Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E73E8E8C28311EF9011E889762E951A.roa
File: 7E73E8E8C28311EF9011E889762E951A.roa (raw, json)
Hash identifier: gmjoCI5IdCjfAdr2JCKTbFoWEkaZLt8QDnqjmqf0fkQ=
Subject key identifier: C1:78:C5:9D:09:BE:6C:0D:3C:62:E5:D7:30:BF:45:08:7B:2A:E8:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E907
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E73E8E8C28311EF9011E889762E951A.roa
Signing time: Wed 25 Dec 2024 05:45:49 +0000
ROA not before: Wed 25 Dec 2024 05:45:45 +0000
ROA not after: Wed 10 Dec 2025 05:45:45 +0000
asID: 984
IP address blocks: 156.228.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59655 (0xe907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:45:45 2024 GMT
Not After : Dec 10 05:45:45 2025 GMT
Subject: CN=676b9c0d-1ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:25:df:46:85:5d:66:04:d1:9b:53:af:e3:
ab:f3:c5:26:04:e6:24:52:9b:22:8a:60:4b:3b:93:
33:c8:bb:3f:23:bc:6a:77:9c:dc:b9:49:d0:89:19:
af:c4:e5:61:79:23:00:7e:de:fb:be:f3:b6:29:8d:
d7:14:59:9c:21:60:21:21:e0:e7:97:83:c3:32:7f:
1f:b4:f8:f4:db:cf:0f:7e:dc:4f:42:5d:c7:15:b7:
e9:7d:4a:fd:55:9e:c9:0f:6f:9e:a1:3d:00:75:48:
9f:2d:f6:9f:d2:b7:b8:e4:f8:13:4a:b7:27:bc:ae:
b6:dc:00:09:3c:39:89:c1:54:fc:b7:69:a0:28:fd:
85:3d:7b:cc:e2:07:e4:7e:79:ac:76:42:f9:b5:23:
71:c6:15:42:93:b3:f3:38:27:a4:31:92:40:16:f8:
d0:8a:02:01:a8:82:fd:61:96:f3:1f:cd:08:b9:44:
9d:d0:c9:e5:d0:a9:15:01:3d:f2:3f:2d:4a:fc:1a:
eb:e1:dc:5e:74:ce:58:44:fb:a7:0f:17:1c:d1:a8:
44:eb:20:94:b4:ca:90:af:52:1a:07:2e:f0:ed:1e:
43:b7:3e:bc:9f:d7:ed:c1:a2:54:d1:85:2c:49:d5:
e4:4a:43:07:d0:c6:26:fe:e9:7c:b4:2e:76:ea:b2:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:78:C5:9D:09:BE:6C:0D:3C:62:E5:D7:30:BF:45:08:7B:2A:E8:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E73E8E8C28311EF9011E889762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.35.0/24
Signature Algorithm: sha256WithRSAEncryption
90:26:89:a5:15:2f:43:66:bc:5b:a7:14:ad:ea:af:7f:3e:59:
ba:3a:dc:2f:ef:16:9e:dc:fc:68:be:c6:16:ef:9c:2c:f4:4e:
83:dd:26:c6:79:df:5d:4b:71:0a:54:9a:de:46:72:bc:3c:6d:
5b:d2:9e:83:9e:f5:a0:82:3b:70:54:a3:5e:77:74:5b:44:59:
6e:73:73:6c:4c:4f:eb:08:59:ad:e4:b7:aa:a1:a5:6e:93:6c:
27:75:f0:14:40:da:b1:49:d2:a6:b3:7a:10:c7:83:ed:02:8a:
c9:18:cd:6e:e9:c1:ac:13:4d:15:a6:6f:d9:57:ac:e4:0d:fb:
75:30:5e:ac:bf:b3:ae:97:56:80:92:68:49:c9:40:1f:a1:d0:
ef:89:93:1d:89:42:f2:0c:b8:8b:01:92:93:cb:1a:cf:be:eb:
04:c5:f2:13:cf:9c:f9:a2:e7:fa:50:f8:8f:93:df:92:79:6a:
07:ba:77:57:46:b7:d0:6c:f6:45:88:23:ac:db:e0:2c:2f:f3:
8e:0b:a8:e3:34:f2:d7:01:3d:d5:64:d8:79:40:84:b3:eb:c1:
95:09:62:90:50:73:e6:96:02:b2:bb:05:d5:ad:2d:8f:30:f9:
fa:14:1f:31:77:97:f2:8a:bc:98:ea:70:03:bf:67:b5:49:5f:
5a:9d:5f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:36 2025 by rpki-client