Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B197860C32311EF9AB6406B762E951A.roa
File: 8B197860C32311EF9AB6406B762E951A.roa (raw, json)
Hash identifier: TBD7jZHAkfosmzHiezAJjaTVJbbQOAoILFrJe9PFiBw=
Subject key identifier: 5B:0A:B4:53:41:CC:BF:2B:DD:E8:4F:68:55:9D:41:13:20:2B:E8:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B197860C32311EF9AB6406B762E951A.roa
Signing time: Thu 26 Dec 2024 00:51:30 +0000
ROA not before: Thu 26 Dec 2024 00:00:26 +0000
ROA not after: Wed 10 Dec 2025 00:00:26 +0000
asID: 984
IP address blocks: 156.228.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59982 (0xea4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:26 2024 GMT
Not After : Dec 10 00:00:26 2025 GMT
Subject: CN=676ca892-a838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:0d:2f:64:8c:3a:3c:3d:ae:b7:4c:44:ea:
cd:c8:cd:00:73:3a:7c:cd:cd:cb:5e:73:dd:c8:b2:
9e:3d:14:84:13:7c:61:91:36:27:20:7b:7d:95:69:
18:dd:e3:d5:6b:c8:7d:9f:39:9f:1a:2e:7d:c6:21:
ab:0e:a4:5c:24:16:f9:5f:85:25:02:30:4a:82:f0:
73:d2:1e:0e:6a:69:dd:51:50:10:75:6a:63:33:e4:
a7:dc:bf:7b:40:9d:1b:7b:c2:b4:5e:2e:5f:b0:8e:
1b:81:10:be:e1:c3:f1:e1:63:91:d5:35:4f:04:e5:
08:7b:18:b6:02:63:49:11:56:23:88:18:93:fa:a0:
70:49:1d:1c:a0:a8:9f:ca:eb:db:9a:fd:f3:a5:23:
42:cf:3b:e7:83:33:a5:cf:b6:b4:01:fa:e1:e8:c3:
bc:9c:0a:8f:41:e9:5e:03:04:5c:cc:49:83:50:19:
d9:f0:e2:41:f1:fc:f2:93:b4:88:6e:5e:74:5b:5a:
e2:8f:2a:cc:64:ea:e4:7f:0b:9f:66:09:c3:24:74:
92:f6:76:a0:de:ff:02:4e:56:d0:4a:a9:e5:7c:d2:
64:1e:67:99:07:e7:e6:c0:95:f7:cf:db:53:09:a2:
87:fe:8f:8f:2d:e4:ac:28:df:be:1c:c5:13:93:6d:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0A:B4:53:41:CC:BF:2B:DD:E8:4F:68:55:9D:41:13:20:2B:E8:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B197860C32311EF9AB6406B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.240.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c6:34:28:1b:48:1a:82:cc:b6:5b:28:5d:53:6b:c9:fe:1d:
c1:45:ee:d1:76:2b:63:64:f8:25:df:da:cd:f7:bc:a3:96:47:
f8:48:04:6e:fa:3a:2a:ce:f1:13:5d:c6:be:ae:cf:b3:1f:ac:
9f:43:6e:fe:cb:a3:2d:f9:1d:b4:b5:80:dd:0f:d6:90:fb:af:
c2:b5:39:2e:a8:28:86:a2:7a:08:7d:b1:2b:9d:40:45:10:30:
42:9b:4d:58:5e:99:b3:4b:f0:39:77:81:fa:e3:3e:08:05:23:
7f:6f:e0:b8:71:64:8d:c8:70:95:33:24:27:da:71:97:14:09:
a9:27:77:2f:1e:01:ce:72:c7:58:e6:f2:77:59:1b:96:3d:df:
6f:92:28:78:03:a8:74:3b:ac:87:7c:48:78:48:5f:ba:22:c9:
b5:71:0d:63:32:ce:b8:a2:69:0b:3b:35:c9:14:66:64:9b:3b:
ac:58:00:b1:98:a7:d4:a0:ed:16:4b:ef:ee:6a:5d:91:36:c8:
fc:f6:97:2c:24:90:69:8e:b3:d7:58:eb:27:d2:22:4b:91:a4:
52:63:18:a7:90:d7:d2:b9:09:1c:d9:55:b1:0f:7e:01:58:b4:
4b:5c:16:3c:02:44:04:ad:30:d9:ad:de:e5:b3:7a:bb:72:87:
de:96:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:46 2025 by rpki-client