Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22BF62B6C34B11EF8DA2547C762E951A.roa
File: 22BF62B6C34B11EF8DA2547C762E951A.roa (raw, json)
Hash identifier: FroAUh6sk8wSPid40Type/nuOULXsWnderqJAH2lBSU=
Subject key identifier: CD:E5:9A:84:AA:7C:16:25:D8:BE:0D:D5:FF:55:F9:D2:14:CB:1E:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22BF62B6C34B11EF8DA2547C762E951A.roa
Signing time: Thu 26 Dec 2024 05:34:54 +0000
ROA not before: Thu 26 Dec 2024 05:34:51 +0000
ROA not after: Wed 10 Dec 2025 05:34:51 +0000
asID: 984
IP address blocks: 156.245.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60479 (0xec3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 05:34:51 2024 GMT
Not After : Dec 10 05:34:51 2025 GMT
Subject: CN=676ceafe-5c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:84:de:1d:e0:12:fb:3e:ff:3d:76:ad:0d:
0f:9e:6c:60:5c:d7:77:cf:fd:96:fb:6f:40:db:72:
0c:20:07:d9:9d:84:28:f1:3c:0b:20:7d:cb:36:7e:
3c:cb:50:75:de:68:a2:99:ee:40:e7:d4:65:26:61:
9f:4d:28:ef:fd:87:a8:0d:47:a6:05:bc:e3:46:6a:
fc:f0:2b:20:be:af:a3:b3:6f:1d:c8:d7:1a:88:21:
7f:b2:11:e9:94:fa:75:f8:30:32:92:6f:79:79:bd:
17:3d:54:7b:b2:cf:b4:be:d6:c8:55:2d:ed:71:b1:
fe:05:97:fa:e8:26:03:07:4a:e7:1b:d3:18:c0:6a:
4a:81:b6:d3:fd:23:f6:1b:bc:15:1f:44:cd:c7:bc:
7e:55:01:c3:fc:f2:91:ec:43:28:c2:fc:61:62:21:
b5:72:4b:25:81:15:75:25:a3:8c:e5:d3:82:25:d6:
3b:a2:c7:89:ea:be:44:b0:d2:02:15:00:8d:7e:b7:
30:8a:8a:ca:49:da:50:db:fc:97:45:6f:4c:a5:98:
8e:32:57:36:1f:df:75:83:77:e4:bb:ea:82:38:93:
ed:4d:bd:c0:04:71:de:27:9a:48:71:63:f0:fa:56:
1f:14:4e:74:b7:e9:fe:de:86:46:6e:0c:25:67:c5:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E5:9A:84:AA:7C:16:25:D8:BE:0D:D5:FF:55:F9:D2:14:CB:1E:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22BF62B6C34B11EF8DA2547C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a7:73:97:1b:e0:ef:a3:3d:e6:d3:9f:be:ea:38:ce:76:f0:
c9:f8:41:7b:80:da:e8:0a:fe:d5:28:30:9e:ef:6b:f5:a8:2f:
09:84:c1:7c:9b:00:e1:6b:5f:38:72:ad:9d:52:f5:05:14:da:
5a:1a:a1:70:74:8e:01:e5:18:36:09:de:d8:48:97:ca:c4:00:
58:a9:58:87:9e:e9:18:7c:e7:ac:cc:10:dd:93:a9:df:a3:fc:
a2:a5:7c:a6:42:ac:4d:c8:b9:24:dc:eb:97:34:4d:b4:45:c8:
9a:b5:c2:bf:5b:76:74:68:b3:8f:71:65:c2:32:50:eb:57:10:
53:fa:70:3f:bf:ec:ee:42:b2:85:b7:20:ae:13:80:ca:57:d6:
23:aa:c5:15:8e:ee:5a:2a:ff:5d:73:40:cc:33:5b:9d:a7:50:
67:17:f6:83:15:6f:cf:85:3b:90:b2:26:64:5b:ce:c5:73:ab:
52:7b:d2:c6:d6:43:40:b1:e8:a8:ac:82:d7:c5:e4:92:55:9b:
22:c6:c7:54:f2:3a:39:4c:d5:7a:52:ad:2c:6d:18:e4:52:dc:
6f:67:00:79:77:c5:81:5a:7e:c5:4f:c1:94:18:c3:18:a8:22:
33:93:88:a7:40:95:c4:b2:63:6f:51:84:61:3f:ac:59:b1:9e:
29:15:c4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:53 2025 by rpki-client