Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/477A7210C28511EFB8C19F94762E951A.roa
File: 477A7210C28511EFB8C19F94762E951A.roa (raw, json)
Hash identifier: 9JZcLJvzprN9Zu44wnO2y+ZyMz9XNs2U+0cRm+FVf2E=
Subject key identifier: ED:33:22:B8:6A:72:4F:80:E7:1B:A1:EA:FA:1C:71:38:CA:96:9E:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E91D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/477A7210C28511EFB8C19F94762E951A.roa
Signing time: Wed 25 Dec 2024 05:58:36 +0000
ROA not before: Wed 25 Dec 2024 05:58:32 +0000
ROA not after: Wed 10 Dec 2025 05:58:32 +0000
asID: 984
IP address blocks: 156.228.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59677 (0xe91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:58:32 2024 GMT
Not After : Dec 10 05:58:32 2025 GMT
Subject: CN=676b9f0c-7440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:b5:6c:2c:0d:39:74:0b:62:7d:39:02:4b:
ee:92:f0:3b:b1:44:83:b9:8c:7d:2e:f4:07:1c:5d:
46:78:4c:14:9d:e3:d5:c8:01:60:45:be:db:1f:63:
21:fc:f9:df:54:4e:ce:4f:0a:42:21:a5:09:50:78:
a9:16:97:c8:1a:f6:58:c3:5f:a3:72:b6:68:69:de:
49:61:6c:bb:6f:e3:0c:d5:8a:9d:d5:bd:43:7b:9d:
11:5d:e4:3b:4d:16:af:1b:82:e1:ba:17:20:9e:8e:
30:2f:b9:ff:72:73:ac:f3:fd:91:e4:6e:1c:ad:d2:
1e:7c:9c:fb:a8:71:09:dc:ce:6c:7a:53:85:82:8c:
d1:1c:20:97:89:fb:58:59:a7:c9:0b:cd:9d:20:c0:
22:eb:34:d1:38:91:d4:f1:c7:e1:de:de:86:2c:36:
e6:0b:82:a2:df:ce:74:a1:53:e9:c1:c4:91:2c:cc:
31:e5:ae:36:ba:57:6f:f1:36:71:aa:d6:e5:11:fd:
38:e4:7f:4a:c8:25:1f:47:e6:49:a1:cd:92:9b:1f:
02:30:67:1f:48:a4:ec:5d:b5:14:43:16:3e:ea:10:
4b:fa:22:71:78:91:c7:8d:7a:85:90:3e:a5:c8:8e:
94:77:68:bd:7f:bb:1c:c9:43:39:5f:72:8c:e1:15:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:33:22:B8:6A:72:4F:80:E7:1B:A1:EA:FA:1C:71:38:CA:96:9E:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/477A7210C28511EFB8C19F94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:bc:d3:22:8c:87:64:35:b5:76:7e:d4:c4:96:2f:13:e8:6a:
56:db:52:8b:1d:ee:d1:22:2f:23:09:0b:5e:73:99:3e:89:e5:
99:ec:b7:f2:60:42:c7:bc:94:87:aa:db:a8:06:9d:a2:2e:30:
27:96:34:ad:1f:f3:80:a9:f2:13:b9:1a:61:90:e0:78:12:f4:
d3:b7:37:24:98:b4:3b:3c:80:ea:87:0c:cb:97:a9:fb:3a:e4:
5f:75:d4:a3:71:ee:10:c6:c4:79:8b:f3:fd:b6:c4:18:cb:4d:
57:26:dc:19:74:58:6c:0d:83:c3:e0:14:d9:f5:37:fc:6e:3e:
5e:5c:f9:02:28:63:c6:79:61:d6:1f:3b:20:53:b8:4a:b7:7b:
9c:bd:e1:fc:72:55:16:15:5e:e9:fa:af:bf:13:04:04:2b:0c:
1e:e8:90:3f:29:e7:f9:e3:2c:f9:86:de:1a:6d:90:90:68:c4:
d1:9d:70:0a:80:6f:24:b9:7c:c4:40:92:b1:f8:3f:d9:17:24:
eb:d4:f3:72:e4:ce:24:3e:fb:ea:f7:81:d2:7a:53:ed:34:3e:
28:d6:a9:98:cc:8d:87:f6:25:ae:41:a4:93:7c:06:64:56:39:
a4:65:ed:8c:33:4f:3a:5d:30:47:c9:68:29:00:6e:c9:36:94:
48:7f:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:03 2025 by rpki-client