Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88BA8804C28111EFBA154C7D762E951A.roa
File: 88BA8804C28111EFBA154C7D762E951A.roa (raw, json)
Hash identifier: 8tJ3GxldJflwowQBAX6Y3MyiIXNRkWe0EuQnAUdZTio=
Subject key identifier: 7C:AC:A6:7F:BA:D3:9A:29:BC:AD:D4:DE:89:CC:0D:27:14:1B:37:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88BA8804C28111EFBA154C7D762E951A.roa
Signing time: Wed 25 Dec 2024 05:31:47 +0000
ROA not before: Wed 25 Dec 2024 05:31:43 +0000
ROA not after: Wed 10 Dec 2025 05:31:43 +0000
asID: 984
IP address blocks: 156.228.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59631 (0xe8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:31:43 2024 GMT
Not After : Dec 10 05:31:43 2025 GMT
Subject: CN=676b98c3-3753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fe:7d:3a:a1:94:d2:37:eb:09:30:0d:28:9e:
f1:51:26:70:04:de:2c:9c:86:ab:fc:14:b7:0d:e5:
8f:a4:1f:57:0d:d1:5b:1a:56:fd:23:aa:29:c9:1c:
80:a4:0f:88:85:f0:c4:04:44:9e:e3:da:7a:40:9b:
f0:3c:4b:e8:ed:7b:d4:9e:96:eb:11:65:5b:51:b0:
1e:1d:a6:cc:9f:08:09:7f:9b:86:4e:e4:6d:a1:77:
51:1d:35:57:d9:ba:dd:c8:33:2c:b9:bd:80:ba:66:
7b:e4:b2:32:fb:ac:ff:37:9f:94:62:08:79:bd:c2:
7c:ee:8d:a4:91:f0:a6:a7:e8:2d:bc:62:9a:aa:88:
06:b9:08:1a:e3:d8:56:0c:81:13:0a:8e:61:52:ea:
a7:4d:42:cb:b1:24:3b:41:87:bb:0d:42:b8:a7:b0:
5d:cf:e7:31:f5:b3:87:80:b5:57:4d:01:90:5b:41:
76:a2:71:80:35:6b:68:e5:5c:8b:b8:2b:d9:b6:b8:
e2:80:9f:a2:7f:68:72:aa:91:4c:37:f4:a6:3f:94:
98:7e:7e:90:b0:86:c5:1a:41:66:72:b4:65:06:9e:
69:82:14:40:04:35:73:81:9a:fc:a5:dc:4e:58:1f:
b5:5d:65:56:23:e8:fe:b2:0b:26:87:e7:36:2f:a0:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AC:A6:7F:BA:D3:9A:29:BC:AD:D4:DE:89:CC:0D:27:14:1B:37:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88BA8804C28111EFBA154C7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a4:a3:aa:b2:15:97:e2:d4:47:fd:de:03:23:21:41:11:5b:
92:2f:86:bc:a9:a0:6f:d1:d8:57:a2:e8:6b:46:76:20:72:49:
e5:2a:01:43:da:64:c3:bd:37:2c:14:78:40:6e:16:56:d4:16:
10:40:44:1e:77:59:89:e3:7f:c7:31:dc:d5:ba:d7:c2:0a:54:
84:79:29:5d:74:16:b4:1d:71:d6:b5:8c:28:8b:98:78:2b:50:
62:86:c0:5d:fd:a9:1a:0e:42:10:43:7d:f7:23:f6:02:26:e3:
d2:da:da:d3:2c:da:ea:59:0a:5f:3c:5a:56:a9:ef:3f:8d:36:
65:21:c2:8c:a5:0a:d6:ca:02:17:56:de:3a:8d:d0:be:23:ae:
c0:39:36:74:59:e8:f3:51:28:1d:9d:0d:9c:89:06:97:26:ca:
92:e7:20:8f:50:aa:73:e2:d0:12:ab:4a:0e:69:1b:37:25:52:
82:e5:89:71:73:91:39:5a:22:0b:86:d8:45:b6:a1:68:bf:63:
46:15:40:28:45:9a:a8:32:69:a2:af:27:5d:28:6f:44:cc:79:
42:36:f0:e1:a6:d0:e0:5d:cd:80:b1:4a:61:80:b7:32:f2:b2:
c6:17:3f:09:29:81:d0:da:f3:10:51:ee:ef:c7:ca:c8:79:95:
93:60:03:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:37 2025 by rpki-client