Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51801B4CC96111EFA9CB14A1762E951A.roa
File: 51801B4CC96111EFA9CB14A1762E951A.roa (raw, json)
Hash identifier: blCKUwSltxZXiRnUMLO47VDGNnwfOba1wUNzHNl7IfE=
Subject key identifier: BD:82:71:8A:CE:80:9F:4F:1C:88:C9:F2:6C:FA:33:AF:E4:37:14:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F462
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51801B4CC96111EFA9CB14A1762E951A.roa
Signing time: Thu 02 Jan 2025 23:28:49 +0000
ROA not before: Thu 02 Jan 2025 23:28:45 +0000
ROA not after: Sat 13 Dec 2025 23:28:45 +0000
asID: 984
IP address blocks: 156.226.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62562 (0xf462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 23:28:45 2025 GMT
Not After : Dec 13 23:28:45 2025 GMT
Subject: CN=67772131-e016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b5:72:f9:54:77:c6:2f:71:77:7a:58:99:ca:
72:79:c8:20:ad:0c:0d:62:f2:4a:ef:2f:70:3b:1e:
55:3e:99:de:f2:80:7f:8f:b2:93:f9:bf:24:37:36:
41:1e:5c:8f:b8:38:45:09:ff:ed:46:7a:25:5e:4e:
83:a6:a1:f0:96:5c:32:77:ad:00:cd:3d:93:6c:03:
0b:a1:6d:ef:f8:94:8a:13:b1:79:cd:e8:cb:a9:f9:
f9:22:57:01:95:73:63:69:32:d0:86:04:79:8c:94:
15:cf:e3:c3:59:57:a4:df:9f:20:d4:14:24:d0:4a:
df:9e:db:4c:67:9d:82:35:0b:79:f3:6a:65:26:e1:
3a:66:d9:2e:60:59:2c:0a:91:5d:d5:54:e1:e7:6c:
8d:af:6f:9b:5b:fb:8e:15:00:bf:3e:97:f4:18:8e:
41:e1:36:3f:08:fa:b3:f9:bc:00:13:65:a3:16:eb:
30:96:94:6e:cf:d3:17:6d:de:d6:4c:9a:37:e8:01:
36:6a:98:e2:d8:3b:d4:73:a6:96:3d:69:95:a7:e2:
a2:34:04:58:5f:42:2d:33:32:44:d9:2e:65:3d:05:
c2:67:d9:e3:9d:4b:b8:9c:93:d7:97:4f:c0:e5:16:
1e:2c:f2:02:dd:1a:78:e0:72:62:86:61:3f:28:d8:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:82:71:8A:CE:80:9F:4F:1C:88:C9:F2:6C:FA:33:AF:E4:37:14:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51801B4CC96111EFA9CB14A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.227.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f1:91:3d:b7:a1:a0:aa:71:d4:e9:54:6a:f8:89:8d:c0:5e:
26:99:d2:37:8d:5d:d7:7f:91:41:1b:f6:6d:01:95:f9:62:a9:
2e:5a:e7:8f:4a:31:85:78:14:7a:38:e8:67:41:8d:77:31:98:
3d:5c:07:f9:ce:34:5a:1b:55:30:b3:26:7b:25:07:12:4f:78:
bf:05:d1:48:08:70:33:b2:7d:df:e7:4e:fc:eb:39:0f:aa:b7:
a2:24:0b:3f:23:3d:3f:f5:22:b5:36:bf:31:1d:fc:41:dd:61:
44:df:8b:13:b7:61:fe:c0:de:c7:da:c2:d7:a2:52:f8:d4:38:
52:e1:43:e6:cf:4d:54:fd:59:ca:b7:11:86:b6:94:a5:fb:36:
68:5e:a2:91:e2:79:fa:c5:26:85:bd:e6:97:b1:1a:da:97:db:
19:2e:f0:1a:ac:e3:7f:07:e9:1f:b4:a7:4c:67:1f:7a:50:44:
0c:5a:08:c4:02:ee:86:c5:3a:29:92:d5:66:07:72:7e:41:5a:
c5:fd:3f:4c:cc:44:1c:ed:af:57:e9:93:cf:32:47:3d:05:66:
6e:08:02:3c:b2:73:a4:d6:31:ea:cd:9c:ab:f6:d2:5a:6d:72:
28:a3:39:2f:87:fa:b5:7b:13:b9:a8:e9:98:ce:4e:e9:77:97:
c8:95:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:38 2025 by rpki-client