Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49D3C50ACDCC11EF8691E646762E951A.roa
File: 49D3C50ACDCC11EF8691E646762E951A.roa (raw, json)
Hash identifier: yA+6Nn4RgYARiquJNnIF3DJmG6pmwc+surQNgzV3bnA=
Subject key identifier: 4B:20:A2:9A:BA:B8:1D:21:47:51:F8:37:DE:83:5F:A5:7A:05:6A:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49D3C50ACDCC11EF8691E646762E951A.roa
Signing time: Wed 08 Jan 2025 14:24:37 +0000
ROA not before: Wed 08 Jan 2025 14:24:33 +0000
ROA not after: Thu 01 Jan 2026 14:24:33 +0000
asID: 984
IP address blocks: 156.228.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66022 (0x101e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:24:33 2025 GMT
Not After : Jan 1 14:24:33 2026 GMT
Subject: CN=677e8aa5-61b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:3f:57:a9:a6:d3:ea:39:c9:4a:e9:d4:39:
99:a4:62:db:25:94:3b:d5:bc:85:c2:c7:4e:a2:36:
ae:69:06:f8:be:e4:40:82:77:7a:d1:57:3c:b4:2a:
0d:7b:1f:2e:33:ec:a1:21:9c:ae:50:7c:ac:0d:f9:
6e:65:68:3b:c1:36:e5:10:cc:a9:76:95:00:80:b0:
99:11:e8:97:ec:97:c6:43:6f:c4:cf:1c:a0:5b:46:
44:11:c4:b2:3e:aa:33:45:ec:a7:df:07:2f:f6:0b:
bb:88:7f:f8:c1:8d:b0:7e:bd:bb:0f:b1:30:01:a3:
17:fe:f2:7c:5f:1b:17:f7:3c:5e:b8:70:c9:f9:7e:
51:f5:a7:37:1f:25:89:11:4d:55:83:78:54:44:f8:
05:1f:8f:7e:75:7d:00:60:78:a3:7d:ba:e1:4b:4e:
15:2a:3a:dd:d0:68:fc:70:c2:1f:69:0f:9c:e4:8c:
ab:00:28:03:87:9d:d8:7b:4c:63:ae:09:53:19:90:
9b:ec:e2:b2:ac:dd:8b:ec:24:64:78:09:77:3c:32:
d2:b6:15:89:ef:67:ce:2a:5e:cb:ca:ea:a7:10:c4:
c2:f5:79:f6:4f:74:f5:04:9b:ca:9b:6e:1b:a5:16:
03:a1:67:08:28:bb:3e:c6:60:f0:a6:32:e3:2b:84:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:A2:9A:BA:B8:1D:21:47:51:F8:37:DE:83:5F:A5:7A:05:6A:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49D3C50ACDCC11EF8691E646762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.75.0/24
Signature Algorithm: sha256WithRSAEncryption
81:69:98:00:f7:57:98:92:71:d9:75:cf:90:a9:a8:53:75:03:
8e:cf:6a:8a:41:c1:e0:d8:a5:09:b5:fa:f8:45:2d:51:e2:23:
2b:22:72:fb:14:93:ea:fa:98:b0:5f:4e:be:75:f1:b9:5c:9c:
97:7a:d3:00:e8:a7:24:7a:f5:ca:5d:7c:ea:46:50:8c:64:34:
b3:ac:1d:21:a6:f1:af:da:b9:37:b1:53:68:e8:13:08:1f:0b:
55:53:d9:e2:1f:cd:c3:6c:21:58:6b:e1:db:94:4d:37:6d:22:
2d:db:45:54:36:c9:a7:80:85:70:b6:8d:5f:00:c4:45:4d:31:
b3:a1:47:88:7c:93:59:1f:6a:3f:a9:72:1f:ae:45:a7:18:e8:
65:44:85:53:b6:31:b6:e6:62:15:dd:cd:60:d4:5a:e8:07:01:
de:73:27:cf:84:60:5b:18:c0:15:73:3f:67:95:45:cf:fc:2b:
79:c8:66:2f:1a:64:aa:0f:18:7c:c7:0d:c4:a4:39:de:7a:1b:
df:f2:5c:ce:a3:18:77:3d:96:f8:23:0c:5e:a9:f7:73:35:86:
46:86:f0:23:df:d9:24:e1:52:fb:dc:b2:5a:aa:25:99:0d:c1:
17:8d:5f:26:99:4d:6d:89:30:2b:c7:e9:16:f2:37:01:66:58:
9e:f4:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:04 2025 by rpki-client