Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/440FB5E2C96D11EF9CA9F56B762E951A.roa
File: 440FB5E2C96D11EF9CA9F56B762E951A.roa (raw, json)
Hash identifier: 6+Q6Gfq7y4m/ptlwHXIFJ5GJp83U0b/00xk9vPEsdPw=
Subject key identifier: B5:72:E1:14:8F:58:52:06:94:DB:DE:7A:96:B5:9D:C9:72:81:D0:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F490
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/440FB5E2C96D11EF9CA9F56B762E951A.roa
Signing time: Fri 03 Jan 2025 00:54:20 +0000
ROA not before: Fri 03 Jan 2025 00:00:17 +0000
ROA not after: Sat 13 Dec 2025 00:00:17 +0000
asID: 984
IP address blocks: 156.226.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62608 (0xf490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 00:00:17 2025 GMT
Not After : Dec 13 00:00:17 2025 GMT
Subject: CN=6777353c-a8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:88:77:4b:76:cc:30:3d:f1:ec:2f:05:60:
1a:35:73:f8:38:5d:97:35:bf:7e:5b:60:64:bf:f5:
84:f9:c3:9d:e3:c7:e7:c5:96:2a:0d:5d:11:9e:c9:
45:8f:af:07:c8:d9:ef:06:e8:e5:15:eb:71:c9:5e:
c9:54:91:13:f6:a1:ce:f4:17:99:86:82:02:34:2c:
4f:3f:c7:47:cf:12:80:9a:15:d4:c7:0f:8a:03:a5:
e7:0d:42:82:0e:03:6e:b7:76:ec:83:51:d0:b3:3b:
61:2b:9e:2a:01:92:b5:50:0d:e5:b4:b2:8b:7d:a2:
02:c3:e3:e3:6b:0b:45:a9:c7:85:8c:09:02:b0:55:
c3:d8:26:6b:5e:a1:45:01:38:86:69:5a:2a:aa:2a:
d1:df:a6:5d:a9:e2:82:f2:b1:79:51:8c:f4:f6:16:
12:e8:90:aa:e6:56:4f:33:e4:a1:25:db:9e:01:e9:
43:d6:75:4f:22:e3:e2:e0:26:5e:00:7c:e4:a4:10:
1f:be:97:81:58:20:e5:e6:13:c2:39:7f:87:4d:1b:
73:ce:17:de:d4:11:09:6b:96:11:7b:e8:16:97:fb:
c9:c7:30:df:d2:41:bc:90:39:9b:c6:92:a3:01:80:
e9:9a:ff:24:0d:81:26:47:17:81:f1:dd:f2:89:b1:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:72:E1:14:8F:58:52:06:94:DB:DE:7A:96:B5:9D:C9:72:81:D0:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/440FB5E2C96D11EF9CA9F56B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d7:97:36:19:c2:d0:54:ce:67:bb:dc:ae:34:ce:68:f9:13:
31:08:3c:be:18:f6:fd:9b:52:73:86:d3:79:ec:00:6f:da:86:
2b:c0:60:4e:46:48:58:f1:eb:c5:7b:70:75:5e:26:54:de:33:
75:62:fd:43:3c:b9:b0:27:72:6b:e2:03:a4:16:cf:89:ee:76:
ca:b4:eb:e8:df:86:f1:97:39:44:97:d0:57:87:92:1b:a5:fd:
50:4f:30:af:90:90:a1:53:74:da:b5:eb:0a:3d:fd:20:da:40:
f7:d9:ed:95:16:3d:65:93:9c:0b:f2:fe:c3:b4:df:88:87:4a:
41:0a:db:a2:ef:18:b3:74:3e:b0:ac:7a:5a:6d:10:d6:aa:ed:
9a:8c:cb:98:28:80:a1:1c:d5:36:ba:e9:74:bb:71:39:5c:04:
a8:13:6f:cb:e7:ba:2f:2a:02:78:1c:81:55:46:20:9f:49:c9:
ec:75:7b:58:ea:49:b4:2d:24:de:7a:57:88:f4:32:ee:8a:05:
c5:a4:77:72:8e:e1:9c:da:f3:c1:89:6f:2a:b3:fe:72:6d:90:
49:ab:f6:c5:25:a4:38:e8:a4:6e:e6:54:35:65:c1:b3:bc:60:
70:4d:74:80:7c:3c:bb:38:fb:65:35:fd:10:07:f6:fa:c6:fe:
0f:2c:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:02 2025 by rpki-client