Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B279250CC9E11EFA96097B5762E951A.roa
File: 2B279250CC9E11EFA96097B5762E951A.roa (raw, json)
Hash identifier: hemXVDXteH372WCExPW6GBbRPcWrPTRez8AAnogWf8g=
Subject key identifier: CE:F3:62:FD:EA:2F:E1:24:76:D1:20:6B:26:DD:7A:A9:A8:3A:DB:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F97A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B279250CC9E11EFA96097B5762E951A.roa
Signing time: Tue 07 Jan 2025 02:21:57 +0000
ROA not before: Tue 07 Jan 2025 02:21:53 +0000
ROA not after: Mon 13 Dec 2027 02:21:53 +0000
asID: 17561
IP address blocks: 156.227.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63866 (0xf97a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 02:21:53 2025 GMT
Not After : Dec 13 02:21:53 2027 GMT
Subject: CN=677c8fc5-b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:fb:14:ef:ca:27:d8:e5:d3:c9:fb:5b:15:
36:7f:ae:54:62:ec:99:fd:f8:68:21:a0:40:25:cf:
b8:1f:f5:9c:40:86:93:59:fe:60:ad:df:56:13:8f:
a0:03:6a:59:8f:4e:08:31:f3:68:08:8d:9a:52:b6:
34:b8:9f:ec:d5:64:fe:4a:1f:65:8f:ca:9a:a3:8c:
23:a0:2f:de:c4:73:bb:df:b5:9e:f2:e1:b2:33:94:
b1:12:5b:e0:4f:5f:ed:1e:0a:24:42:18:f3:b2:7b:
70:c1:2a:a1:f3:a9:26:4c:4f:74:e7:8c:75:86:89:
d6:8b:9f:46:f4:95:5c:d0:1f:63:69:f1:b8:ad:60:
bf:08:b1:2e:98:57:0a:6f:51:55:fd:88:07:e7:37:
06:4c:a2:20:96:01:33:1b:17:74:49:96:d3:18:69:
29:b6:c8:3d:d7:53:b6:9d:ee:52:fb:ae:45:89:67:
a2:7b:64:09:75:b3:7c:97:b3:28:89:3d:2a:b3:3a:
26:4f:11:eb:ea:3a:52:b0:5b:fa:fb:03:e9:6e:92:
96:72:df:ee:23:e8:47:ce:31:ab:37:a0:29:be:6f:
d6:e7:3f:59:ee:72:bc:5a:17:e2:0a:6c:f2:86:82:
ba:5f:55:72:e0:2b:d1:4c:cd:f1:d8:58:d8:71:71:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:62:FD:EA:2F:E1:24:76:D1:20:6B:26:DD:7A:A9:A8:3A:DB:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B279250CC9E11EFA96097B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f8:45:58:0e:55:e8:62:e2:e4:53:40:3f:45:95:fd:48:dd:
39:5a:fd:7e:29:14:6e:69:e1:2a:97:60:e8:df:82:ba:05:b8:
a2:06:46:2e:97:52:5b:b4:7b:cd:f6:69:23:f1:ab:1c:2f:7c:
3b:4c:c8:43:42:46:d3:d0:03:5e:62:78:09:00:88:d0:de:c5:
3c:14:ef:cf:17:e8:dc:41:82:1c:dc:6f:10:15:ae:cf:ef:ca:
93:44:42:64:27:e0:94:ad:78:ee:63:95:ad:e5:0a:49:ec:23:
28:da:f1:79:31:ed:32:67:4d:f1:10:d0:51:38:89:c0:a6:24:
fe:37:30:06:91:84:0d:e9:d4:d2:b4:0e:e5:76:9d:c7:b9:89:
45:8c:18:75:14:e5:2e:ef:12:22:5e:81:b9:97:96:55:2a:ff:
ee:c7:59:5b:02:13:79:c5:06:d0:85:16:45:56:04:90:2f:27:
8b:96:84:41:d1:8e:b4:6a:c5:12:a5:c9:f0:03:3e:51:f7:93:
85:5b:06:50:c8:ff:ea:66:9e:19:ec:7c:07:26:23:38:2f:07:
e0:ad:39:b1:f7:62:d5:be:95:f6:32:e6:76:34:a3:4a:6b:34:
5b:1c:f0:72:d0:81:86:f4:1a:23:fe:08:e1:d9:42:5f:de:ec:
29:c1:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:43 2025 by rpki-client