Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E7E2BACCC011EF8B33BF98762E951A.roa
File: 92E7E2BACCC011EF8B33BF98762E951A.roa (raw, json)
Hash identifier: hHVPXEoTUf8DPU4qyUK7KqHHIJmo5ImOXIT9chxz5Wg=
Subject key identifier: 22:6D:85:59:AF:3D:E4:7D:67:8F:87:42:91:AD:4B:20:2C:12:D3:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E7E2BACCC011EF8B33BF98762E951A.roa
Signing time: Tue 07 Jan 2025 06:28:14 +0000
ROA not before: Tue 07 Jan 2025 06:28:10 +0000
ROA not after: Sat 13 Dec 2025 06:28:10 +0000
asID: 984
IP address blocks: 156.233.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64030 (0xfa1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 06:28:10 2025 GMT
Not After : Dec 13 06:28:10 2025 GMT
Subject: CN=677cc97e-397d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:f2:da:2c:3b:00:22:05:3a:c5:c5:d0:35:
4a:60:bd:7f:50:b7:a8:ea:f6:7a:76:8c:af:99:4c:
c5:96:c2:f6:ce:7a:ef:00:f4:8d:85:bf:5b:cd:25:
50:41:38:1f:9e:31:05:94:bb:e5:ec:c4:86:98:40:
bb:70:25:6c:59:a9:24:3c:25:2c:68:4b:a0:4a:bf:
8c:13:89:75:6c:3c:55:27:90:d0:c9:fe:a7:f0:20:
e2:de:70:43:fd:f8:1e:14:ec:07:13:e4:14:4e:05:
db:10:c2:dc:28:79:87:5a:45:20:65:0d:2b:0a:f3:
25:ff:47:d3:00:11:8e:78:4e:65:47:03:da:2d:4d:
f8:45:3d:50:88:20:8d:39:7d:cd:e5:2c:68:19:e2:
f2:63:dc:3a:67:49:24:2f:a0:ad:33:db:42:29:43:
85:10:37:b7:c2:17:b1:9e:84:e7:8f:a4:03:42:d5:
1d:2b:07:40:b6:c6:cd:f1:db:01:0a:b9:bf:1f:f9:
ff:86:2c:81:e5:0b:bc:f4:29:92:bd:82:f6:93:c8:
d2:fb:df:bd:d4:5a:c3:05:57:3f:25:26:6f:48:b8:
f0:d9:03:95:79:32:89:ee:cd:d0:6f:fc:0c:08:94:
fa:ac:64:bf:b9:a4:2a:ae:53:9a:15:0b:a3:b7:37:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:85:59:AF:3D:E4:7D:67:8F:87:42:91:AD:4B:20:2C:12:D3:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E7E2BACCC011EF8B33BF98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:44:bd:69:df:01:62:ea:a2:7b:be:e5:39:56:94:8b:49:6c:
d9:2e:8e:e5:16:46:7f:b5:4c:10:5f:dc:2c:4e:95:fd:b9:af:
6d:70:24:93:7b:31:9d:13:b0:4c:51:85:96:48:94:b1:ef:ac:
3c:f7:21:6b:94:1e:a5:fb:2d:77:ac:17:77:be:9a:e5:f0:0a:
72:3d:1f:4a:a7:c5:5b:32:7a:18:b9:4f:62:cc:91:1d:ea:f6:
11:ea:dc:a9:a7:e7:f0:71:25:8c:58:8f:0c:72:ca:63:df:25:
e1:8a:0a:0a:29:af:21:15:b0:98:ea:0a:61:b8:36:24:d9:1c:
b6:36:72:ae:cc:c2:a6:aa:24:78:22:01:ce:91:35:72:8b:94:
93:ca:5f:be:0c:d8:54:e4:e0:03:89:08:78:4c:9a:bb:da:ae:
d9:0f:98:d7:09:02:27:13:c6:a5:8e:ae:62:7d:d3:a1:6a:6b:
80:9b:38:f8:d6:48:b5:9b:17:f4:9b:a7:bf:de:e4:71:d4:8a:
3b:dd:9b:d0:67:2e:29:29:ed:4b:60:c0:c7:0b:42:47:4d:81:
83:41:5c:d0:61:26:47:27:1d:3b:9f:3a:a5:9a:1b:85:42:6e:
d1:82:41:7b:f6:69:db:9f:3a:3a:5a:cb:e0:3d:8a:fb:6a:31:
4b:1e:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:53 2025 by rpki-client