Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23AF18AAC27A11EF978E1850762E951A.roa
File: 23AF18AAC27A11EF978E1850762E951A.roa (raw, json)
Hash identifier: +XrCzyqLy/nTA5dBa2osaBLgNYodZHFSCdBqTGq6gwA=
Subject key identifier: 94:1C:4E:F2:1F:88:33:FB:5C:0F:12:7F:99:57:C3:AA:E0:3D:61:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E893
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23AF18AAC27A11EF978E1850762E951A.roa
Signing time: Wed 25 Dec 2024 04:38:51 +0000
ROA not before: Wed 25 Dec 2024 04:38:48 +0000
ROA not after: Wed 10 Dec 2025 04:38:48 +0000
asID: 984
IP address blocks: 156.227.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59539 (0xe893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 04:38:48 2024 GMT
Not After : Dec 10 04:38:48 2025 GMT
Subject: CN=676b8c5b-0ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:72:e9:f0:70:27:c7:da:57:66:2a:1d:3e:
f8:96:d7:56:08:5a:18:f3:ba:ff:ac:43:e5:dd:aa:
d3:23:0a:8a:c1:75:2d:78:39:b6:91:e8:f8:56:0e:
67:14:08:6c:62:68:93:f2:bf:aa:d6:83:6c:28:c8:
61:55:1b:ca:3b:22:cb:62:ff:52:f2:05:42:09:c9:
4f:dc:00:5b:c4:84:06:96:43:ed:6c:cf:49:13:59:
cd:49:a4:ab:2e:59:c7:6d:40:0a:f7:98:a2:ac:f4:
bd:7e:c9:ed:fc:6a:06:2c:a1:a7:01:66:d3:98:28:
5f:79:e8:1c:56:cf:da:55:96:2b:6f:e5:8b:27:cd:
29:4f:ac:9c:98:e0:f0:c3:28:21:eb:4c:59:93:23:
9e:2d:7f:f1:01:e5:67:4e:ae:74:fd:a4:2d:49:bf:
0c:ac:17:10:9e:6c:46:d9:a7:ac:e7:1c:b6:6e:a0:
08:1f:c3:69:67:76:99:09:07:d1:14:fc:db:79:53:
57:b8:34:b5:e1:56:6d:97:18:fb:7b:10:53:e7:a0:
46:54:e0:ea:e2:00:5d:ee:ff:c0:21:7a:56:f7:a0:
24:03:4c:47:b3:9e:54:ca:7f:3a:ae:67:56:39:27:
1f:ea:69:ae:95:88:a0:93:af:e9:46:ad:c5:11:4f:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1C:4E:F2:1F:88:33:FB:5C:0F:12:7F:99:57:C3:AA:E0:3D:61:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23AF18AAC27A11EF978E1850762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6f:a6:bb:a7:fa:1c:5c:b1:0a:58:9f:21:82:51:f8:cf:8c:
a7:a3:95:6a:37:23:53:9c:60:91:e0:04:ac:9d:90:53:e1:0d:
77:be:de:35:83:53:ac:fc:d9:83:79:1b:6c:6e:4e:8c:fb:04:
79:8e:a4:f2:0c:48:62:a4:d1:1d:11:54:6f:60:cc:6e:bf:80:
f8:2d:c0:9b:d4:c6:2a:d9:98:5b:ab:ed:1f:ab:78:15:fe:b0:
63:9c:91:48:07:0f:3b:b5:f6:87:3b:74:35:d7:3d:2e:fc:2d:
da:91:14:a6:44:25:61:1c:1d:4e:49:2d:cc:a8:17:0b:a4:11:
e8:43:87:e2:30:09:88:e5:f0:5e:5b:3a:fa:16:3e:f4:17:ad:
84:14:8e:75:b5:70:5b:e1:73:d8:b1:8f:4c:d8:e3:04:92:ec:
c4:76:91:b5:02:ec:d5:b0:5c:f2:de:74:f0:c6:a6:09:ac:1d:
aa:f4:20:28:9a:0d:f9:5a:84:f1:67:5b:41:66:61:fc:5d:4d:
3c:fc:f6:55:31:6f:53:ec:bd:06:a1:0a:5b:d6:f9:8c:6d:39:
50:06:f0:29:a8:a1:67:3d:36:0d:30:68:b7:ee:fe:e3:0d:dd:
60:08:e1:51:d0:f2:e8:05:09:2d:7e:43:89:2a:b5:a8:68:14:
f1:17:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:18 2025 by rpki-client