Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C2F3C00C28C11EFA997CBBE762E951A.roa
File: 2C2F3C00C28C11EFA997CBBE762E951A.roa (raw, json)
Hash identifier: dJniUW0eioRAIDgir0gbNljjD7u6ho9wEN01LulC0dw=
Subject key identifier: 76:B0:61:16:6A:69:AC:49:9D:81:ED:33:15:F0:27:49:92:4F:39:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E971
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C2F3C00C28C11EFA997CBBE762E951A.roa
Signing time: Wed 25 Dec 2024 06:47:56 +0000
ROA not before: Wed 25 Dec 2024 06:47:53 +0000
ROA not after: Wed 10 Dec 2025 06:47:53 +0000
asID: 984
IP address blocks: 156.228.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59761 (0xe971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:47:53 2024 GMT
Not After : Dec 10 06:47:53 2025 GMT
Subject: CN=676baa9c-c745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f2:16:62:cd:d3:34:6e:d7:a2:85:3a:05:bc:
05:db:24:23:01:58:6a:94:00:1a:12:5b:32:ce:d6:
4b:c4:b1:0d:4f:52:29:52:fc:67:ec:62:df:60:6d:
5e:0b:d6:0d:19:43:db:03:ad:fa:7c:8b:50:a1:d8:
d2:55:01:66:e0:95:c0:1e:e3:6f:1f:75:b7:fd:ec:
d8:57:27:fa:f3:c8:47:99:43:1c:f2:6a:92:95:6a:
22:f5:70:17:55:c1:f4:30:41:a0:fc:f4:bd:62:bf:
47:6a:12:93:33:cf:71:0b:17:77:94:e1:78:88:cf:
fd:17:75:4d:ba:d9:7b:27:73:24:c0:e5:70:13:2e:
ed:c3:a6:b3:6a:3c:4a:33:71:10:c7:cc:e2:e2:ec:
9f:06:84:c9:4c:c5:7d:f4:84:c5:e7:08:07:56:83:
90:68:7a:bd:ad:5b:e1:d5:7a:96:9a:f6:9d:5a:60:
3e:6d:76:49:78:2d:b8:26:16:6f:d9:36:6f:d6:f1:
df:e1:6f:42:3c:6e:fe:17:30:8b:3c:85:fd:d6:77:
e4:fd:d5:b9:3e:48:35:b1:71:49:8f:de:9b:35:f3:
25:b8:fe:55:62:68:73:08:6e:fb:1a:b0:22:e6:39:
9f:43:7f:f2:0b:eb:ed:ee:79:06:d6:a0:73:80:85:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B0:61:16:6A:69:AC:49:9D:81:ED:33:15:F0:27:49:92:4F:39:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C2F3C00C28C11EFA997CBBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:90:9b:58:c9:dd:c5:c3:56:c4:48:28:5e:50:d4:8a:cd:f4:
10:26:86:7d:63:da:c9:f0:c7:6c:55:eb:da:aa:56:8d:df:32:
0b:bb:82:8b:12:e3:65:67:15:d4:11:a6:b7:b9:03:30:fb:cb:
92:37:9a:42:13:36:78:b0:18:dc:b4:0b:fe:5a:06:f8:d6:14:
06:0f:47:df:25:55:75:4c:9b:6e:e0:08:df:e4:f4:63:2f:ab:
cb:8b:b9:57:ba:91:0f:c2:2e:7d:b1:55:2f:24:46:73:6d:ef:
ae:ab:6e:be:c1:a8:df:91:af:f6:68:a3:82:f3:33:8f:16:96:
39:d1:b8:81:f1:7e:8b:a6:c5:df:d2:79:7f:96:0f:4e:08:a8:
28:fb:c8:56:3a:e8:f3:b0:ab:7d:74:b8:4e:7d:c1:ea:58:ac:
70:0a:47:e1:52:04:6a:72:58:cc:0a:fd:b3:c5:0a:fe:3f:b8:
9f:e0:99:f0:f4:6e:50:d1:a2:f2:e8:60:17:ff:39:6c:9c:be:
aa:61:1a:fb:44:72:2a:c6:a7:69:a3:cd:c3:21:f2:67:fb:71:
2d:b3:c4:33:5c:09:bf:d0:52:f7:75:7a:c2:58:be:1c:52:08:
6c:98:84:48:b6:a5:88:01:1e:d2:df:10:1e:44:36:21:32:8a:
65:a6:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:27 2025 by rpki-client