Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/720FF9AAC95B11EF9955A97B762E951A.roa
File: 720FF9AAC95B11EF9955A97B762E951A.roa (raw, json)
Hash identifier: YVgZloU3RJdtZK53LGf0sQN6uQDTNeOI7DtTwlt65/w=
Subject key identifier: 7C:1F:A1:B8:F9:FD:47:5E:7B:D9:9A:16:EE:75:3B:B3:E2:3A:78:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F42A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/720FF9AAC95B11EF9955A97B762E951A.roa
Signing time: Thu 02 Jan 2025 22:46:46 +0000
ROA not before: Thu 02 Jan 2025 22:46:43 +0000
ROA not after: Sat 13 Dec 2025 22:46:43 +0000
asID: 984
IP address blocks: 156.226.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62506 (0xf42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 22:46:43 2025 GMT
Not After : Dec 13 22:46:43 2025 GMT
Subject: CN=67771756-b1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:ea:b7:9c:fb:08:08:bb:e0:93:56:e5:e7:
43:61:ea:67:54:83:d5:50:8d:97:a6:56:18:19:bf:
74:da:a3:7f:e0:86:f3:8b:f1:40:86:cd:63:a3:c3:
7e:76:70:fc:ba:79:08:5b:30:d0:8c:cb:62:e5:de:
46:4f:7d:11:7c:34:d4:36:93:16:ac:10:08:dc:79:
1d:52:bd:9c:86:83:b0:e6:cd:09:3a:65:32:53:70:
f1:93:99:53:28:73:de:48:14:e4:c4:ea:aa:90:2e:
99:c9:ff:60:01:9d:72:01:b9:32:5b:d2:9a:1d:65:
f2:97:12:fe:ea:5f:d1:1c:5d:29:c2:f8:13:5a:c7:
ed:cc:16:b6:14:61:d6:88:d4:aa:d7:99:2d:f6:2b:
45:3a:9c:11:23:48:b3:8b:da:a1:42:46:bc:e5:59:
7f:87:67:73:2a:e9:67:3d:d4:3c:4c:1e:b1:52:7c:
47:dd:96:c1:04:46:70:f5:f3:6d:3c:4d:16:1f:99:
b7:96:4c:c7:6d:44:69:ba:f3:0b:b6:54:c9:85:b7:
8d:39:c4:c1:14:1e:8a:43:de:f1:44:5f:24:11:03:
af:5e:1c:11:f3:96:7f:5a:de:b1:28:8a:bc:de:69:
05:20:23:2b:f4:82:41:19:a2:1c:d5:19:4f:da:ba:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:A1:B8:F9:FD:47:5E:7B:D9:9A:16:EE:75:3B:B3:E2:3A:78:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/720FF9AAC95B11EF9955A97B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.198.0/24
Signature Algorithm: sha256WithRSAEncryption
03:60:5c:db:15:cd:26:e9:0f:75:a7:9f:6d:f2:bd:e3:d8:b1:
71:87:57:49:8c:f1:e7:83:2a:1f:1c:7b:79:8f:6b:7e:19:58:
94:46:0d:88:fd:4f:b1:f1:28:4f:75:61:44:61:85:cf:a1:78:
a8:8c:32:47:84:61:e7:1b:43:aa:e1:aa:28:5e:08:1e:e0:cb:
f1:be:4c:d5:c5:68:70:e2:3a:d7:b2:9a:eb:8b:14:e0:3d:c0:
83:54:e6:6a:0b:1b:be:8e:aa:e8:12:e8:20:e4:63:4b:1b:66:
7a:d9:73:64:9c:9b:24:61:3f:0e:14:a4:94:93:ae:55:f1:f8:
c6:8a:27:f6:2b:78:25:ae:2d:1f:b2:74:d9:bd:4f:23:85:1f:
ba:06:32:12:ab:12:71:9d:dc:1e:08:66:c7:6e:92:e0:d3:60:
eb:7e:91:88:d7:8c:50:30:21:91:16:22:ea:23:23:db:5b:35:
d1:4d:e3:cb:24:44:92:84:65:99:6c:b8:f3:b1:b0:22:76:b5:
2f:58:0e:0e:13:da:d0:60:58:20:76:4c:8a:b7:8a:54:31:e2:
e9:d9:49:33:c6:a7:27:c0:73:89:8d:57:0d:50:a8:d6:8d:0e:
48:04:54:8a:a7:1d:07:33:88:6e:c6:7f:cb:d4:7f:7c:e3:98:
16:55:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:02 2025 by rpki-client