Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C61FC1AC27B11EF83F19F58762E951A.roa
File: 6C61FC1AC27B11EF83F19F58762E951A.roa (raw, json)
Hash identifier: fpwxpJsApK3ODpHCmvnvPV1pVfj92glKwTTwWJ9OfEs=
Subject key identifier: CC:36:01:DD:71:0D:22:1F:96:E3:EC:18:38:8D:A2:2B:A8:5C:0B:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C61FC1AC27B11EF83F19F58762E951A.roa
Signing time: Wed 25 Dec 2024 04:48:03 +0000
ROA not before: Wed 25 Dec 2024 04:47:59 +0000
ROA not after: Wed 10 Dec 2025 04:47:59 +0000
asID: 984
IP address blocks: 156.227.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59555 (0xe8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 04:47:59 2024 GMT
Not After : Dec 10 04:47:59 2025 GMT
Subject: CN=676b8e83-12ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:e8:1a:90:41:67:26:5f:92:41:ea:8b:08:
f1:b3:29:bd:a2:b8:3b:ce:7f:be:72:1e:2c:7f:c4:
ba:33:43:cf:c7:43:24:d0:25:ca:87:6f:d8:2f:cb:
53:48:83:2b:c8:f2:1b:eb:80:89:61:a3:ff:0c:16:
48:c0:ec:94:aa:7d:7f:17:19:d5:6e:79:2c:ed:42:
ae:83:01:e7:b7:0d:28:92:01:47:a9:97:bb:59:c8:
d7:51:95:d3:28:89:7b:f1:be:0d:88:e0:ce:e4:cc:
4e:1f:83:9b:8a:e8:bd:8f:6b:bd:b3:19:fb:9b:05:
ad:72:57:3e:1b:de:dc:fc:55:88:33:8d:48:d0:8f:
ea:c4:70:23:7c:8c:10:f8:35:af:5b:46:48:11:12:
22:56:cb:8e:57:cb:eb:b6:83:69:9c:d1:9b:0c:4d:
ca:db:f1:85:00:9b:4d:6e:4f:e3:08:44:07:57:f3:
62:62:47:61:51:56:b5:54:1b:87:51:fa:03:59:ac:
5e:eb:f8:d5:e7:84:50:f6:7f:e1:dc:3a:63:0f:d1:
19:53:58:d8:87:51:4a:27:b2:57:d6:f1:1f:fe:48:
38:73:91:85:2e:b7:89:ad:ce:32:ae:ef:12:04:8d:
a8:69:db:6c:ba:1d:1f:1a:3f:08:62:06:10:19:7d:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:36:01:DD:71:0D:22:1F:96:E3:EC:18:38:8D:A2:2B:A8:5C:0B:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C61FC1AC27B11EF83F19F58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.163.0/24
Signature Algorithm: sha256WithRSAEncryption
02:92:66:c9:a8:07:8a:db:e8:3c:de:07:12:7b:10:a9:d5:c8:
23:4c:89:86:ca:bd:32:e8:f5:8c:46:4c:f6:76:64:6a:4b:ae:
19:71:a7:5f:91:70:44:8e:4d:44:09:18:94:81:5a:71:23:1b:
59:46:e8:6e:c1:6d:49:06:40:55:29:5e:e2:3d:bf:f5:ef:e1:
47:1c:83:85:fd:46:ce:6d:0f:5a:83:f3:cc:84:20:50:b3:a9:
2f:20:55:eb:ec:e6:92:e6:68:38:49:b2:71:4a:2c:6d:95:da:
a4:9d:9a:8e:31:fb:8a:a1:7d:4d:c6:83:7d:a3:92:35:0b:13:
99:fa:47:f7:6f:94:11:6f:b5:9b:5a:a7:6f:74:06:db:b3:28:
a2:ec:09:90:15:a7:ee:ed:cf:ec:ec:67:1f:4f:61:d9:c3:ae:
8e:4c:f7:60:c0:73:f3:46:25:00:bc:65:02:37:55:d6:58:42:
9c:97:92:a5:96:63:57:2f:5b:76:9d:2c:cd:f5:8c:e2:5d:a0:
0a:a3:32:25:e0:56:1c:2d:f3:a1:5a:27:61:25:5a:0b:a9:2b:
5d:5e:82:fc:3d:e0:80:17:a1:21:8c:c9:d4:06:ed:26:6e:48:
34:26:6b:9b:44:99:cc:bc:22:2c:45:1f:87:9b:c0:bc:aa:09:
19:ba:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:15 2025 by rpki-client