Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2773B6A2CAD711EF8E5B876C762E951A.roa
File: 2773B6A2CAD711EF8E5B876C762E951A.roa (raw, json)
Hash identifier: 9BOOUj46HsdjSQ0yBEPW025OuDDjvyRx65ZLA2gUNn4=
Subject key identifier: 2A:59:03:DF:68:9A:D7:D5:C0:BA:01:7D:93:46:7A:AB:3B:25:90:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F78C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2773B6A2CAD711EF8E5B876C762E951A.roa
Signing time: Sat 04 Jan 2025 20:04:50 +0000
ROA not before: Sun 05 Jan 2025 20:04:46 +0000
ROA not after: Thu 06 Feb 2025 20:04:46 +0000
asID: 213636
IP address blocks: 156.229.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63372 (0xf78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 20:04:46 2025 GMT
Not After : Feb 6 20:04:46 2025 GMT
Subject: CN=67799462-20aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:6b:41:73:89:28:b8:27:11:7b:0a:9e:cc:
b3:12:6d:17:62:6f:83:e8:0a:c6:b3:63:fa:dd:21:
4f:07:fc:08:bd:40:55:c8:aa:9f:58:dd:e3:15:3a:
cb:8f:36:d0:0b:00:ed:7b:67:12:8e:6e:e2:6e:02:
18:bd:26:83:4d:2b:20:be:3d:d3:30:a3:d3:d7:24:
b7:f3:d1:4d:6f:65:d7:60:e0:05:cc:11:33:94:4c:
6f:36:b5:8a:83:50:fd:a7:e1:05:18:52:ef:55:12:
17:80:2e:09:3b:ca:ab:89:b8:a0:08:a5:35:d5:4f:
03:e9:a2:44:7b:d0:02:03:9d:fa:89:a4:87:db:56:
f3:3d:7c:06:a1:c2:a6:ec:0f:7f:79:87:07:34:15:
98:14:00:e7:76:e8:68:db:08:6c:d5:7a:af:50:b9:
b7:bb:92:2c:71:56:dc:26:6c:75:b0:b2:a0:09:82:
cf:61:81:55:9a:2d:2b:cb:50:cf:a4:a5:40:e7:69:
f2:0a:f3:78:19:c0:d1:eb:75:e4:e7:3b:03:52:fc:
5e:53:98:61:6e:49:49:ca:5b:7c:e8:c1:c8:c0:52:
9f:c6:5f:cd:b8:93:c7:88:b8:b3:3b:58:6d:6c:6f:
fb:7d:98:01:a2:8f:85:51:5a:8a:6f:da:fe:96:8e:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:03:DF:68:9A:D7:D5:C0:BA:01:7D:93:46:7A:AB:3B:25:90:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2773B6A2CAD711EF8E5B876C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.236.0/24
Signature Algorithm: sha256WithRSAEncryption
58:82:8d:82:93:69:b0:f1:86:c2:55:85:35:70:94:17:24:f0:
c4:bc:5b:bc:3e:ef:d2:2e:85:ee:ca:ba:42:30:8e:f8:cd:49:
f2:03:74:0a:18:eb:01:45:0a:a0:98:f9:72:8b:7d:10:8e:e2:
f0:da:3a:86:ab:b2:7b:c9:56:8f:b2:32:0c:db:75:f7:02:9d:
9c:5f:44:f2:4a:5a:d8:11:5b:1b:d7:c4:e3:4f:91:c6:38:3c:
68:c8:d6:3b:9f:ca:8e:83:65:d6:68:a9:74:a3:ad:79:87:d8:
b9:18:40:ed:05:18:18:36:cc:a9:16:42:16:5e:e3:fe:f8:37:
0e:91:1d:e8:06:83:2f:b7:fb:6c:af:96:7f:29:fb:a7:d9:11:
2a:9d:32:cc:28:e1:a8:d6:ca:f2:4c:e7:cc:3f:d1:d1:08:4b:
53:88:c7:15:c9:81:11:a7:86:26:34:d3:2e:9c:7d:84:94:f4:
1f:6c:29:d0:2e:c7:42:97:7c:d5:09:fb:5b:3e:92:f0:b4:e7:
8b:f3:c6:13:b8:9e:25:35:df:7b:34:53:97:eb:2b:84:ab:41:
c5:a8:78:69:a3:b8:75:b4:f9:84:41:b7:38:4b:12:2b:1c:4c:
7f:af:57:b2:5d:cb:ed:9a:5a:6a:e4:cf:5f:a6:cf:c2:5f:3c:
cb:a6:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 16:04:34 2025 by rpki-client