Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C5F61E2C28011EFB7317F78762E951A.roa
File: 8C5F61E2C28011EFB7317F78762E951A.roa (raw, json)
Hash identifier: RpP9srg27OoXdF7i4tG2d/3BI0KItbPfA/7mJTV9hGU=
Subject key identifier: E3:4B:90:48:6E:51:05:E8:6C:B5:11:50:DF:FB:59:57:7B:23:93:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C5F61E2C28011EFB7317F78762E951A.roa
Signing time: Wed 25 Dec 2024 05:24:44 +0000
ROA not before: Wed 25 Dec 2024 05:24:40 +0000
ROA not after: Wed 10 Dec 2025 05:24:40 +0000
asID: 984
IP address blocks: 156.228.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59619 (0xe8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:24:40 2024 GMT
Not After : Dec 10 05:24:40 2025 GMT
Subject: CN=676b971c-629d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:f2:0b:e5:52:d5:e3:25:8d:36:9c:9b:88:
1f:4b:5b:cd:1a:12:0b:45:fe:60:9a:99:54:84:d8:
1c:67:8f:c0:39:4c:84:7d:52:d1:38:45:76:60:22:
04:17:99:fa:cc:13:d4:ef:8a:c7:6c:ed:c7:e6:94:
5f:30:dc:f6:e9:91:fe:d8:44:27:d3:9f:23:d5:33:
cf:1c:e6:5d:88:9b:6f:30:5a:fa:71:b7:a6:0e:77:
dd:91:78:0c:70:78:aa:96:fd:a3:84:ca:c8:d1:9c:
fc:e2:0b:8e:f9:8d:89:c4:1c:2f:9d:67:85:7e:1d:
3e:32:a8:f7:bf:13:64:e7:7d:0b:27:91:21:5b:a5:
0d:bf:49:81:cf:31:98:85:74:ea:ad:ef:37:ff:53:
22:5e:7b:05:d6:85:fa:0b:2e:9b:a5:94:b4:56:b0:
a1:00:f8:73:7c:94:ae:47:04:78:0f:38:c7:2e:7f:
bc:af:30:8a:e4:13:4f:11:cf:81:67:5d:0a:24:fb:
dc:47:41:ac:c6:53:29:a7:15:88:51:46:a8:f9:59:
25:bd:7a:8b:9b:9f:3c:7c:9d:b5:5a:ec:ca:ca:a9:
86:a6:bd:ad:0f:4c:bd:e4:50:9f:fb:c3:8b:22:fc:
1b:0d:13:9c:a3:0c:51:19:9d:5b:8a:1b:1a:a7:c3:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:90:48:6E:51:05:E8:6C:B5:11:50:DF:FB:59:57:7B:23:93:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C5F61E2C28011EFB7317F78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:21:da:1b:83:7d:47:76:b5:e7:a1:54:8e:5a:93:b0:63:4e:
85:6a:5c:7a:d1:7b:6c:45:26:9b:b8:53:fa:11:a5:d5:f2:f3:
ed:44:22:ac:a4:6a:1b:57:aa:48:40:2b:6b:4b:ee:46:ac:5e:
97:b7:e1:fb:de:96:ed:22:c2:26:14:e6:26:ed:7b:04:76:ec:
8f:3c:3e:d2:03:d0:f2:12:54:28:54:3b:71:e7:d4:f0:6d:4d:
64:34:7b:08:fd:65:d9:c2:70:11:69:bf:76:ea:e0:cf:a5:7e:
8f:42:c1:d5:65:0e:e3:04:72:95:fd:1f:61:45:9d:7f:50:f0:
2f:c1:8d:02:95:b5:67:7c:40:6c:dd:3a:2c:bd:3f:8d:d6:f8:
6f:31:80:17:3f:e9:ae:70:93:34:27:78:26:55:9c:48:e5:ba:
67:39:7d:66:91:f3:9d:80:ff:eb:3d:14:8d:3e:dd:87:13:26:
20:d8:27:83:65:c7:bf:dd:8b:47:26:97:d9:34:5a:b7:19:88:
66:43:96:84:a3:4d:22:9a:7b:4d:0a:2a:02:37:b0:91:cf:81:
b5:2a:bf:cd:8a:38:2e:b4:64:69:46:58:e2:dc:23:a4:05:4a:
e5:04:34:50:42:fb:cb:39:24:19:13:78:9d:2e:55:e4:2c:90:
72:47:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:59 2025 by rpki-client