Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22D17F60CDA911EF9975B469762E951A.roa
File: 22D17F60CDA911EF9975B469762E951A.roa (raw, json)
Hash identifier: Tk0ZaL1INsVm74USaDZ24FxDzMCbfHx9FW6E0xo8SKA=
Subject key identifier: 12:FE:B8:43:24:7F:20:34:70:6C:88:4B:33:29:DF:16:3B:E5:FF:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010141
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22D17F60CDA911EF9975B469762E951A.roa
Signing time: Wed 08 Jan 2025 10:12:59 +0000
ROA not before: Wed 08 Jan 2025 10:12:55 +0000
ROA not after: Mon 13 Dec 2027 10:12:55 +0000
asID: 17561
IP address blocks: 156.255.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65857 (0x10141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:12:55 2025 GMT
Not After : Dec 13 10:12:55 2027 GMT
Subject: CN=677e4fab-eeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:6d:b3:5a:f4:8f:cd:8c:6b:c8:52:4d:46:
04:e6:f0:26:0b:9b:cc:a1:49:85:2a:6d:87:ea:35:
34:5f:45:2c:62:17:79:5f:5b:1a:87:64:3a:60:02:
10:f7:31:a9:8a:eb:ea:68:e8:93:8e:b4:7d:98:ed:
f6:f2:af:f5:28:88:b5:42:f0:65:f4:82:33:7f:19:
b2:1b:70:5d:a6:27:61:4e:2d:a0:2b:0c:a9:df:34:
78:27:e4:f2:d9:32:94:a0:bd:35:70:a2:b4:41:8c:
a3:88:8b:26:8b:8a:e1:07:40:c9:ae:42:23:59:ae:
24:65:f7:3d:07:39:7a:ee:08:5b:02:1e:db:cf:51:
97:5e:5c:ae:cc:70:1f:16:ac:78:2a:81:41:6f:5d:
2a:9c:11:3d:c5:52:84:4c:70:87:49:70:5b:02:06:
5f:f7:1e:29:0e:e6:ae:99:a0:10:ff:fc:07:cb:a3:
0e:5f:59:e4:4a:9e:10:a3:dd:07:85:e5:9c:7f:7f:
2d:1c:30:01:11:88:2d:12:35:dd:a1:da:ce:0d:23:
1d:ba:a2:98:c3:9b:86:00:75:60:17:64:54:4b:22:
f9:ec:1d:0c:87:6c:df:42:ae:23:e8:bf:11:a5:79:
fb:35:22:67:d2:02:95:48:f7:3d:31:4c:4f:af:cd:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FE:B8:43:24:7F:20:34:70:6C:88:4B:33:29:DF:16:3B:E5:FF:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22D17F60CDA911EF9975B469762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9b:c8:5a:09:c7:47:75:66:d7:97:5b:ea:21:b4:94:40:c3:
9d:f2:ac:cf:25:c8:4d:e5:ca:84:bb:b8:f2:91:7b:43:c4:b1:
35:db:16:f6:c7:63:a6:76:e1:6d:74:9e:40:4a:bf:a9:33:08:
f0:ec:21:bb:52:d7:a4:dc:90:03:f8:d6:cd:d0:a6:51:b5:14:
32:4b:d1:77:c4:dc:ac:61:ed:39:b6:31:37:9d:31:2e:07:c2:
7c:78:d9:92:d9:a7:e1:9c:aa:1e:a0:b4:44:b1:2f:77:47:a3:
23:58:6b:47:50:39:45:95:b4:9d:de:3d:1e:01:16:08:61:a5:
52:1d:51:59:e1:12:79:48:bd:d6:16:cb:6b:4c:4d:cb:3c:8d:
de:4f:d4:af:34:b3:3c:8f:9d:e6:d3:34:8c:9b:27:44:8f:99:
05:93:b7:f2:2a:0e:59:c5:8b:7f:37:d2:c6:19:87:b2:57:9d:
7c:bb:77:cb:13:d7:40:4b:9b:d2:2d:4a:d3:a8:ee:28:45:c6:
c0:ed:c0:12:60:44:65:ff:1b:56:da:ab:9d:ca:07:02:5b:d4:
09:20:45:75:92:a1:66:1b:f8:d3:d8:2f:ee:e0:22:d0:94:51:
75:5c:33:39:ad:9d:0f:e2:31:6b:de:f3:65:8f:df:63:49:bf:
38:91:8b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:35 2025 by rpki-client