Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22ECF622C98611EF931FCCA0762E951A.roa
File: 22ECF622C98611EF931FCCA0762E951A.roa (raw, json)
Hash identifier: SDHr4QI1jTHMyt0GXZizSrAfOnzRFW2dP0bT3ry4Q/A=
Subject key identifier: 12:8C:E5:06:FA:96:EA:32:AD:27:5D:FE:D9:34:82:1D:85:3B:6D:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F57F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22ECF622C98611EF931FCCA0762E951A.roa
Signing time: Fri 03 Jan 2025 03:52:22 +0000
ROA not before: Fri 03 Jan 2025 03:52:18 +0000
ROA not after: Sat 13 Dec 2025 03:52:18 +0000
asID: 984
IP address blocks: 156.232.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62847 (0xf57f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 03:52:18 2025 GMT
Not After : Dec 13 03:52:18 2025 GMT
Subject: CN=67775ef6-8ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:0c:b4:30:06:bf:43:b0:fb:bc:fd:f4:65:
31:de:27:7d:a3:7c:5f:5c:bd:b7:40:32:b3:cb:fa:
46:5e:f8:62:3f:5d:7c:b1:e8:da:ba:0a:4c:c9:7e:
b6:b0:90:f8:9b:35:ee:df:74:d1:df:6a:40:32:aa:
4e:cc:1e:f2:4a:b6:19:23:0f:f1:5b:25:5c:26:6b:
10:5d:c7:0e:a1:b9:25:97:26:ac:fe:d4:eb:14:04:
17:59:ef:e3:de:b7:53:f8:35:10:40:a2:62:ad:bd:
17:7a:48:cd:16:a7:fe:33:1d:c3:76:c8:c1:c2:26:
41:39:a3:83:37:84:c9:a0:f3:61:a4:25:bb:a1:9b:
c6:10:6e:65:e2:92:c6:31:48:5b:86:62:68:33:38:
4c:1e:f1:39:8b:1a:e4:82:01:bc:b8:4a:6b:8f:92:
aa:de:2d:f7:0a:a3:9b:1f:d6:0e:82:e8:48:ef:36:
1a:d7:6d:0b:60:e4:6b:98:ee:a8:8b:e2:95:8d:0f:
9a:48:02:65:25:d1:c4:7e:40:77:e1:a9:84:11:6e:
f8:66:11:c0:9e:7a:f3:a8:f6:83:45:f1:9e:41:45:
22:36:fb:59:ad:08:35:1a:7d:bc:16:fa:98:e8:c5:
ec:43:95:6d:f5:9b:89:6a:a1:42:08:fe:2d:9c:d5:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8C:E5:06:FA:96:EA:32:AD:27:5D:FE:D9:34:82:1D:85:3B:6D:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22ECF622C98611EF931FCCA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ab:7c:65:c3:a3:e9:4d:c0:92:16:8f:b2:7f:a4:15:b0:8d:
b9:1c:3b:cc:a7:11:10:71:13:cc:bc:9b:8f:0f:40:88:ac:db:
98:31:46:72:ed:7f:ab:69:0b:09:a7:b0:90:46:a9:45:73:ea:
d3:f0:f3:ef:a9:da:cb:68:fc:3b:79:1f:95:97:02:dd:fe:e7:
63:fa:21:da:93:68:6b:85:c6:5e:ae:e0:d7:46:f9:92:89:7c:
14:61:89:68:00:50:51:f0:aa:3c:8d:e3:44:e2:7d:7b:cd:01:
a5:ba:ad:87:df:af:7a:95:6d:fe:bd:a9:05:90:66:4a:48:6b:
b7:2d:db:66:7e:e0:e4:66:ae:46:a9:0a:c1:98:ef:77:ee:d9:
f6:d7:f1:f3:e5:cb:d3:a2:d1:b7:1a:80:a7:93:40:de:dc:87:
8c:f9:a9:ee:f1:c2:af:49:6f:b4:6a:80:2b:6a:5c:27:74:7c:
95:76:5a:5e:3f:48:b4:82:18:5f:c1:c0:33:7b:40:40:7f:64:
65:25:2b:d3:a3:7d:5e:df:ff:90:74:61:ad:ec:64:2d:f1:35:
c9:aa:28:14:00:f8:44:64:61:2e:9b:f8:43:18:4a:b8:7d:98:
05:42:42:aa:6e:b6:fd:e7:0c:d0:b5:16:a2:fe:ff:1e:b2:4c:
f8:a9:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:33 2025 by rpki-client