Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/207A9232CC9211EFAD4C4A5E762E951A.roa
File: 207A9232CC9211EFAD4C4A5E762E951A.roa (raw, json)
Hash identifier: v9wLo6JTJrbDPLVqFTadl5Frhx6y0/RO6BPjorl5wAg=
Subject key identifier: 44:C3:38:40:04:67:68:DD:8C:F6:31:45:B7:53:52:93:F0:BF:FC:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F913
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/207A9232CC9211EFAD4C4A5E762E951A.roa
Signing time: Tue 07 Jan 2025 00:55:45 +0000
ROA not before: Tue 07 Jan 2025 00:00:42 +0000
ROA not after: Mon 13 Dec 2027 00:00:42 +0000
asID: 17561
IP address blocks: 156.227.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63763 (0xf913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 00:00:42 2025 GMT
Not After : Dec 13 00:00:42 2027 GMT
Subject: CN=677c7b91-79f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:b1:5e:c1:14:b8:ae:23:3e:4b:da:de:0a:
88:e2:78:11:59:a1:77:b2:1a:7f:b2:e1:d8:28:eb:
ec:45:6f:1d:1b:20:51:76:e2:a7:79:ba:02:d8:d5:
56:19:ed:f6:1c:1d:7b:56:cf:0d:12:a9:56:54:ca:
da:c6:36:6b:1e:1d:23:9f:a8:7f:e6:74:06:18:ce:
cb:98:c8:78:74:72:3e:3e:01:5b:1e:f9:1f:ff:37:
1b:0f:1c:e0:65:96:2a:13:ac:66:7f:5f:84:bb:f6:
57:ec:69:5e:fc:34:7c:6d:7d:13:98:ba:60:8a:e8:
29:a0:24:50:98:c8:9f:89:ca:ff:32:2c:c6:8e:69:
12:4b:c1:24:ec:41:42:de:dd:33:0e:0f:c9:21:88:
4e:0c:00:bc:f5:07:c2:25:1b:e9:2a:d6:38:f6:75:
01:eb:09:24:69:61:90:ea:73:37:83:c9:f4:22:8a:
7f:4f:af:21:d8:25:ac:ec:c1:f3:44:32:65:81:c2:
d9:05:08:b2:24:9a:eb:11:63:51:6c:2e:ef:db:58:
5f:82:3a:f9:d8:73:f5:4a:78:c7:45:1b:7b:f9:12:
15:66:6f:2f:03:de:0e:88:fb:df:dc:66:38:65:23:
32:d2:fe:ac:4a:86:8a:26:8b:1d:92:be:f2:93:63:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:38:40:04:67:68:DD:8C:F6:31:45:B7:53:52:93:F0:BF:FC:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/207A9232CC9211EFAD4C4A5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.8.0/24
Signature Algorithm: sha256WithRSAEncryption
19:93:f4:41:20:66:85:2e:b4:68:8d:34:e3:16:47:14:77:82:
93:d0:f9:b9:13:77:bf:03:bc:20:a2:ae:56:36:36:6f:06:30:
b3:82:69:58:89:1d:01:33:08:fd:7a:67:6b:4f:8f:a5:b8:7c:
7e:3f:14:f8:37:4e:91:cc:db:fc:bb:fc:c8:9a:df:a7:aa:f9:
17:e3:09:7c:29:f4:1d:87:4e:a0:53:97:ff:90:ea:11:c0:ab:
1d:e0:dc:07:e6:5c:06:10:4c:dc:2e:e8:44:1c:4a:f8:9d:a1:
fb:4c:8b:25:0d:b8:d9:35:78:53:e8:8e:0e:a9:70:2c:1c:ec:
97:11:b3:aa:ea:12:0f:20:07:d4:98:d9:20:a3:30:97:d5:60:
de:f3:56:a5:aa:2a:c3:99:28:8a:a9:f4:8c:38:ea:e4:63:15:
6e:d3:75:cb:8b:62:5f:d8:12:71:da:01:5a:f5:48:02:03:8d:
9f:69:2b:68:94:01:c5:07:cc:e0:63:42:a1:b3:cf:8f:97:09:
b6:91:3b:33:1e:62:13:7f:e2:23:4d:51:ad:ff:f9:54:98:26:
58:bb:19:54:8b:c1:a2:10:70:f8:ba:97:76:58:9b:45:9e:73:
6e:4a:b7:0c:66:84:03:5d:c8:05:39:cd:66:f2:af:42:21:00:
1d:e1:a2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:01 2025 by rpki-client