Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30643AFACC9B11EF89F8BFA0762E951A.roa
File: 30643AFACC9B11EF89F8BFA0762E951A.roa (raw, json)
Hash identifier: ynasAa7pv8ucuIj3u2DKDDE/qOd9nw2iPG8XVTqWffA=
Subject key identifier: 25:E8:21:90:EE:AB:D4:5F:24:98:8D:59:3C:D1:D7:B3:01:EC:B9:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F964
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30643AFACC9B11EF89F8BFA0762E951A.roa
Signing time: Tue 07 Jan 2025 02:00:38 +0000
ROA not before: Tue 07 Jan 2025 02:00:34 +0000
ROA not after: Mon 13 Dec 2027 02:00:34 +0000
asID: 17561
IP address blocks: 156.227.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63844 (0xf964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 02:00:34 2025 GMT
Not After : Dec 13 02:00:34 2027 GMT
Subject: CN=677c8ac5-46fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:af:7f:5d:e4:4f:33:12:a7:1d:1b:7e:41:
7f:dd:ef:3c:ea:a4:03:e8:94:27:fa:35:b6:60:b7:
be:fd:75:b6:b3:be:bd:3b:14:b7:42:f8:9e:22:e4:
d8:56:42:c0:a8:bb:4c:9b:ab:09:2e:1b:43:15:c2:
2a:ca:30:99:de:ff:40:b5:12:33:fd:c8:51:73:e0:
3c:e8:7b:43:2f:83:25:7c:bd:62:7a:7c:a1:43:bf:
6e:d3:02:f9:c6:ca:86:a0:17:1c:95:c9:2e:56:c3:
07:27:ea:2a:3c:16:6d:3d:5e:a3:19:97:93:61:bb:
8b:78:97:ba:c7:21:d1:8f:49:02:9b:61:86:cb:4b:
51:6b:c8:be:83:4e:52:a6:61:30:fb:21:a5:4d:2d:
a7:70:e7:49:e7:fd:a3:ee:d2:24:b2:81:a1:82:d4:
43:b8:07:e1:ed:e1:65:50:61:21:83:d4:a1:14:10:
ad:a5:ed:91:d1:07:da:75:57:a6:ee:11:e3:57:3c:
13:5c:74:d9:ee:0e:17:47:53:5e:fd:28:73:90:f4:
a2:e2:6a:34:9f:91:72:c8:71:cd:02:50:30:90:c3:
a7:d3:9d:29:d7:d8:d6:d2:f8:25:6e:a6:2e:66:c9:
3c:b6:b0:b6:93:df:b2:76:53:15:21:75:11:a6:af:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E8:21:90:EE:AB:D4:5F:24:98:8D:59:3C:D1:D7:B3:01:EC:B9:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30643AFACC9B11EF89F8BFA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:cc:d9:f9:a8:2e:9d:c4:c4:72:98:db:b3:ca:c8:2b:e2:1a:
33:4c:9c:5a:bf:2a:68:f7:3d:95:a7:77:aa:32:13:98:66:63:
4b:9e:a0:4e:67:dd:19:77:6f:21:d6:2f:b9:b6:cc:fc:28:03:
23:6d:18:8b:4e:74:63:db:c7:e3:65:a2:b5:bf:6a:45:2e:5d:
12:f1:99:ef:8f:57:98:9c:dd:cf:2d:45:1a:14:8f:56:cc:91:
c2:62:55:fd:10:61:48:75:38:a7:78:b3:da:47:f2:04:17:3f:
e0:57:49:ec:c9:30:cc:c9:fb:ee:10:91:9b:fe:5f:f9:24:d6:
a3:dc:28:e4:24:81:fa:df:4d:1e:1d:8b:73:5e:9f:b8:d0:c8:
87:32:34:af:68:7e:1f:8e:59:0b:d9:0c:79:4b:85:36:b3:73:
c8:3f:3b:c7:58:25:2a:bc:cd:77:05:45:65:01:90:0b:7a:f3:
15:8c:83:70:63:7a:83:1c:7f:fa:b3:25:08:35:cb:df:ce:b4:
08:a2:b0:1f:4c:fd:e3:eb:b9:cd:26:f2:68:8c:cb:21:e6:10:
19:34:86:9d:a8:d0:d7:12:27:ed:4a:f8:c2:85:94:ed:64:c7:
50:fe:17:f3:9b:79:92:38:29:35:4d:ba:b7:f6:cc:2f:e2:97:
11:3b:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:19 2025 by rpki-client