Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/981148E2C97011EF8A10CD84762E951A.roa
File: 981148E2C97011EF8A10CD84762E951A.roa (raw, json)
Hash identifier: fsp/fzgsYcC6fwFRNGCr/6fmtkxsc/MT/yzAqNAw9Og=
Subject key identifier: 3A:DE:1F:19:6D:8F:23:11:98:90:96:E9:6D:2C:BC:2A:FC:A0:0D:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/981148E2C97011EF8A10CD84762E951A.roa
Signing time: Fri 03 Jan 2025 01:18:10 +0000
ROA not before: Fri 03 Jan 2025 01:18:06 +0000
ROA not after: Mon 13 Dec 2027 01:18:06 +0000
asID: 17561
IP address blocks: 156.227.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62641 (0xf4b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 01:18:06 2025 GMT
Not After : Dec 13 01:18:06 2027 GMT
Subject: CN=67773ad2-f291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:af:e6:e1:3b:74:09:dc:53:1a:a9:31:18:
9b:86:d1:a0:3f:06:69:4a:1f:12:22:c2:c5:ba:a5:
d0:11:db:3f:e8:d2:cb:95:72:7b:67:b6:97:9c:cd:
0c:51:b6:cf:bc:30:97:25:69:0a:a2:f9:9b:79:86:
a4:0d:93:99:a8:4b:97:0a:66:be:82:cf:29:e7:d1:
f9:c3:1c:af:fa:10:a9:90:cf:a7:7b:62:2b:a1:ab:
ca:82:0f:98:3d:82:41:23:97:cf:55:ca:3c:27:1a:
5c:7c:f6:22:4f:a9:03:7b:f8:0c:e2:a6:8a:f4:09:
a6:01:1d:98:9d:81:4c:d1:54:31:e7:96:56:53:f3:
38:98:2a:0a:33:2e:44:72:bd:0b:a7:06:e7:a4:10:
d8:09:53:87:cb:c9:48:8f:1a:41:5f:c7:75:d4:07:
2e:eb:a2:52:90:ec:d9:16:36:02:a6:ff:6f:e4:96:
15:cf:74:3e:fb:ac:64:05:b6:ac:d6:8d:60:41:ce:
4b:48:a4:6f:57:10:0b:f6:4d:e5:f3:81:40:44:e0:
f9:26:ca:05:c9:ae:cc:6a:f2:f0:c1:41:9a:1d:2c:
f1:45:23:42:18:12:d2:43:be:03:f4:12:78:8e:02:
5e:5e:5f:aa:6c:58:b5:9a:0b:f4:0f:64:cc:a1:42:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DE:1F:19:6D:8F:23:11:98:90:96:E9:6D:2C:BC:2A:FC:A0:0D:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/981148E2C97011EF8A10CD84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.74.0/24
Signature Algorithm: sha256WithRSAEncryption
12:89:c9:6b:de:88:9b:6f:07:81:42:99:cf:eb:f6:ed:21:db:
d1:55:ee:e3:b7:8f:76:c6:f9:a6:30:b1:a1:9d:31:89:7a:1d:
44:73:39:e5:d1:39:4f:42:6e:a2:4c:de:e6:55:b4:80:a0:63:
09:5b:28:08:bc:8e:bf:03:89:a9:b8:75:8f:2d:43:61:fe:cb:
ca:f1:69:2e:11:4b:25:ca:8c:ff:e6:ea:35:6d:5a:de:b5:27:
6a:31:41:8a:5e:80:d6:8b:33:9a:b6:a7:1e:ee:6b:19:73:b2:
52:01:41:af:c1:1d:74:26:19:83:0f:9d:5a:a1:0f:4f:89:74:
fa:ff:cf:45:68:0c:2b:58:22:b9:d9:e7:84:5e:64:e2:0f:a6:
04:86:0e:f8:d4:36:31:49:cc:1e:e8:82:75:67:73:be:06:84:
86:13:c6:dc:a8:e4:2c:75:e0:75:ae:f8:5c:b0:3e:1d:3b:ef:
10:60:f4:37:cd:23:ce:27:9f:42:4f:a2:32:66:d8:59:af:b1:
45:e5:07:d5:61:aa:96:48:e4:de:fe:d6:fe:a0:e6:2c:48:6b:
76:a9:2f:d6:fe:4d:14:dc:b1:5f:7c:7e:07:6c:be:79:45:ee:
a4:f9:74:bd:b0:bc:97:b7:e5:f5:46:94:6e:61:8f:3a:04:af:
0d:39:d9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:10 2025 by rpki-client