7d:
6d:91:3a:ff:b9:23:f9:f2:4b:ad:2d:8e:87:8f:44:ae:e9:5a:
a2:e6:42:50:2f:96:ba:58:97:c7:9a:66:f6:0a:21:4e:20:cc:
4d:d0:24:67:0b:e1:d5:69:22:6f:ee:e6:42:23:1c:f8:8b:93:
3a:19:7d:73:c2:4c:23:e5:ab:74:b5:7f:f3:fe:3f:99:4f:98:
c7:a3:d4:1c:65:85:ce:55:15:4c:1b:01:b4:9f:9e:56:87:88:
81:67:96:3c:0a:cc:e6:03:b2:a1:2a:4e:00:8d:79:fa:59:fb:
8e:6b:07:d5:8f:db:27:26:60:fe:cb:62:44:81:23:fe:fa:0b:
5d:d4:b5:aa:21:21:29:38:25:fa:c6:63:97:34:7d:44:e0:71:
32:72:65:4c:f8:19:4e:c5:43:55:59:15:93:05:ca:a3:dc:44:
00:5b:1b:e1:19:61:87:08:79:b5:f3:d1:37:b2:98:e6:fb:ca:
01:ce:61:ff:28:6f:4c:03:fa:f7:55:c5:f2:78:4d:5b:88:03:
29:02:b7:7b:9d:cd:1f:ef:91:24:bb:d5:bb:14:8a:b4:10:85:
ca:d9:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:21 2025 by rpki-client