Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D61AB20C27F11EFBC876970762E951A.roa
File: 6D61AB20C27F11EFBC876970762E951A.roa (raw, json)
Hash identifier: C3FNCkL3nNbUfiuEHAeY8DfqvMcPM7mVx8TXq4UdHzk=
Subject key identifier: 98:85:15:D2:C4:F1:9E:A1:79:1A:24:C3:45:97:A1:A7:8C:44:0B:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D61AB20C27F11EFBC876970762E951A.roa
Signing time: Wed 25 Dec 2024 05:16:42 +0000
ROA not before: Wed 25 Dec 2024 05:16:39 +0000
ROA not after: Wed 10 Dec 2025 05:16:39 +0000
asID: 984
IP address blocks: 156.227.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59605 (0xe8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:16:39 2024 GMT
Not After : Dec 10 05:16:39 2025 GMT
Subject: CN=676b953a-dba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:0e:14:ea:94:9a:ef:45:8b:03:2e:34:96:
36:d1:18:20:ed:e4:f9:91:3b:7c:c1:0c:d8:15:91:
c3:9b:41:89:57:ca:92:89:c9:3d:60:40:66:a4:e5:
19:94:4a:3f:6f:03:b0:1a:59:1b:45:fb:c8:d1:0c:
3d:37:ff:a2:fe:7d:7d:11:3e:c8:b0:93:a9:d7:92:
88:f0:7d:f1:5d:05:c7:ec:81:39:27:90:dd:c2:40:
3f:fc:7f:b6:f1:17:fc:01:85:09:d9:33:53:1d:b2:
89:76:26:40:99:62:0c:cc:90:0c:06:db:2a:af:be:
a9:10:48:73:28:af:a9:10:8f:70:12:4a:a4:cb:cb:
1f:26:3e:bc:c4:e4:26:81:32:17:23:77:c3:6f:c7:
23:c7:68:92:a2:a7:96:48:aa:99:ab:83:02:be:8a:
a8:c2:52:85:55:6b:20:26:82:23:1f:48:cf:7c:81:
e3:81:c4:c3:c5:c7:59:8e:8e:6e:18:e3:e7:76:e7:
4d:60:a1:fb:83:d0:17:e2:94:ae:5f:92:9d:56:d0:
2f:f2:98:44:6d:8d:9b:b7:78:09:18:c7:35:c8:2e:
04:db:e7:d8:8b:30:16:b5:66:db:37:d6:83:30:83:
cc:93:c1:32:f1:69:e1:98:d7:58:2b:21:11:8a:6d:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:85:15:D2:C4:F1:9E:A1:79:1A:24:C3:45:97:A1:A7:8C:44:0B:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D61AB20C27F11EFBC876970762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.188.0/24
Signature Algorithm: sha256WithRSAEncryption
39:31:40:58:1d:d8:e0:c7:d2:1a:0e:44:64:23:3e:61:72:23:
79:1e:c5:28:42:1d:f9:de:80:37:18:df:9e:76:19:da:ea:eb:
44:06:5e:e4:ec:9a:da:a6:13:9f:a1:6d:44:f6:5e:7f:0c:c8:
f7:87:c8:5c:a4:1c:ce:86:ca:08:59:9f:30:4d:88:19:fa:63:
2e:37:c3:05:77:f8:21:c3:8f:3a:b5:71:d9:68:18:70:28:f0:
51:2f:fa:3a:ee:51:eb:25:99:20:16:71:c8:80:2b:f6:18:5c:
40:29:c2:b0:7c:1c:06:63:0b:b3:cc:ac:d9:fe:9b:53:7e:83:
17:ea:b4:25:d1:2e:5b:30:11:7b:fa:d8:52:23:12:d8:83:38:
a1:1e:d9:39:32:b9:f2:e8:ec:20:6c:f4:eb:e1:4d:58:5a:bc:
34:b1:2e:dd:70:23:8b:f6:14:84:3e:06:a4:44:f4:2e:79:fa:
82:cc:ed:72:6b:a1:14:36:04:e1:70:55:a6:bc:32:c9:1d:2b:
78:1a:59:66:a7:dd:b2:a3:4c:ff:35:12:a6:62:f3:b3:79:cc:
b5:02:8b:78:f5:a3:9d:9e:4a:4c:8b:54:e7:8e:29:b2:52:48:
f3:64:17:4c:fb:5c:61:1a:a8:68:95:d3:9c:8a:ec:57:e7:2f:
af:72:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:15 2025 by rpki-client