Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68EBF2D2C97111EFB8EE0E8A762E951A.roa
File: 68EBF2D2C97111EFB8EE0E8A762E951A.roa (raw, json)
Hash identifier: heOKs5osSJmzahsZtGFGGj6My2Cg1WnKpNjfC6d8N9k=
Subject key identifier: B0:82:9E:04:72:A1:33:C6:2B:2E:0A:8F:A6:CE:D6:95:1B:28:71:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68EBF2D2C97111EFB8EE0E8A762E951A.roa
Signing time: Fri 03 Jan 2025 01:24:00 +0000
ROA not before: Fri 03 Jan 2025 01:23:56 +0000
ROA not after: Mon 13 Dec 2027 01:23:56 +0000
asID: 17561
IP address blocks: 156.227.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62649 (0xf4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 01:23:56 2025 GMT
Not After : Dec 13 01:23:56 2027 GMT
Subject: CN=67773c30-4c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:5b:ee:00:71:fa:00:b6:be:21:5f:c3:7d:
9b:20:dc:45:e5:5a:e4:47:4a:45:36:dc:64:c1:e7:
02:e0:f6:8e:f4:a2:0f:07:70:10:63:94:b2:bd:34:
f1:39:c2:d4:3d:29:09:93:2c:f9:bc:5b:12:1d:63:
39:f3:86:94:d9:e8:7d:4c:b5:b5:fd:6b:96:dd:7c:
24:a7:04:81:af:43:eb:cf:2a:91:55:e4:f9:9f:7e:
ca:77:aa:3e:dd:67:5b:26:25:75:db:81:92:e1:13:
7f:e7:11:54:9e:91:e9:11:15:8f:5e:0b:93:96:45:
e4:76:c3:45:17:b9:04:da:96:d9:a6:44:f1:fa:44:
5f:0d:6d:cb:ea:8f:2a:51:25:3e:85:fb:a6:18:5c:
04:7d:85:77:1d:d4:78:36:cc:00:0f:41:71:31:f7:
a0:b6:ec:8b:6b:e4:97:d0:6c:bf:01:d0:e7:5f:a8:
b9:44:d7:2f:a6:53:a6:20:e2:d4:d4:67:91:5a:d8:
60:d4:43:fc:38:58:a3:13:87:ac:32:45:51:a9:aa:
7e:3a:6a:5c:4a:a7:7d:f0:02:b4:55:61:dc:ef:86:
e6:c7:a5:e2:8f:91:ea:29:e5:58:b6:da:9b:c3:9a:
1c:7e:cf:d4:44:be:e9:c5:ac:3d:51:95:34:95:43:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:9E:04:72:A1:33:C6:2B:2E:0A:8F:A6:CE:D6:95:1B:28:71:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68EBF2D2C97111EFB8EE0E8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:71:83:42:12:50:8c:5b:fc:3d:ac:95:30:ea:c2:3b:4c:90:
f2:2e:ed:ac:0a:d3:14:7a:29:b3:5a:6f:50:29:85:59:35:33:
ab:c9:d4:bd:86:e4:43:4f:6c:80:a9:37:09:39:01:72:9d:82:
29:29:af:6a:74:db:7b:06:99:1c:30:21:43:b5:10:1e:26:8f:
80:a9:33:2a:f2:13:ba:52:f8:bc:20:15:c2:e2:f3:f0:f0:8c:
57:ff:ba:f8:d5:99:db:c1:95:27:01:a0:32:72:2d:e2:0c:67:
22:be:e2:bd:40:80:f1:a5:70:48:80:03:2a:de:f0:a5:8c:71:
e5:cc:c2:e2:af:bc:b8:17:4d:58:4a:39:70:ed:5e:93:bc:b3:
b8:16:9b:5a:e3:2e:32:de:bd:2b:77:6e:69:98:b5:c0:83:db:
be:ea:c3:8a:ec:34:a9:c6:2b:03:91:97:10:4c:7b:14:37:e1:
f8:5c:b5:06:41:ce:99:21:b5:fc:0e:64:78:85:c2:7b:dd:fc:
3c:52:fe:25:83:61:ae:60:61:57:e6:a8:1a:bc:90:62:46:f4:
85:44:64:03:6f:62:eb:09:c5:54:4a:f1:48:6f:70:c5:fc:a9:
c5:31:41:e0:a8:c2:9e:03:bc:ac:cb:82:4c:58:b2:3a:01:88:
e1:84:e0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:04 2025 by rpki-client