Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/411CF7DAC32011EFAA470754762E951A.roa
File: 411CF7DAC32011EFAA470754762E951A.roa (raw, json)
Hash identifier: wu91JEfcamx/E0KYmzriT9vBK3GvCrzcc38mjB8PPSw=
Subject key identifier: 43:1A:AC:23:67:C6:C3:7B:79:0E:80:3A:43:4D:10:A9:7B:81:0F:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/411CF7DAC32011EFAA470754762E951A.roa
Signing time: Thu 26 Dec 2024 00:27:57 +0000
ROA not before: Thu 26 Dec 2024 00:00:54 +0000
ROA not after: Wed 10 Dec 2025 00:00:54 +0000
asID: 984
IP address blocks: 156.228.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59927 (0xea17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:54 2024 GMT
Not After : Dec 10 00:00:54 2025 GMT
Subject: CN=676ca30d-9bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:12:30:65:60:7f:97:25:ec:fc:0c:98:3d:
c9:76:4d:79:03:f7:d6:7d:6e:a6:f8:c0:68:50:2b:
bd:d1:19:1b:7d:ce:d7:5b:c1:cf:f0:66:e9:45:e4:
95:da:3f:58:68:d1:24:53:40:3d:e0:41:4b:6e:70:
59:33:a7:87:6d:f9:f3:bc:1a:28:1a:54:e8:e4:62:
03:8a:c8:d6:3f:d4:5c:3b:06:6d:32:85:3d:d8:5b:
df:2e:6c:70:14:8b:be:a0:6c:b0:37:e9:ba:1e:ae:
13:ec:61:32:dc:2c:50:92:71:8b:06:d5:d2:43:19:
a1:da:20:a5:6f:bc:5d:a6:d4:79:f1:ef:06:c4:d9:
a8:d1:65:4d:a1:3d:84:bb:75:63:a0:92:5d:fd:fa:
09:19:f7:29:1e:7d:a4:fc:0e:e7:4c:0d:cf:55:c0:
11:17:f2:1f:cc:66:6d:34:2c:5a:cf:19:e5:af:5f:
2d:92:6d:7c:f6:c1:bb:6e:fe:e6:21:c4:a3:eb:74:
3e:c3:94:a8:83:93:f4:6c:31:ea:46:d7:81:2b:b0:
3a:cf:6c:c8:0c:26:83:b2:51:e4:c5:8f:6b:4f:6b:
33:ea:b9:f7:1b:62:f4:41:96:7d:f9:66:80:c7:1b:
4b:14:68:d4:49:a3:e3:0b:2c:d0:c6:39:69:67:85:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:AC:23:67:C6:C3:7B:79:0E:80:3A:43:4D:10:A9:7B:81:0F:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/411CF7DAC32011EFAA470754762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:70:a7:a8:9c:f3:2a:c6:62:15:09:e2:c5:8a:82:8b:98:1f:
03:63:41:48:aa:2c:d5:37:81:aa:a3:b6:ca:b6:a9:cf:f7:82:
b6:3f:4a:7d:09:dc:3c:af:55:0d:d7:c0:d5:79:26:80:12:99:
c5:44:93:da:86:05:3d:db:7e:cd:0a:2d:1c:45:60:72:62:2c:
91:cf:dd:78:a6:c2:4e:73:70:e6:be:ce:6a:af:c9:44:62:a3:
37:d7:e4:1d:b7:e6:be:e2:88:d8:38:5f:6b:60:f6:80:dc:70:
16:3b:db:ae:2f:0b:e2:6a:0a:07:1b:f5:74:e7:21:8c:7c:b5:
a6:db:f6:56:30:60:84:7f:38:fb:37:c8:8b:8b:2b:2e:8b:4a:
aa:69:be:34:49:f0:b6:09:8f:49:cd:1a:14:0f:7f:30:13:a2:
66:54:06:77:31:97:d8:41:45:6c:b5:24:20:b4:cc:b4:d0:f9:
bb:96:29:ca:a3:b9:ed:6c:49:e5:60:8a:ab:c0:a9:34:5f:10:
4d:96:63:95:45:40:12:fb:1b:48:7d:6f:df:b6:30:95:29:0f:
96:9f:8b:d9:85:f7:0f:5a:46:79:8d:db:8d:ca:f3:c7:24:6b:
1b:7b:97:62:e6:fd:b8:8e:f4:bf:6a:b4:20:36:6b:60:8d:8f:
e8:f8:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:22 2025 by rpki-client