Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227FB66CCD4011EF9794A9BB762E951A.roa
File: 227FB66CCD4011EF9794A9BB762E951A.roa (raw, json)
Hash identifier: izj7D5lFcGzOh7g8ic/SdqOmlxqg/5QuIx3UqT1cgIU=
Subject key identifier: 49:A2:61:AB:86:22:73:0B:05:A4:31:40:7B:87:BF:27:7F:83:A6:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227FB66CCD4011EF9794A9BB762E951A.roa
Signing time: Tue 07 Jan 2025 21:41:21 +0000
ROA not before: Tue 07 Jan 2025 21:41:18 +0000
ROA not after: Sat 13 Dec 2025 21:41:18 +0000
asID: 984
IP address blocks: 156.243.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65129 (0xfe69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 21:41:18 2025 GMT
Not After : Dec 13 21:41:18 2025 GMT
Subject: CN=677d9f81-a822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:8e:68:ba:b0:dc:e4:24:94:b9:40:b2:6d:
d2:53:e6:d5:6c:5c:2b:a4:5b:fa:cf:f5:e0:50:54:
d4:06:a5:95:6f:83:13:00:1a:ea:b6:3f:b9:ae:73:
a4:b7:5b:28:69:f6:41:44:76:86:27:67:36:14:1a:
8b:47:3b:21:8d:a7:1e:d3:cd:7e:fa:e5:e9:8d:73:
94:ae:3e:f8:d5:b9:fe:e7:8c:16:08:ea:00:e8:03:
df:dd:ee:75:de:ae:71:1e:60:9f:eb:47:24:55:cb:
85:66:d2:cb:ad:ee:0b:4f:8b:8b:5f:e8:b8:fa:79:
cd:e8:e3:53:c1:69:b5:54:c3:0c:09:78:69:a9:5e:
82:71:8d:aa:8b:7a:40:9f:8d:5c:4b:4b:4b:51:8b:
46:1b:c2:1d:98:79:d6:f1:7e:7c:9a:65:f6:4e:76:
14:6b:ab:14:3d:e8:ad:da:10:ae:1e:95:4b:8a:8d:
ff:d9:8c:07:0d:f9:45:d6:29:0f:9a:2a:f9:e1:08:
36:6e:c3:55:9d:00:a9:97:c1:ce:cd:7f:6f:ac:15:
2b:31:46:00:40:4b:7f:dc:39:c9:0b:20:1c:23:88:
57:e1:df:cf:ed:7a:b9:24:d6:15:47:bb:1c:98:23:
b5:66:75:14:22:5b:be:c1:53:61:a0:ef:22:e1:5e:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A2:61:AB:86:22:73:0B:05:A4:31:40:7B:87:BF:27:7F:83:A6:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227FB66CCD4011EF9794A9BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.93.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3d:74:45:23:b8:ed:13:75:c7:e7:49:bc:1d:40:62:0a:33:
d4:a2:12:73:42:ea:3c:93:38:33:3c:7b:a5:11:38:3c:29:ed:
90:8e:48:17:95:61:a1:8f:9a:71:fb:e1:d9:4e:3d:d0:ea:ec:
63:45:64:ef:10:5e:6a:96:bf:4d:80:12:00:5a:93:44:46:b5:
99:63:1d:d3:c1:79:10:40:e5:ae:41:d2:9f:65:fb:a0:50:5d:
5d:d7:e1:66:f9:57:b7:c4:57:4c:9d:cc:3a:13:f2:8b:d8:85:
4c:c0:1b:62:4c:1d:2a:71:a6:9f:48:c2:e1:46:af:cc:77:00:
4c:c9:3a:79:c7:64:58:31:70:9f:71:7f:f4:4c:35:a8:2b:dc:
8f:98:03:e4:34:b3:32:a6:17:92:ae:4c:53:89:b1:b9:13:c6:
38:b8:8a:88:6d:9e:ad:d9:40:a3:3a:29:5c:d6:89:09:6f:a4:
18:15:36:38:cd:4d:7a:0b:89:4d:86:df:73:ba:a2:da:f2:07:
56:44:e8:48:bd:f1:28:08:68:10:5b:fd:c8:65:2c:b1:5d:2f:
20:09:3b:45:f6:60:97:cb:98:6b:f8:79:13:03:11:c7:d7:dc:
33:ba:6a:99:3f:d5:56:c2:5a:56:b7:ec:ec:56:ff:6d:d4:77:
cf:ad:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:23 2025 by rpki-client