Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D6FDD5ECCA111EFB92DF24D762E951A.roa
File: 1D6FDD5ECCA111EFB92DF24D762E951A.roa (raw, json)
Hash identifier: YgonfEuff3ILvnZis4FKgpwcOD/DGIPrIiSZHcrhNPs=
Subject key identifier: 4B:FF:01:2E:78:96:C8:CB:28:15:03:F2:EE:A7:01:CC:41:D0:4D:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F994
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D6FDD5ECCA111EFB92DF24D762E951A.roa
Signing time: Tue 07 Jan 2025 02:43:03 +0000
ROA not before: Tue 07 Jan 2025 02:42:59 +0000
ROA not after: Mon 13 Dec 2027 02:42:59 +0000
asID: 17561
IP address blocks: 156.227.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63892 (0xf994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 02:42:59 2025 GMT
Not After : Dec 13 02:42:59 2027 GMT
Subject: CN=677c94b7-0738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:77:a4:96:94:7f:26:9a:40:73:b1:7e:95:
da:fb:e7:8b:dd:cb:3e:c1:5c:44:0a:ae:91:f3:59:
1c:2b:d6:84:18:5e:3c:eb:f3:24:16:f1:60:4f:3e:
e4:92:21:c0:c9:51:cd:94:b5:cb:50:c4:5e:41:a2:
ff:59:7f:58:7a:cb:5f:84:c5:d6:c1:a4:83:55:f3:
62:f7:63:8a:e5:7b:76:e8:45:d5:64:77:4c:b9:ee:
9d:e8:39:6e:4b:62:04:8b:11:f7:18:15:50:1e:a4:
b5:9c:e9:ee:63:83:48:a4:85:cc:27:95:b8:9b:0e:
fe:b0:49:04:92:6a:79:ba:41:1b:22:53:1b:60:1c:
92:49:4e:d0:8b:54:7c:37:73:b8:d5:1a:90:a1:d8:
50:b9:c7:6e:5f:23:50:b1:cd:c8:32:cb:44:65:60:
b7:a6:00:7c:ba:f8:e5:20:fe:de:c4:bb:09:bf:a9:
ff:67:a9:c5:d9:3f:79:91:7b:40:d0:81:eb:c8:d6:
7d:5c:20:62:3b:13:da:99:dd:c9:cb:ac:f2:46:23:
61:89:fe:6c:9c:5e:ea:b7:37:0a:08:83:03:e3:1b:
26:33:b9:65:09:0f:d8:c4:82:81:52:56:d7:2a:c2:
c0:65:8f:76:da:d7:ce:84:c2:cf:bc:2e:21:ec:34:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FF:01:2E:78:96:C8:CB:28:15:03:F2:EE:A7:01:CC:41:D0:4D:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D6FDD5ECCA111EFB92DF24D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b0:cd:48:82:d5:ad:64:67:d0:91:2a:71:52:a6:07:60:05:
7d:d1:a0:f4:3c:2b:03:25:9b:8f:92:d8:1b:81:41:8e:b1:c9:
18:92:6a:78:10:ab:85:87:e7:ef:ec:91:b5:2b:1b:64:76:4e:
5e:6a:68:cd:00:bd:e9:eb:ac:02:fd:a4:d0:92:94:d1:cd:e8:
fe:98:22:f4:23:ce:a7:b8:78:32:2d:85:d8:6c:5b:27:e9:5a:
fe:ea:a8:98:2d:e9:09:85:f6:a1:73:b1:5b:6f:13:8a:d5:50:
5a:a7:89:14:64:44:23:e8:49:52:08:d5:83:ec:5c:10:29:21:
cf:2a:15:fe:2d:cb:e8:4e:b2:60:ef:35:f7:0d:73:e8:57:9b:
30:48:ee:84:9f:f2:3b:8b:cd:3c:c2:30:d0:2b:99:48:85:7d:
e5:a4:0b:37:99:2e:c9:da:84:a8:a1:a2:b6:45:45:00:96:57:
09:17:4c:00:75:c0:90:6a:0f:8d:3a:2a:bb:7a:3d:3a:39:4f:
96:ce:b8:82:2e:d5:ee:97:13:2a:38:3f:da:59:66:47:81:1a:
59:21:39:6f:88:67:88:b4:5f:ca:a1:ea:45:d7:bd:30:2f:20:
83:2b:8d:69:c8:6a:b4:f7:8f:f8:2e:a8:83:b5:75:d3:b2:57:
8a:a7:9e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:03 2025 by rpki-client