Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60538E24C97511EFBB4934A7762E951A.roa
File: 60538E24C97511EFBB4934A7762E951A.roa (raw, json)
Hash identifier: 2z2+NbRbeqS2fhBjfbO6PJdDhs1mqYeG6/bPXstIw08=
Subject key identifier: 02:5A:B0:F8:A4:0D:E5:C9:51:79:E3:9E:6B:68:0D:98:40:CB:36:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60538E24C97511EFBB4934A7762E951A.roa
Signing time: Fri 03 Jan 2025 01:52:24 +0000
ROA not before: Fri 03 Jan 2025 01:52:20 +0000
ROA not after: Mon 13 Dec 2027 01:52:20 +0000
asID: 17561
IP address blocks: 156.227.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62687 (0xf4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 01:52:20 2025 GMT
Not After : Dec 13 01:52:20 2027 GMT
Subject: CN=677742d8-d397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:c5:c0:db:fe:07:c2:37:b2:8f:ff:8b:68:
9c:7d:db:3e:b7:ac:8e:df:dd:8f:f6:e4:52:79:62:
aa:fc:e4:62:b3:65:2e:c1:9a:94:2d:e2:b1:d2:65:
37:b5:c0:ef:de:61:29:37:35:ea:e4:72:87:64:71:
35:68:c7:f5:c2:40:91:80:24:57:89:67:77:e4:44:
5d:9a:4c:2a:4b:5f:a9:fb:cb:63:b7:27:87:cf:5d:
ab:28:dd:20:f0:7c:ca:99:e3:7d:db:4b:cd:e8:3f:
a3:f1:93:18:dc:de:e1:78:77:99:88:d2:e9:a5:68:
04:da:e7:2f:c3:2a:7b:6e:7f:d8:95:b1:f1:b0:f7:
eb:d8:81:e0:72:1a:2e:98:a8:ae:ee:3a:70:32:e9:
61:77:cf:82:9c:9f:9e:32:11:e6:f4:27:7f:3d:fc:
2d:64:4c:c9:84:71:46:2b:01:89:24:26:b5:e7:31:
3b:f3:3c:8a:83:f4:b0:27:d4:67:00:c1:06:25:e6:
a3:24:08:9b:62:45:6a:b3:49:10:9a:16:d2:54:27:
79:92:fa:83:81:c7:4e:92:94:ff:05:36:db:fe:6f:
a6:75:03:4c:11:b1:a1:a6:36:4b:37:f1:91:98:61:
f1:ed:85:bd:c9:08:0b:31:51:1f:9b:e0:5f:63:6e:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5A:B0:F8:A4:0D:E5:C9:51:79:E3:9E:6B:68:0D:98:40:CB:36:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60538E24C97511EFBB4934A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.97.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f0:28:74:2e:ea:b9:0f:65:4a:c8:7e:ac:8e:25:45:1a:f6:
5d:fb:fb:24:e5:76:fa:b3:6a:62:0e:27:53:32:8e:08:4c:19:
30:28:9f:7e:ef:f0:85:31:4b:69:7e:7d:81:e8:76:68:d5:43:
36:12:2a:3f:cc:4a:45:41:3c:31:6e:3a:18:fc:f7:2f:55:52:
7b:4a:d8:b7:c9:ed:db:b0:ed:84:f3:78:73:b1:21:7b:b0:a9:
81:47:f4:47:9b:f7:4c:c9:41:b7:b1:b6:55:8b:ab:4c:a9:b2:
dc:60:76:55:71:6a:11:86:ed:06:30:a6:91:05:f3:f2:84:c0:
82:94:27:a1:16:24:8d:58:99:94:89:df:74:42:bd:e5:d2:4f:
03:43:15:0a:b4:ff:91:d6:7d:d3:28:40:f0:b7:af:e6:78:ee:
41:df:e6:71:04:74:3a:3e:76:91:56:6b:5c:36:4f:8b:07:86:
c6:e2:4c:a0:9b:69:5b:ba:de:be:52:f9:35:38:5d:29:32:eb:
40:51:49:c5:01:71:32:a4:c9:00:a7:91:56:f1:3a:88:cc:88:
82:9d:7a:be:b5:c4:37:51:c2:59:bb:31:71:80:3b:1d:66:41:
3c:9f:cc:5e:c3:b7:26:c6:19:4f:0a:cf:37:eb:6c:ec:9b:66:
06:3f:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:32 2025 by rpki-client