Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/506610CEC28411EFB35E5E8E762E951A.roa
File: 506610CEC28411EFB35E5E8E762E951A.roa (raw, json)
Hash identifier: ltiv9IAJHUFdv+6y+hUDiM6F99C9VF/up8i8JGHPc1U=
Subject key identifier: EA:F6:D7:06:C7:1E:A9:1D:D0:39:C0:25:C2:F5:79:6D:8D:51:40:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E911
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/506610CEC28411EFB35E5E8E762E951A.roa
Signing time: Wed 25 Dec 2024 05:51:41 +0000
ROA not before: Wed 25 Dec 2024 05:51:38 +0000
ROA not after: Wed 10 Dec 2025 05:51:38 +0000
asID: 984
IP address blocks: 156.228.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59665 (0xe911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:51:38 2024 GMT
Not After : Dec 10 05:51:38 2025 GMT
Subject: CN=676b9d6d-fff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:fc:40:00:17:2d:1c:4a:1b:0f:78:41:d9:
8c:81:3e:c0:e4:43:6b:72:b1:12:90:63:4b:9c:57:
33:c6:8e:82:7a:8a:a8:80:17:a1:fd:22:0e:ec:f0:
06:7c:3f:ce:93:d7:98:e8:4a:f1:4d:a7:d9:8d:7c:
0a:80:2b:35:0c:27:65:86:df:59:bd:8f:3c:f9:91:
d6:11:6e:14:18:4f:20:53:e0:f2:b8:9d:16:d9:8d:
ad:07:f1:ae:60:63:47:25:fc:d4:e7:51:ee:3c:91:
8a:8d:12:e7:cc:19:9c:27:44:29:95:88:65:9b:01:
b4:88:68:6b:52:7b:0d:2c:10:85:cb:3a:cf:b2:4a:
74:9a:9a:a6:c4:70:f9:89:ab:90:8d:3e:27:32:e3:
f3:d4:64:65:d6:2c:f7:6c:50:b0:9b:01:69:c0:3c:
32:b5:c5:78:9f:98:02:d1:a2:3d:10:a9:16:28:6e:
dd:72:08:87:2c:e9:54:72:51:4f:84:e3:48:aa:b2:
43:fa:a3:d2:9c:97:f2:50:84:ae:c4:90:1d:a6:8f:
f6:09:f5:26:b8:4d:0a:c9:2c:9b:ca:07:9f:24:1c:
a6:75:cf:cf:87:fd:91:53:e5:cd:af:cc:81:db:cc:
df:5c:e6:97:0c:f1:da:85:20:e8:d2:6e:57:27:6f:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F6:D7:06:C7:1E:A9:1D:D0:39:C0:25:C2:F5:79:6D:8D:51:40:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/506610CEC28411EFB35E5E8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.40.0/24
Signature Algorithm: sha256WithRSAEncryption
13:14:e1:08:5e:8b:c9:71:36:a2:a6:1e:35:c5:d1:e8:74:cd:
35:d2:3e:5e:d6:db:fb:5e:94:2c:7d:36:9d:11:83:8b:53:5e:
f7:1b:d6:0e:57:e5:3f:b7:7d:d3:b5:35:27:06:f5:d8:67:13:
15:78:03:b0:58:6f:d4:76:2c:00:85:52:e5:99:f5:d8:84:18:
c0:bd:ac:9a:27:49:7a:d5:72:1b:03:68:82:6d:8c:fa:b0:4e:
c3:46:84:7c:d9:6d:a2:f6:7c:a5:d0:c3:b9:7b:f4:96:d6:13:
d6:e4:92:f5:5f:07:b2:46:fd:d7:24:0e:e1:25:0f:86:f9:75:
61:57:1f:fd:9c:d6:b0:85:e2:83:f5:f8:c1:de:2b:57:24:63:
0d:e5:2c:db:d1:91:97:cd:78:47:fd:6a:ab:c0:fe:45:fa:12:
51:a2:11:2b:a0:ef:8b:7b:ee:56:74:d8:45:b6:47:c7:b1:56:
50:79:78:19:48:00:ac:6f:68:a4:53:a6:d1:4a:3f:8d:2e:ed:
aa:de:45:23:3c:87:74:ab:0d:e8:83:5d:c9:6b:ee:db:ad:52:
25:18:b5:0d:a7:fd:cb:c1:da:b4:12:5e:7c:b0:25:4b:58:e6:
e3:1c:c5:ac:fe:84:36:63:e8:bc:b5:55:35:4e:cd:ea:52:e3:
1d:d9:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:18 2025 by rpki-client