Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/765647C8C97711EF8CF387B6762E951A.roa
File: 765647C8C97711EF8CF387B6762E951A.roa (raw, json)
Hash identifier: /a8mb96h0XBmZEFl0F5SlpODZnK+TgEbjT4lenLtQcI=
Subject key identifier: F7:C5:03:02:E4:1C:C2:63:38:8E:C8:CF:1A:59:BE:77:54:2C:A3:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/765647C8C97711EF8CF387B6762E951A.roa
Signing time: Fri 03 Jan 2025 02:07:19 +0000
ROA not before: Fri 03 Jan 2025 02:07:16 +0000
ROA not after: Mon 13 Dec 2027 02:07:16 +0000
asID: 17561
IP address blocks: 156.227.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62707 (0xf4f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:07:16 2025 GMT
Not After : Dec 13 02:07:16 2027 GMT
Subject: CN=67774657-ec21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:d5:05:a2:ec:d0:63:69:38:e8:91:b8:ad:
62:b9:d7:c2:98:51:de:6a:ba:20:f1:20:d6:6a:75:
7c:b5:a1:ed:10:11:f9:0a:dc:d6:b1:d2:d4:2b:f5:
ad:ad:5b:d6:b2:63:2c:8f:26:fd:8c:a2:8e:fc:cd:
ad:fd:46:61:2b:10:61:1b:d3:65:47:b3:26:ea:a7:
eb:ac:b8:5e:85:04:9d:f0:0a:24:47:5d:90:97:98:
2c:ec:35:9f:90:1f:3d:47:1a:9b:3e:04:95:e3:79:
4a:3e:6c:62:af:9b:3f:49:de:7e:4c:37:7b:20:8a:
f0:2a:b5:87:12:c5:90:d7:41:b0:80:58:99:41:2a:
ca:8e:93:a3:a1:a4:cd:2a:7e:37:af:25:6e:27:f8:
d6:97:1a:f6:1d:24:75:e4:c6:93:7b:48:23:89:f1:
93:fb:c5:ab:a2:bd:87:d6:0c:b2:21:40:80:97:34:
c5:20:2b:21:20:24:e8:23:1c:b4:8b:8f:ac:18:d9:
4a:21:d6:eb:37:05:8a:5d:c7:4a:09:ac:28:f4:ee:
63:29:48:8a:8c:c0:f6:97:25:43:80:18:3a:40:cb:
e6:98:ed:c4:d1:3c:d2:5c:62:c4:39:8e:b4:1e:c9:
77:f8:ff:47:cd:59:7a:96:8c:9d:f9:4a:fb:4a:31:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C5:03:02:E4:1C:C2:63:38:8E:C8:CF:1A:59:BE:77:54:2C:A3:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/765647C8C97711EF8CF387B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.107.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fc:24:e7:71:4c:29:97:40:fb:2b:25:07:e1:e5:72:7d:dd:
87:25:f4:1e:42:5f:7b:e2:31:c7:2c:86:ba:64:8f:5d:4c:91:
12:b3:64:cf:8f:33:0b:14:39:e6:c6:d5:15:7c:f5:61:94:99:
37:59:86:ee:aa:8b:f8:93:ab:3e:40:cf:6b:c8:56:cf:69:05:
bf:3d:33:8d:f0:3a:91:16:11:bf:99:d1:d1:e2:72:d1:0d:65:
24:87:e3:c8:3b:3c:84:73:43:0d:0c:15:51:8e:3e:9e:b6:7b:
32:30:d9:79:e2:9e:db:c1:5b:15:ad:3d:f5:27:2d:35:bd:79:
fd:59:95:9d:13:1e:42:1c:91:dc:05:0f:de:d2:3f:f0:55:9a:
45:51:c9:36:d2:47:b1:c6:25:9b:28:2b:34:3a:87:f5:e7:bf:
12:83:06:eb:9a:bd:fb:3f:a0:d5:37:86:a4:94:2d:b6:9f:33:
c1:14:d2:10:3a:14:7a:cb:eb:d3:ae:9e:81:d3:2a:a4:59:ba:
ec:50:96:3f:02:65:dd:c4:68:37:72:92:07:35:f8:d3:13:bf:
03:3c:d6:54:8b:e6:ca:e7:84:64:d4:70:80:41:a2:5a:6b:a7:
5c:bf:c4:04:02:aa:a9:ef:2b:7e:8e:ec:8e:88:83:13:93:72:
72:f1:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:45 2025 by rpki-client