Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66A12EECCCFB11EFA12EC28A762E951A.roa
File: 66A12EECCCFB11EFA12EC28A762E951A.roa (raw, json)
Hash identifier: 3CdosWg2b3mFlNV9yCaW+4tX38uCHX4QX3OgKb9pGYM=
Subject key identifier: 1E:58:F0:60:B0:BD:1F:ED:00:99:ED:62:34:DC:CE:01:7A:BB:E0:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66A12EECCCFB11EFA12EC28A762E951A.roa
Signing time: Tue 07 Jan 2025 13:29:20 +0000
ROA not before: Tue 07 Jan 2025 13:29:17 +0000
ROA not after: Mon 13 Dec 2027 13:29:17 +0000
asID: 17561
IP address blocks: 156.238.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64579 (0xfc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 13:29:17 2025 GMT
Not After : Dec 13 13:29:17 2027 GMT
Subject: CN=677d2c30-d3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:8a:44:1b:13:a2:aa:65:94:79:b6:d9:54:
5b:e8:15:6d:30:8c:8f:9d:8b:ed:70:3f:52:b1:96:
34:5f:9b:66:56:3c:e8:3d:55:aa:79:f5:0f:3c:de:
d6:44:ef:11:c8:3d:72:58:a1:3f:3e:d5:b2:0b:74:
a8:9e:15:3a:c6:5a:e3:55:25:55:9c:cc:73:97:5d:
24:9f:f9:54:f9:59:34:d2:98:cb:83:08:04:f5:85:
cf:3c:84:6b:58:64:80:6b:78:1e:02:1a:34:42:54:
c1:0c:fc:c8:be:4e:13:43:53:f3:ff:2a:d2:68:90:
30:30:e7:93:58:58:0c:5b:01:e4:d8:b9:64:be:d9:
df:5c:0e:f8:f0:2c:c5:8a:36:d5:2f:a1:9f:56:14:
da:f2:8b:5a:39:4b:bd:36:58:0c:0a:74:46:27:d2:
ea:eb:77:3f:a4:1c:45:e6:8c:4c:bb:ac:57:8c:f4:
c1:d9:44:e1:1c:7e:6d:56:e3:18:8a:cd:7b:90:17:
f8:71:db:7b:54:d5:66:89:e7:d5:25:77:36:0b:8d:
30:64:1f:38:3f:70:95:4e:b1:bd:73:60:09:05:58:
b7:e0:db:c1:3c:1f:34:7a:74:94:91:32:1e:64:19:
b8:4e:db:53:8a:cf:1e:40:0a:5e:1f:d3:97:6d:98:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:58:F0:60:B0:BD:1F:ED:00:99:ED:62:34:DC:CE:01:7A:BB:E0:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66A12EECCCFB11EFA12EC28A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.27.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:99:f1:e1:22:75:cc:08:4e:9f:5f:74:39:9a:39:5b:30:8f:
90:26:1d:58:3f:e6:32:38:fe:f7:42:5b:c0:dd:a0:20:b2:2b:
5b:81:7c:05:4d:8b:14:9b:a7:59:de:18:48:b1:28:69:f7:85:
a0:0f:83:84:53:fe:97:74:2d:ce:b0:0f:f1:e1:91:8a:80:99:
be:5b:aa:7e:96:9a:8e:ad:7e:75:9b:79:16:58:3e:fe:e7:7a:
d6:24:09:92:63:b6:3f:3a:1c:0e:b5:e2:07:e0:04:cf:69:55:
f2:67:4b:25:ae:05:4c:60:f1:b9:e7:5f:70:65:19:b1:c7:4c:
84:3c:70:1a:fa:44:53:16:4d:c0:33:3b:9e:36:db:20:d8:2f:
f9:d2:bf:74:b2:5d:b1:a6:c6:69:c2:cd:f3:79:2a:62:6f:b3:
fa:01:d5:85:b0:8e:55:18:26:19:a5:06:56:7b:ea:e5:d9:ef:
66:7a:c8:13:ae:a3:21:32:29:0e:28:99:39:f1:e2:f1:0a:70:
ab:6d:f9:56:ab:78:c5:77:e8:51:68:f9:e3:05:5e:41:e0:a1:
d0:f0:88:f6:39:10:7f:d7:a0:e3:ff:46:fc:d6:dc:97:e6:41:
52:ab:36:0e:24:42:4d:8b:c6:d8:0e:f7:2f:3e:c6:71:7a:7c:
97:79:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:07 2025 by rpki-client