Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D372226C97811EFBFB79ABD762E951A.roa
File: 4D372226C97811EFBFB79ABD762E951A.roa (raw, json)
Hash identifier: B8If4izhwfkHo72R0nB55afGZLzixZ5vf5yHund2O3U=
Subject key identifier: ED:C5:46:BA:94:94:3B:3E:D8:80:1F:8F:BB:56:6A:2B:0A:26:A0:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D372226C97811EFBFB79ABD762E951A.roa
Signing time: Fri 03 Jan 2025 02:13:20 +0000
ROA not before: Fri 03 Jan 2025 02:13:16 +0000
ROA not after: Mon 13 Dec 2027 02:13:16 +0000
asID: 17561
IP address blocks: 156.227.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62715 (0xf4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:13:16 2025 GMT
Not After : Dec 13 02:13:16 2027 GMT
Subject: CN=677747c0-e588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:6b:40:4b:a7:0b:89:1d:c8:9f:a4:63:33:
77:6e:8f:67:a6:8a:96:1e:86:50:b9:77:ec:87:3d:
c7:f8:fd:76:50:2c:da:80:36:20:16:1c:13:aa:e1:
a6:db:3a:f0:58:9d:1e:ee:11:df:da:0c:69:a2:02:
96:6e:d8:24:94:df:01:a4:46:d3:d1:8d:2c:4f:71:
bf:87:85:63:90:41:e2:a1:b0:3f:ee:dd:40:46:25:
89:b5:bf:63:9a:9b:a8:19:be:07:99:dc:c2:ff:e1:
f3:83:32:eb:a9:61:dd:bb:77:8b:4b:7e:43:6b:df:
7a:a4:63:43:4d:d7:d1:86:8a:c3:f7:ab:1a:79:03:
c0:36:1c:6a:2f:a2:37:c0:1d:3e:9c:67:01:f4:bf:
54:4c:93:e3:eb:75:bb:16:38:4f:79:1b:03:24:72:
cc:f0:58:1f:dc:e4:7f:15:7b:a8:29:7e:ad:bd:e0:
77:3a:43:ad:28:3a:27:65:df:fe:3f:ea:bf:f3:14:
8e:e8:15:f0:b9:e1:6f:46:15:f5:11:73:e0:fe:50:
e1:3f:b1:82:6f:75:92:3a:38:5f:a1:c8:4c:df:ba:
1e:f9:68:da:97:4e:c2:ee:a6:1b:c2:3a:95:de:5a:
ff:6c:a5:87:f5:d5:1d:cb:3d:38:52:ff:19:38:76:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:46:BA:94:94:3B:3E:D8:80:1F:8F:BB:56:6A:2B:0A:26:A0:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D372226C97811EFBFB79ABD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.111.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c6:f9:06:f6:b3:f8:84:8e:37:b6:cf:87:9d:c2:60:bc:3d:
f5:69:c4:2d:5a:5b:2b:f4:99:94:ca:52:f3:32:fe:bd:2f:a6:
69:60:62:d4:4f:b7:d8:e6:d8:bb:11:ad:55:27:c0:39:56:0e:
48:cc:e6:84:a2:6d:37:97:55:20:1e:9c:a8:a1:82:f4:5e:23:
df:41:d8:cd:f1:de:5c:95:22:97:7c:10:18:a4:b1:eb:18:96:
96:4a:79:2e:15:4d:47:85:f0:85:87:d1:cf:89:f0:e6:2b:1e:
78:82:16:82:df:a5:db:a4:81:8a:fa:16:9a:eb:fd:5e:01:1c:
7f:79:c3:62:80:14:d9:75:6d:0c:67:d4:0d:72:2f:6f:21:3c:
79:88:96:15:2f:15:f9:7b:dd:fb:c6:21:4d:12:df:aa:2a:24:
1f:53:44:09:bc:47:27:dc:b5:0e:1b:1d:75:ac:10:4c:cc:d1:
86:88:88:9f:b4:ba:bd:3f:8a:70:4b:52:75:d4:9e:02:2d:69:
30:88:7c:51:c3:b1:eb:c9:8a:30:7f:ec:f1:92:c4:07:ba:70:
67:55:33:ca:17:45:72:1c:99:7b:3e:dc:95:02:ab:6d:e5:cf:
e4:41:42:9b:af:8f:ee:33:7b:b8:a8:7d:a3:ee:80:a0:41:24:
64:ba:f5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:57 2025 by rpki-client