Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F1F74C8CC9D11EF836692B0762E951A.roa
File: 7F1F74C8CC9D11EF836692B0762E951A.roa (raw, json)
Hash identifier: aP9A16OZERChazD/C9h+VatAlSQcBY81IswMUwh90g4=
Subject key identifier: DF:C7:D8:70:8B:AD:84:51:B8:4A:DE:5D:D3:22:1E:FA:91:95:68:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F974
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F1F74C8CC9D11EF836692B0762E951A.roa
Signing time: Tue 07 Jan 2025 02:17:09 +0000
ROA not before: Tue 07 Jan 2025 02:17:05 +0000
ROA not after: Mon 13 Dec 2027 02:17:05 +0000
asID: 17561
IP address blocks: 156.227.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63860 (0xf974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 02:17:05 2025 GMT
Not After : Dec 13 02:17:05 2027 GMT
Subject: CN=677c8ea5-dba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:50:ac:b9:e9:ff:8f:9b:be:36:6e:37:fd:
0b:ae:a3:c2:f0:12:04:46:47:c0:6b:fb:7a:46:fc:
c0:4c:00:5f:5d:70:67:80:ae:03:1c:93:f6:21:75:
08:bc:2a:72:5d:10:25:a9:cf:e1:f2:fd:b5:c4:97:
55:8a:bd:ab:36:7e:e4:13:47:7f:77:fb:7e:62:a3:
3d:5f:58:63:5c:b1:6d:22:af:70:a8:99:f1:c9:b2:
27:93:d1:5f:05:be:72:71:09:9d:f4:ff:03:1a:75:
ea:e0:70:fd:6f:71:8f:1c:77:ff:ed:84:d7:61:ed:
eb:75:1a:b9:2f:3d:1a:e8:89:c4:34:96:07:0f:69:
a1:b8:87:da:f2:61:49:7f:32:92:24:d4:9a:9c:d6:
af:33:ea:02:3a:03:55:21:8a:de:f7:4f:a8:bf:6c:
64:f2:aa:e8:b3:b5:d6:d9:ba:ad:e3:b6:cb:e9:2b:
8f:f6:da:ad:89:2c:d8:8c:51:24:76:ed:d8:7c:71:
57:c9:01:c7:31:ea:f2:55:dd:01:d3:bd:ff:57:81:
a7:5a:2f:54:f6:83:ec:78:34:b6:b3:7c:07:21:1b:
98:24:c5:27:9c:b4:7d:ea:a3:18:6d:c2:96:4a:90:
67:9c:4f:dc:a7:40:05:f4:a9:a7:fb:20:7a:5f:27:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:D8:70:8B:AD:84:51:B8:4A:DE:5D:D3:22:1E:FA:91:95:68:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F1F74C8CC9D11EF836692B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:43:d2:3c:f7:e3:7f:e7:e1:5d:7f:da:d4:f9:d0:4a:6a:86:
39:e6:24:8d:1d:d6:c4:2f:61:ba:19:70:e1:69:80:b7:a9:5f:
51:ba:eb:fa:77:6e:22:58:2c:5d:86:78:9a:26:80:f5:1b:9e:
ef:0f:f2:80:a0:17:03:1b:72:d3:c9:bb:5a:8f:bc:3d:0f:f5:
98:80:b3:54:c9:3b:69:6c:5e:89:c9:52:4b:9c:17:22:19:e7:
ab:05:73:57:31:d7:eb:7b:f1:0e:e0:02:f8:55:71:1e:56:d4:
98:0d:a0:cc:d5:b7:fa:53:33:fe:b2:40:db:6f:c9:18:cc:84:
f9:f5:a6:5f:bb:fb:f6:01:22:43:8d:79:22:95:cb:a2:e3:a7:
81:62:c1:d9:c0:d8:c7:c6:3c:0a:4f:88:07:e6:64:7f:af:12:
04:8a:28:33:99:d1:6f:f0:b1:06:86:56:cd:37:e2:5d:fc:60:
9c:e4:f5:1f:5f:79:dc:85:7c:6c:84:4a:7f:8f:0b:fc:73:1c:
b1:ec:86:47:c2:66:cc:eb:ba:7c:ca:7a:f5:7c:d4:be:7a:ea:
0c:6d:77:4d:f9:93:50:5e:94:49:e5:88:8b:47:3c:48:95:45:
d8:cf:87:5b:06:70:f6:e2:2e:d2:0d:19:77:f2:91:ea:d7:41:
e3:2e:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:53 2025 by rpki-client