Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46062574CC9811EFB58ECD8A762E951A.roa
File: 46062574CC9811EFB58ECD8A762E951A.roa (raw, json)
Hash identifier: KRFTXhB2chik0uD2A87hGSEVt3ZUsHWG3TvYZjMPq08=
Subject key identifier: AB:E7:4C:B7:4F:D7:C6:82:5E:DC:67:67:14:33:3E:31:6F:68:6A:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F94A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46062574CC9811EFB58ECD8A762E951A.roa
Signing time: Tue 07 Jan 2025 01:39:45 +0000
ROA not before: Tue 07 Jan 2025 01:39:42 +0000
ROA not after: Mon 13 Dec 2027 01:39:42 +0000
asID: 17561
IP address blocks: 156.227.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63818 (0xf94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 01:39:42 2025 GMT
Not After : Dec 13 01:39:42 2027 GMT
Subject: CN=677c85e1-c2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:6f:41:00:23:18:e1:6b:f5:02:ba:7c:02:
7a:f1:2d:0d:4f:fb:ef:17:1f:79:84:85:27:98:98:
48:4e:5c:d6:ab:f6:e3:e3:38:79:76:f4:f9:0a:79:
a3:83:30:db:a2:fd:b7:ea:07:3a:fd:3c:e9:1d:47:
11:a2:52:af:bb:c0:58:d8:6f:2c:d0:34:47:84:77:
60:c4:c7:e0:4e:d0:09:19:7e:92:fe:61:dc:07:5c:
d5:9f:22:ae:b2:94:f7:b8:1c:a9:1c:da:42:7a:7e:
34:2d:9c:1a:a3:30:f7:98:ac:4c:66:b8:aa:e7:72:
58:05:70:bd:20:fa:c4:0d:aa:80:ff:97:0b:31:f6:
1f:83:40:c0:7e:86:d2:ff:92:97:d4:54:1a:4f:8b:
aa:0b:4f:a1:c3:39:ba:b4:36:dc:9d:c2:82:06:db:
06:77:20:5f:d0:87:59:37:c3:6b:35:dd:dd:1e:f9:
5e:2b:6e:66:a6:17:97:58:8f:4a:ee:57:91:f0:a7:
c5:86:aa:2f:b8:01:a0:48:23:6e:6f:98:ae:6b:dc:
cf:7d:9e:eb:35:2b:ea:88:71:13:ec:52:a2:6c:6a:
ef:24:6e:e9:0d:ad:fc:7a:d5:0f:a0:e5:fb:06:d0:
e3:42:60:76:c1:76:06:b9:6f:9c:81:d3:75:6e:58:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E7:4C:B7:4F:D7:C6:82:5E:DC:67:67:14:33:3E:31:6F:68:6A:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46062574CC9811EFB58ECD8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.91.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ef:69:8f:85:50:78:1c:3f:7b:e0:4f:43:57:33:05:2a:6e:
c5:ac:80:e3:34:e0:a4:20:53:af:b8:c4:fa:fe:b2:e5:eb:99:
e0:6a:c4:47:78:f4:ec:4b:b2:d3:1d:f2:44:79:5c:21:99:7a:
76:b1:d7:a8:92:f6:d7:e7:09:6d:e3:d4:d2:de:1c:81:65:d2:
aa:c2:e3:11:29:1b:c0:ea:d4:97:23:29:60:a6:07:77:19:04:
39:19:45:76:d6:e8:b4:b4:c5:71:e3:24:5e:94:93:62:87:40:
12:6d:f2:8f:ca:9b:08:00:0d:1b:86:de:05:18:e9:98:79:a4:
43:0e:96:a9:55:0e:d3:ba:5f:b9:76:4c:ce:9a:5b:eb:c7:4a:
e6:76:1c:7b:4d:a5:57:b7:75:47:a2:09:05:af:e9:d1:c1:ab:
7b:30:a5:e2:44:11:b4:71:0e:96:89:0e:78:e2:33:af:d6:1f:
59:25:06:3f:aa:10:7b:f7:7c:74:06:c5:a4:df:82:45:f4:b3:
6a:08:e5:3d:3d:f7:63:9b:54:20:ef:71:0f:2e:20:5a:21:38:
5b:60:ad:73:6b:7c:c4:6d:bc:e6:f7:a5:82:f8:a9:af:f3:42:
f0:2f:f6:10:d3:5d:1c:35:d8:e7:8e:bf:fd:e8:f8:56:e9:5c:
03:9b:2a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:22 2025 by rpki-client