Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56D667B4C32511EFB43DED77762E951A.roa
File: 56D667B4C32511EFB43DED77762E951A.roa (raw, json)
Hash identifier: RBVEgmj/QqHkVisNRedEpYaC5nWu9IuhM6Fi4nWClps=
Subject key identifier: 29:0B:9C:DC:BB:85:CA:B7:61:94:E9:1C:FB:16:D0:C5:08:D9:98:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56D667B4C32511EFB43DED77762E951A.roa
Signing time: Thu 26 Dec 2024 01:04:21 +0000
ROA not before: Thu 26 Dec 2024 01:04:17 +0000
ROA not after: Wed 10 Dec 2025 01:04:17 +0000
asID: 984
IP address blocks: 156.228.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60027 (0xea7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:04:17 2024 GMT
Not After : Dec 10 01:04:17 2025 GMT
Subject: CN=676cab95-b1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:a6:0e:6b:a1:66:b4:31:0c:59:fd:fe:a6:
94:23:24:4c:2b:a8:7e:f5:05:00:2e:04:f1:b1:08:
df:08:e9:f1:86:95:ce:b7:3d:df:85:3f:bd:1c:c2:
3c:1d:b8:ee:01:df:dd:5d:17:24:14:f5:f5:61:30:
5e:0c:20:62:bc:a8:44:12:ea:51:fa:86:ff:5e:b5:
c3:bb:3b:e4:ec:b1:fd:50:a5:d2:df:50:43:f2:e4:
02:a3:0c:75:1e:65:a0:e7:86:00:88:f9:36:3d:d6:
d6:44:cf:c7:a9:02:b7:57:43:e0:81:b0:32:2c:a1:
83:fb:73:9a:83:38:75:da:0d:a5:9c:a6:25:f3:c4:
69:17:da:41:b4:a8:87:4f:e4:c8:40:ec:e0:12:08:
d7:5b:4d:cf:fd:a6:d4:55:0c:0b:3a:20:31:3f:b9:
43:32:31:8e:84:dd:83:67:f0:09:b5:be:90:0d:80:
5b:71:90:d9:b6:f3:66:47:c5:6b:f5:3a:fd:7a:39:
c6:89:5e:bf:6e:33:6a:37:33:08:f1:5d:bc:63:5f:
fa:97:7b:b5:a9:e1:d1:e6:e3:17:a0:53:64:50:ea:
7b:72:25:cb:ec:78:10:14:5e:84:5c:72:c0:44:89:
a1:50:e2:4e:af:3e:99:3b:2a:57:9c:78:dd:b7:b6:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0B:9C:DC:BB:85:CA:B7:61:94:E9:1C:FB:16:D0:C5:08:D9:98:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56D667B4C32511EFB43DED77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.255.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d5:79:1b:06:87:68:0c:69:41:d6:84:2d:27:0b:7a:e8:7c:
e8:40:31:c9:6d:48:c9:4c:4a:9f:88:56:e0:44:24:d9:91:f0:
9e:cd:e3:93:6c:88:d1:45:70:01:cd:df:0a:29:bb:4e:96:fb:
a6:f3:25:9b:15:cb:3c:2e:c9:39:96:1c:cb:78:ae:79:77:62:
7e:16:5a:6a:0d:4b:07:91:a4:d3:58:3c:5c:53:df:28:64:64:
b7:91:c7:63:10:3d:a1:33:e4:b6:cb:25:db:08:dc:81:bd:df:
49:7b:a2:56:3d:c4:0b:de:83:fb:b1:eb:12:1f:64:88:b1:34:
46:44:19:bd:d6:cf:c1:b4:b5:ca:fd:38:9c:df:bf:0f:98:d4:
99:60:b3:9f:d2:42:45:8c:4b:6b:bb:03:62:8d:30:ee:d7:e2:
8a:f1:42:3a:f4:00:c8:e5:95:90:be:54:08:2b:a7:c1:d8:7f:
56:96:41:4c:94:e4:f4:01:b1:83:9d:ca:3a:e4:6f:1c:10:ed:
a7:f4:fd:98:6e:95:82:c6:66:bc:70:24:9d:38:8a:aa:b6:09:
3a:4e:27:4e:5f:e7:47:87:e4:c1:03:1f:38:c3:cb:0b:ae:7c:
dd:68:18:de:3d:d3:31:b7:a2:8e:87:f2:5a:08:75:71:67:0b:
a9:64:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:42 2025 by rpki-client