Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64BA2750C28811EFA288EAA7762E951A.roa
File: 64BA2750C28811EFA288EAA7762E951A.roa (raw, json)
Hash identifier: vx/1vE9AuezOIRWKQXv8pOPL3py6cA4CsHHzW4BsYwA=
Subject key identifier: 01:02:79:94:6F:C6:9A:54:5F:EE:39:38:0D:0A:06:3E:C3:7E:76:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E943
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64BA2750C28811EFA288EAA7762E951A.roa
Signing time: Wed 25 Dec 2024 06:20:53 +0000
ROA not before: Wed 25 Dec 2024 06:20:50 +0000
ROA not after: Wed 10 Dec 2025 06:20:50 +0000
asID: 984
IP address blocks: 156.228.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59715 (0xe943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:20:50 2024 GMT
Not After : Dec 10 06:20:50 2025 GMT
Subject: CN=676ba445-a07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:b3:a5:91:d5:a6:b8:22:1f:40:f0:9b:8c:
67:22:58:c5:73:c4:07:85:d0:d7:b3:d8:70:65:90:
e8:24:82:23:a4:e3:05:17:49:33:30:01:dc:8a:ec:
86:52:56:cd:9d:7d:9f:b0:b5:91:c5:b2:7c:fc:27:
b3:74:c0:5f:39:7a:4a:70:8c:48:9c:76:17:89:c0:
75:ad:9d:5a:59:d2:65:2d:49:5c:f7:1c:ea:77:38:
be:f4:c7:22:0d:d3:17:53:a6:85:f1:01:ec:b5:12:
76:fc:ee:e5:54:2e:26:bd:11:1c:7d:12:24:cd:11:
c8:a2:16:27:35:a9:0c:cb:c5:da:3d:75:8f:b9:d0:
b2:0b:0e:23:d5:2e:f3:21:6a:6b:7b:e0:91:70:2e:
35:44:35:a9:f7:6d:e0:f0:34:2d:09:d6:a1:f2:ab:
8f:c1:33:b0:71:cc:34:68:45:03:b0:0e:fc:82:cc:
3c:25:3f:11:5c:af:fa:1f:4b:a5:b2:1a:c9:1f:23:
ad:80:1c:c3:a1:6f:86:26:38:e7:32:f8:16:36:24:
ab:8f:ed:44:e0:0e:f0:94:e6:c7:65:49:b1:0e:19:
45:8b:d5:f8:70:b9:83:56:6a:1d:24:c3:e0:05:95:
88:ee:e8:36:1c:60:2f:8f:29:f6:fa:b0:42:1d:83:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:79:94:6F:C6:9A:54:5F:EE:39:38:0D:0A:06:3E:C3:7E:76:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64BA2750C28811EFA288EAA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.66.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5f:0b:92:c3:b3:1d:83:bc:07:ac:04:ed:a3:65:a8:a9:b3:
2d:26:2c:63:be:9e:9c:16:35:13:93:90:df:f9:d3:01:44:26:
3a:9a:69:4e:f5:91:2e:ea:00:fd:84:4c:a0:9a:da:4c:dc:de:
96:3e:88:39:6f:e2:4f:c0:5b:3f:b5:bf:39:ae:a7:51:82:c4:
93:5f:6c:ea:a7:9d:9d:00:56:79:9a:f2:bf:3a:97:fb:5b:a1:
76:aa:f6:68:76:4f:7c:6d:ea:22:7c:af:0f:de:d5:b3:d0:da:
f0:37:58:fa:05:17:67:e4:68:0c:b5:5e:53:8d:ef:26:e6:4f:
a2:62:49:01:98:d4:8c:3d:90:75:4c:0e:42:f2:e2:da:8f:34:
06:31:d0:47:78:68:46:02:c2:43:bd:da:96:25:48:42:bc:39:
03:2c:19:08:a3:cb:b0:87:45:48:af:52:d5:29:00:ba:e3:a7:
71:aa:a2:93:db:48:f4:08:60:7e:9c:52:3c:d5:42:9e:5d:2d:
38:b2:2a:6a:b9:51:ee:2d:4c:43:be:54:69:14:9e:cd:fa:a5:
aa:04:54:5d:fa:fc:8b:45:e2:9b:59:0d:fd:35:a9:e3:24:c7:
4f:16:9a:e0:71:19:73:db:09:82:ae:0d:64:15:f4:f3:be:ab:
d6:5d:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:31 2025 by rpki-client