Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/405580F8C97711EF80ABF4B5762E951A.roa
File: 405580F8C97711EF80ABF4B5762E951A.roa (raw, json)
Hash identifier: kFmaQPd9397jIX1C4qOCcRJHJMSoPiiqIsPP9SqlwBU=
Subject key identifier: 9C:DD:E8:3C:8E:27:AA:95:B9:0B:45:08:48:17:04:66:5C:5B:65:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/405580F8C97711EF80ABF4B5762E951A.roa
Signing time: Fri 03 Jan 2025 02:05:49 +0000
ROA not before: Fri 03 Jan 2025 02:05:45 +0000
ROA not after: Mon 13 Dec 2027 02:05:45 +0000
asID: 17561
IP address blocks: 156.227.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62705 (0xf4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:05:45 2025 GMT
Not After : Dec 13 02:05:45 2027 GMT
Subject: CN=677745fd-9450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:6f:13:37:d9:39:cc:c0:72:49:50:60:b1:
b2:be:d2:35:95:de:29:82:de:24:2b:d4:78:c7:ee:
5c:9d:6a:59:99:78:4a:b4:d9:07:46:58:57:99:45:
f8:d6:e4:d4:d8:e6:43:de:8f:a1:de:8f:8e:4c:97:
86:80:ca:ef:ab:4d:2f:4a:d4:1c:49:4d:f4:8e:aa:
72:ab:00:36:ab:9b:d5:64:6b:39:3c:23:97:a7:45:
38:13:a7:74:d3:80:9c:28:f2:77:15:22:b2:17:0d:
b4:97:e9:ae:6b:4b:bf:fd:7c:d0:ad:14:32:9e:77:
fe:0b:9d:bb:3f:65:c9:9c:a0:6f:d4:df:4e:75:e8:
1f:70:da:6a:21:ff:cf:71:39:6f:cf:5c:ac:08:98:
36:eb:8f:40:00:21:90:91:17:7d:64:14:40:76:75:
cf:3d:e4:e7:78:92:fa:00:11:55:a4:3f:04:a0:11:
1e:5d:66:cd:c7:05:26:e7:ac:2b:b9:51:b3:08:39:
48:53:1f:81:12:66:da:ce:66:ff:ad:eb:d2:75:8f:
c9:46:4c:1e:62:28:0f:98:5d:a4:04:09:46:d8:88:
8a:9b:20:c2:88:2e:58:f4:de:40:c6:b1:b8:de:f2:
a7:4c:0f:68:4c:8e:11:c7:3e:e4:47:57:66:21:ec:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DD:E8:3C:8E:27:AA:95:B9:0B:45:08:48:17:04:66:5C:5B:65:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/405580F8C97711EF80ABF4B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.106.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:7f:67:d4:10:a2:2f:18:01:a6:05:dd:12:8e:59:72:ea:2a:
30:da:c7:7d:83:05:c8:4c:b9:23:db:d6:84:ec:37:13:0a:b4:
2b:70:7e:80:8c:4d:5b:83:0e:1a:d9:03:40:98:a3:bd:13:37:
78:0f:a3:ec:35:c5:6d:81:9c:74:19:c8:f2:7d:3f:a6:1b:bf:
66:a7:dd:3e:f9:f6:6d:d1:fb:45:69:d6:5c:bf:54:7a:d2:3f:
49:b5:70:14:8a:99:5e:a6:1e:00:a7:e6:2c:45:7a:dd:57:f0:
64:c2:71:b3:a3:2b:1e:e8:54:f3:9e:31:82:53:4f:4c:2b:3a:
2e:8f:17:ed:a3:97:17:a4:67:33:13:5a:ef:ab:88:c9:b9:83:
b6:6c:a1:a2:0c:b2:a6:ea:a8:44:0f:bf:74:bc:d0:9b:95:ef:
5f:e1:05:b9:73:82:de:2c:b1:36:68:2d:99:b6:3b:5b:1e:2d:
86:5a:c2:73:a6:fe:95:3c:18:54:27:98:6e:ac:56:57:21:0d:
ec:76:f8:21:00:c7:85:a8:b4:11:b2:2f:83:27:50:9e:f2:7e:
6c:80:fe:3e:a1:03:95:5d:93:5b:35:29:d4:11:83:1c:67:49:
ea:d1:c2:c2:1e:36:ba:19:48:73:22:7e:87:ca:b3:94:dc:a6:
87:35:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:47 2025 by rpki-client