Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FF5E506C97A11EFA6689F4C762E951A.roa
File: 2FF5E506C97A11EFA6689F4C762E951A.roa (raw, json)
Hash identifier: taHEeTSOH/RuDWd8gGxEXY13MLkOwVzUuHRpIUNmI7M=
Subject key identifier: A6:75:4F:F4:48:68:BB:41:86:B9:48:0A:AD:46:89:92:8F:85:E9:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F50D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FF5E506C97A11EFA6689F4C762E951A.roa
Signing time: Fri 03 Jan 2025 02:26:50 +0000
ROA not before: Fri 03 Jan 2025 02:26:46 +0000
ROA not after: Mon 13 Dec 2027 02:26:46 +0000
asID: 17561
IP address blocks: 156.227.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62733 (0xf50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:26:46 2025 GMT
Not After : Dec 13 02:26:46 2027 GMT
Subject: CN=67774aea-b487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:f3:c4:2f:9b:db:33:43:28:f9:f3:41:4c:
b6:6e:2a:e9:50:dc:65:47:49:36:35:59:cf:39:05:
83:f4:63:66:6b:c1:48:61:c4:17:a0:37:dd:eb:8e:
e9:6c:54:ab:e6:ed:5d:4c:24:bd:ae:f7:a0:1a:44:
c6:de:7f:8f:a1:c4:75:94:89:41:b6:65:4a:59:ee:
b6:9c:89:41:6b:f7:02:ea:e0:29:3c:52:a9:c8:65:
52:cb:a9:cf:58:d2:32:29:31:8a:b2:fa:29:18:a1:
ae:eb:40:59:8b:43:21:bf:08:b0:af:91:0b:3e:dc:
79:15:38:bc:5c:e3:0c:21:ca:04:42:19:4e:6c:95:
4f:95:3b:86:0b:dd:b8:13:83:d4:4f:2d:11:56:f6:
6c:54:cf:04:09:ee:28:68:ca:1b:40:c0:1c:ea:3d:
d1:ce:64:cb:b9:8b:ad:7e:cc:61:83:99:71:29:20:
99:21:91:99:84:87:22:ae:d3:6c:12:d3:6e:ff:c3:
7c:f1:d3:b4:c0:20:1b:c4:16:cd:c1:9f:a2:98:eb:
da:29:01:51:5b:f5:dd:ac:87:df:5e:df:cd:a5:cd:
cb:98:c2:f7:2f:fb:fc:a0:84:b4:43:20:23:bb:e5:
9d:33:42:66:1e:9d:5c:ff:1c:ba:dc:3a:23:2c:76:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:75:4F:F4:48:68:BB:41:86:B9:48:0A:AD:46:89:92:8F:85:E9:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FF5E506C97A11EFA6689F4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:61:22:8c:6f:df:a9:b6:a4:c9:cb:62:42:ba:da:c1:a2:ea:
82:d0:f1:ca:40:2a:93:94:d2:58:9b:10:35:49:78:17:3c:19:
e5:38:6b:b0:ae:64:aa:46:de:fe:c6:20:a7:84:5b:dc:7a:92:
15:67:28:9a:e0:4c:7b:77:25:7a:1a:9c:0f:2a:56:94:b0:71:
1f:af:0b:87:4b:cf:81:19:67:5a:46:7c:36:62:89:43:00:e6:
e3:52:a9:e9:b4:96:bf:59:ca:47:d0:22:57:32:dc:ab:bf:ce:
da:dc:2f:7d:da:63:9a:4e:a1:cd:8c:64:57:50:5b:92:bd:a2:
28:a0:08:09:12:25:12:83:38:69:ac:1a:82:8a:24:fa:27:c9:
10:27:45:87:31:0a:f9:cc:1f:d0:01:1c:84:78:52:ac:8a:e4:
ce:c9:01:c0:6a:ef:00:4c:97:a0:e5:7b:9f:e7:f1:e4:5c:b9:
0c:27:d7:99:f6:33:dd:15:8d:e0:11:38:32:80:2f:fa:8b:fd:
37:84:3d:ff:dd:1f:5d:45:bd:20:c9:ff:5e:4b:46:d0:78:18:
68:12:7b:95:07:bc:ff:f5:48:08:c9:2d:5d:7c:d5:9b:ef:58:
ae:64:3d:a3:7c:61:27:e7:d1:a8:55:78:de:a1:35:58:e9:5e:
25:a7:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:13 2025 by rpki-client