Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/944084CEC34111EFAFD3DFBE762E951A.roa
File: 944084CEC34111EFAFD3DFBE762E951A.roa (raw, json)
Hash identifier: Ip4+5r6Rsce2HVyVdJJlUP/yTEc/R8PL6kaFOEgGDmk=
Subject key identifier: 88:1A:75:7A:1F:33:5C:CB:C9:A6:E5:D0:59:A7:86:C9:2A:88:87:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/944084CEC34111EFAFD3DFBE762E951A.roa
Signing time: Thu 26 Dec 2024 04:26:30 +0000
ROA not before: Thu 26 Dec 2024 04:26:26 +0000
ROA not after: Fri 10 Dec 2027 04:26:26 +0000
asID: 17561
IP address blocks: 156.244.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60369 (0xebd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 04:26:26 2024 GMT
Not After : Dec 10 04:26:26 2027 GMT
Subject: CN=676cdaf6-8a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:b1:71:31:ab:0b:7d:92:6e:9c:2b:ce:3c:
46:17:0a:07:16:f8:08:93:4b:7d:ff:84:4d:1b:5b:
92:c1:e2:b2:69:c8:98:79:86:a3:39:b1:ac:02:e5:
59:3d:85:8f:9e:67:a1:1c:b5:3b:ad:6d:c9:16:3e:
45:17:35:c6:95:e9:b1:22:07:86:ab:da:ee:c4:26:
0b:ea:e8:40:ba:70:80:7b:37:ab:34:48:a8:77:c0:
a8:05:e9:90:f4:8a:a0:4d:a6:32:bc:49:fa:02:cb:
47:bc:7c:95:81:c9:5d:d5:a3:15:cf:ee:aa:86:16:
72:7d:37:b2:09:f0:0e:b9:06:66:7b:6f:8a:67:86:
1a:e5:98:39:91:19:89:b3:a3:2e:54:43:44:27:4b:
74:d9:0e:53:63:5b:25:74:90:b2:eb:ec:d1:b9:d7:
73:94:18:ba:e0:6f:cb:d7:8d:1a:4b:93:0a:ac:b5:
06:ef:ec:74:1d:5c:6f:f0:49:91:dc:77:d8:5a:6e:
66:64:e0:0c:ab:1a:4f:9b:1d:f1:6c:2d:94:31:cf:
ba:67:8a:bf:ac:9a:39:46:f6:3c:ee:71:44:7d:1a:
28:d0:da:95:2c:cc:7e:99:65:7e:b5:3c:97:a4:ca:
a5:eb:70:2e:90:a1:69:6a:f7:d9:2d:12:54:35:2a:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1A:75:7A:1F:33:5C:CB:C9:A6:E5:D0:59:A7:86:C9:2A:88:87:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/944084CEC34111EFAFD3DFBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.228.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d3:8f:b5:a0:ca:97:aa:e5:22:8d:3a:ec:79:15:fd:98:75:
c3:3c:f4:2e:a8:dd:8f:d7:30:cc:05:46:d9:9d:78:47:21:da:
07:05:83:4e:34:85:77:89:41:fe:9a:83:86:ca:fd:fa:b6:2f:
ec:92:c6:69:3c:81:0c:b9:e8:20:a6:36:b5:ae:7b:fb:39:8b:
5e:58:7d:95:48:a5:3c:f9:3e:4f:85:cb:98:48:50:53:c7:0d:
59:d1:fc:8a:76:e7:06:e8:34:2d:0b:c2:d4:b2:8b:8c:35:10:
69:f9:90:c2:c6:82:f1:99:3a:bb:16:45:19:28:15:10:2c:b6:
7f:7d:d9:57:a0:cd:fd:98:c3:84:f2:9c:53:49:3d:23:22:e7:
97:57:54:0e:ae:4d:79:d8:19:ea:28:7b:f5:81:eb:31:4c:6e:
a3:ed:8a:73:c3:5e:5f:23:18:be:d4:10:65:6f:1c:df:1f:4f:
60:34:d7:73:e8:7e:dd:a7:8c:2b:1c:29:a5:71:25:fa:69:39:
7a:78:ce:d9:ac:1f:62:66:82:26:a1:b9:38:f1:70:cb:e2:fd:
48:dd:87:b7:ff:1d:78:66:bf:98:24:3f:df:75:a1:19:8d:3b:
ff:46:9a:3d:b4:32:58:9a:a8:68:2c:5e:ec:d3:76:e8:77:1a:
0f:7d:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:08 2025 by rpki-client