Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FD0CA42CCA411EFBB079A62762E951A.roa
File: 1FD0CA42CCA411EFBB079A62762E951A.roa (raw, json)
Hash identifier: NZQ8NDjhA+9Ai4aIDfdjYTk2GfqX8DYRRXb2hQaeSfI=
Subject key identifier: 18:64:6E:8E:B1:3B:47:E8:EE:5A:80:47:BD:B8:7A:2F:A0:E3:FD:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FD0CA42CCA411EFBB079A62762E951A.roa
Signing time: Tue 07 Jan 2025 03:04:35 +0000
ROA not before: Tue 07 Jan 2025 03:04:32 +0000
ROA not after: Sat 13 Dec 2025 03:04:32 +0000
asID: 984
IP address blocks: 156.229.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63918 (0xf9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 03:04:32 2025 GMT
Not After : Dec 13 03:04:32 2025 GMT
Subject: CN=677c99c3-a394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:a1:79:c1:d2:8e:57:45:2f:8a:d6:1c:d4:
0e:b9:b0:0d:83:a5:65:90:d6:3d:77:10:f1:97:4e:
a4:ae:85:0a:c0:19:85:fd:21:31:34:64:91:b1:56:
11:20:4d:fb:c5:a8:09:d6:b3:ea:0d:eb:cc:bc:bd:
09:cd:47:84:c1:5b:45:aa:b2:c2:0d:5d:cb:cd:66:
be:a0:10:b9:8e:21:d1:3b:a1:5c:13:e7:f8:7a:d2:
4a:5f:54:62:02:ac:9a:ff:82:45:b7:04:35:19:86:
cc:c1:89:17:df:7f:d8:0d:6b:cd:0e:47:b1:15:fc:
36:fa:05:84:8b:a8:00:f1:d7:a0:93:e3:9a:b7:83:
92:14:04:7b:11:57:84:fd:53:bb:ff:54:df:6b:98:
13:14:57:d2:98:c7:47:d4:ae:cf:82:c4:03:7e:06:
2e:a1:0a:d8:e4:c1:1c:1c:bd:8c:6d:24:f0:c7:6f:
fd:b3:76:1c:72:1e:ec:91:b8:0a:53:8b:85:c6:cf:
cb:b6:37:b3:1b:f4:71:42:4a:81:fb:65:46:ba:90:
2b:b0:0b:cf:4c:e6:c3:8c:95:41:ff:ae:93:09:7b:
28:28:7f:0b:89:c5:7c:d6:78:73:25:0c:75:07:cf:
c7:65:4a:58:7f:6c:b2:72:a9:17:f0:87:60:3c:ba:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:6E:8E:B1:3B:47:E8:EE:5A:80:47:BD:B8:7A:2F:A0:E3:FD:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FD0CA42CCA411EFBB079A62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:00:f4:89:97:ed:41:d9:44:6b:85:79:17:c5:7b:67:ec:ec:
d2:6e:3f:a9:e7:1c:5d:38:a2:1a:6c:a5:cc:1d:62:05:7e:7e:
8e:ce:c4:b8:1a:e1:e6:d0:8a:3c:43:f8:6b:a7:4e:b0:fd:09:
67:c2:ad:1e:5d:f6:17:8c:b9:5b:90:11:57:f1:fa:60:7f:8e:
84:e6:c0:35:01:7a:6f:78:b0:eb:33:42:32:e8:5f:03:88:d4:
80:30:fb:dd:ea:08:3a:24:23:dd:1c:cc:b3:7d:e8:25:b9:c2:
80:03:1b:ae:ba:d4:11:55:1c:15:1f:0a:68:77:9c:83:23:b6:
03:aa:53:cc:8b:7f:04:b9:26:b8:9a:9f:44:01:79:47:ff:cf:
53:a4:ee:69:45:e7:cc:c5:e0:ae:a6:79:77:82:a9:34:78:c2:
27:a3:b8:58:af:87:69:c6:c6:c8:c0:27:60:c0:79:78:6e:12:
d1:73:7a:bd:56:f6:dd:a0:ee:0e:c6:04:21:e9:4d:93:67:1d:
00:26:19:83:eb:07:9a:53:92:88:d4:50:fd:78:79:78:2a:42:
40:fc:15:05:c1:a8:8b:85:3f:d0:6d:76:34:38:db:d3:b2:1e:
98:6d:9f:f6:0b:34:a9:ad:0c:b0:78:9e:b4:ea:7f:7e:65:d6:
ce:b7:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:41 2025 by rpki-client