Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2790BF7CC96F11EFBAED9F7A762E951A.roa
File: 2790BF7CC96F11EFBAED9F7A762E951A.roa (raw, json)
Hash identifier: yLawVAojtbmd9So2++LaMidximc2itUKAYU+C6rbIMY=
Subject key identifier: 69:9A:85:8C:8F:0F:3C:2B:B9:9F:73:CA:58:65:F2:3F:3C:69:DE:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2790BF7CC96F11EFBAED9F7A762E951A.roa
Signing time: Fri 03 Jan 2025 01:07:51 +0000
ROA not before: Fri 03 Jan 2025 01:07:48 +0000
ROA not after: Mon 13 Dec 2027 01:07:48 +0000
asID: 17561
IP address blocks: 156.227.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62627 (0xf4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 01:07:48 2025 GMT
Not After : Dec 13 01:07:48 2027 GMT
Subject: CN=67773867-eadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:06:a7:6d:4e:ef:d5:c0:f8:db:2f:29:2f:
a1:a7:9f:49:97:01:41:0b:2b:42:24:f3:09:9b:18:
95:b2:f2:e6:f1:a1:e1:d4:67:30:75:6c:5c:43:df:
fb:c8:7b:e1:1b:11:1a:6e:01:c1:b2:40:c5:e7:6c:
f9:6d:e9:20:27:99:f3:0c:b6:42:02:8b:b1:d7:3b:
1c:b1:f6:93:1a:5a:ce:5e:ef:26:b2:24:da:5c:ed:
6e:fa:d5:dd:3d:10:a4:7f:3a:62:c2:e7:d9:18:f6:
64:fe:0d:ac:64:73:1c:e1:eb:60:0f:4f:85:f3:d5:
c4:54:79:a1:ee:62:4a:56:8d:44:54:7d:d0:f9:a2:
23:40:35:0a:66:12:fc:e9:c5:c2:03:e4:d6:8f:be:
6f:72:9c:68:20:05:ff:40:52:f7:01:58:a3:f0:bb:
02:34:c6:58:1b:19:6c:f2:64:8f:29:02:e3:72:79:
65:7e:52:00:a2:cf:61:3d:69:9d:8a:4a:b3:9d:90:
bb:96:58:0c:3a:89:e5:ae:d3:80:04:14:08:95:fb:
18:8e:ac:6e:20:55:24:71:88:51:ef:16:5b:f4:83:
b6:0a:03:7f:05:18:67:e2:75:56:13:00:7e:e7:13:
5c:2f:6b:57:4a:2f:55:2c:15:16:3c:d7:ff:c3:cf:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9A:85:8C:8F:0F:3C:2B:B9:9F:73:CA:58:65:F2:3F:3C:69:DE:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2790BF7CC96F11EFBAED9F7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.67.0/24
Signature Algorithm: sha256WithRSAEncryption
26:fb:d4:87:cc:e0:69:77:cc:28:4b:eb:ba:fd:26:0c:58:4c:
ba:dc:12:28:2a:64:69:f5:30:00:30:9d:63:fe:36:15:d2:94:
c7:45:47:67:cf:c4:47:ac:e5:80:19:7a:f7:d0:04:56:4e:48:
73:ba:d7:4b:04:a3:9e:bc:9a:53:17:9b:90:f8:a9:96:f1:7e:
a3:46:9e:d7:8c:bd:b2:6c:61:4b:e9:02:1b:11:db:ec:43:69:
41:8d:9b:fe:e3:aa:76:bb:8f:5e:19:54:e8:09:1a:f8:44:7e:
f2:54:d0:0c:bd:7f:ef:de:fc:8b:d8:3b:bb:a7:06:ed:e7:fd:
c6:d0:24:99:03:37:64:df:7f:28:92:46:20:e3:c8:03:eb:78:
3a:b6:90:fc:2f:4a:1c:eb:b4:14:c2:76:62:73:6c:f3:5c:1b:
03:77:6c:1c:d6:c2:50:ab:15:4c:d8:27:45:55:f3:4c:94:c5:
5a:fd:41:3a:31:77:1f:a7:8e:5f:04:bc:37:6b:65:c4:15:de:
26:d4:6f:c9:1b:3f:3e:79:f0:1e:59:82:71:46:b8:55:f9:d0:
33:b8:ac:11:ec:b1:1c:2b:37:54:ff:51:1e:de:44:33:ee:02:
f2:cf:0a:1a:b4:df:d2:3d:00:e1:60:ad:10:6b:3e:bb:b8:4a:
35:ce:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:46 2025 by rpki-client