Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/276DB77CCC9711EFB3FED081762E951A.roa
File: 276DB77CCC9711EFB3FED081762E951A.roa (raw, json)
Hash identifier: LJmu3+nwqShz1UL/ARrx7t/gHmtCKKZeuW9hGoM4zgk=
Subject key identifier: 44:26:5D:AA:41:FB:1C:72:0E:FB:07:6D:19:6E:39:CE:A8:B0:BB:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F940
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/276DB77CCC9711EFB3FED081762E951A.roa
Signing time: Tue 07 Jan 2025 01:31:45 +0000
ROA not before: Tue 07 Jan 2025 01:31:41 +0000
ROA not after: Mon 13 Dec 2027 01:31:41 +0000
asID: 17561
IP address blocks: 156.227.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63808 (0xf940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 01:31:41 2025 GMT
Not After : Dec 13 01:31:41 2027 GMT
Subject: CN=677c8400-fb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c2:d7:0e:18:1f:49:22:27:e9:7f:33:d8:73:
96:b6:af:91:da:04:7c:da:9d:32:76:4a:5f:5e:53:
ae:74:07:46:29:80:11:d4:67:82:20:23:a7:16:db:
41:32:ef:4e:14:4a:98:06:f1:cf:67:ba:96:44:43:
8e:8f:03:d1:0a:43:8a:fe:63:bc:e7:49:e4:2d:56:
2e:1d:8e:a6:a3:3f:8e:c1:50:29:4b:99:18:27:57:
e2:98:7e:ef:c7:ab:2a:57:da:67:f8:27:dc:13:21:
fd:55:fa:94:4b:3e:ad:b4:c4:2e:25:78:9c:0d:a3:
64:52:d2:80:0d:4d:8d:5c:86:34:f7:f2:82:bd:84:
e8:d2:ea:af:2b:ed:03:08:3b:80:c3:98:cb:66:4b:
79:d0:74:82:d8:68:fd:0b:62:34:e8:e6:bb:e6:6c:
04:07:60:8b:19:08:f6:b0:9a:e9:70:e8:20:d8:94:
b5:51:64:f9:2a:56:19:f5:8c:26:32:e0:23:3d:66:
fa:c3:ce:bb:91:dd:6a:8b:ed:92:35:df:6e:3f:fd:
37:b5:a5:76:b2:7e:88:54:1d:48:96:bb:29:0b:93:
51:f3:a6:2a:4f:02:c2:00:65:92:b2:ea:84:fa:36:
0e:c8:07:6a:07:27:66:12:53:23:7c:d1:84:b6:c0:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:26:5D:AA:41:FB:1C:72:0E:FB:07:6D:19:6E:39:CE:A8:B0:BB:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/276DB77CCC9711EFB3FED081762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.86.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ff:62:2f:5a:82:51:01:58:16:13:55:52:ba:56:e7:a0:c9:
93:79:f9:a7:0c:66:d9:13:38:e3:5a:32:8f:d8:ca:5f:e8:7f:
da:5f:d6:a2:41:ac:a8:09:4f:aa:1f:c7:29:89:ac:b2:63:31:
93:3b:10:82:fe:0f:02:f0:c9:ec:ed:d1:27:b0:70:7e:63:3b:
14:2f:82:bc:15:fd:14:86:04:d6:d6:99:1b:94:81:b8:42:10:
65:cb:18:f6:63:98:81:b7:94:62:0e:72:2b:6b:d8:13:08:ac:
4a:bb:6e:97:06:e1:8c:64:72:d7:15:0d:7c:1e:d6:d8:92:9d:
08:7f:15:7c:d4:c1:ff:39:b9:fe:91:43:8f:ba:81:74:c0:fe:
51:8a:53:af:bd:2f:4f:68:2d:bc:4e:d8:f4:6a:d7:43:6d:68:
32:8e:dd:a7:4b:29:f8:4e:f8:44:66:2b:eb:e1:d6:52:d1:48:
06:5b:3a:81:80:77:cd:a1:ba:cc:4c:a6:4d:d7:a8:5a:65:f7:
3b:b7:68:e3:f9:0e:a9:72:d0:d9:97:de:e1:48:f2:49:7f:55:
7e:23:86:ee:07:f6:da:a8:37:9d:71:c6:86:28:f9:b3:b9:2e:
fe:67:e2:c2:bd:cf:7d:75:68:8a:66:5c:1f:83:9c:1b:df:14:
0a:33:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:16 2025 by rpki-client