Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98B10F58C28611EFB686379D762E951A.roa
File: 98B10F58C28611EFB686379D762E951A.roa (raw, json)
Hash identifier: ZKwz2NetVM4KnG7uaLHV//1+CHYPfoBaG+a97hSsWss=
Subject key identifier: 47:57:E4:3D:EE:E7:5B:7A:1C:3A:2A:BD:3A:87:37:A9:FC:98:D4:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E92D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98B10F58C28611EFB686379D762E951A.roa
Signing time: Wed 25 Dec 2024 06:08:01 +0000
ROA not before: Wed 25 Dec 2024 06:07:58 +0000
ROA not after: Wed 10 Dec 2025 06:07:58 +0000
asID: 984
IP address blocks: 156.228.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59693 (0xe92d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:07:58 2024 GMT
Not After : Dec 10 06:07:58 2025 GMT
Subject: CN=676ba141-9c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:54:aa:4d:8a:06:48:18:d8:e1:ff:44:51:
5e:67:63:f2:e0:b5:5a:be:48:f3:72:5d:4b:a8:98:
c6:12:f7:37:38:32:eb:86:0c:a0:29:e6:dd:27:0f:
a4:7a:7f:a8:18:2b:1b:f3:8c:00:85:a9:2b:59:41:
4c:df:30:e1:73:0d:7f:dc:80:f4:2d:42:9a:5b:15:
99:5f:b3:f5:85:23:df:08:80:f7:4a:6f:6a:0f:6d:
76:6c:a6:98:66:ba:9b:0f:69:0a:03:33:ef:82:c9:
32:c0:59:42:95:1b:75:1a:d2:1f:45:b3:d3:d2:2b:
c5:cd:ec:ea:25:a6:bd:72:0c:ce:a9:e7:bb:cb:98:
4a:e6:18:14:3f:db:5b:90:c2:6f:38:8c:a9:66:64:
05:0a:cb:fc:7c:29:0b:a9:c9:7c:20:f9:35:10:99:
22:f1:99:ad:94:71:b6:7f:c1:86:71:2f:c8:0b:67:
cf:1b:0f:cd:8a:88:50:ca:4f:cf:65:07:5a:69:58:
75:3b:d1:1c:9f:8d:f7:80:b5:d4:1f:c8:d8:d1:d1:
a4:ae:a8:44:11:0d:fb:c0:fd:79:1a:3e:15:51:8d:
af:56:b3:48:d3:04:a1:50:21:16:ca:a5:e6:4e:69:
05:bb:81:e1:bd:40:98:21:f9:f4:06:e1:61:a4:57:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:57:E4:3D:EE:E7:5B:7A:1C:3A:2A:BD:3A:87:37:A9:FC:98:D4:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98B10F58C28611EFB686379D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0c:75:8c:cf:95:5a:cd:16:0f:51:42:6e:88:ed:2c:10:da:
3a:48:b8:45:d3:5d:23:a5:62:1e:c5:b8:16:79:d5:df:9b:45:
7d:38:ec:8e:26:da:05:86:5b:e2:24:59:04:c2:6d:bf:f2:9a:
e5:90:86:ed:76:6d:18:ac:5f:78:99:fd:45:bc:fb:c6:f4:8d:
35:d0:c4:d6:0b:72:01:70:c6:a2:23:c2:65:b2:f1:50:c8:90:
97:36:cc:df:8a:b1:c1:3e:c3:8d:24:8f:13:93:ee:e6:fa:fd:
8f:37:c4:b9:b2:2d:2e:31:f5:0c:37:e3:3d:a0:11:f6:6b:76:
10:73:d8:92:82:87:36:49:33:c2:29:63:03:f8:78:88:c5:cb:
18:56:ca:4e:68:f0:9f:67:12:0a:c3:5b:b6:31:2d:6c:1d:04:
29:25:0d:c2:aa:bd:52:f5:03:df:a8:4e:65:bc:59:f7:92:5e:
2d:0e:53:2a:4f:31:11:eb:ef:bf:81:5f:55:a5:ec:22:6d:c8:
63:b4:2c:96:75:9b:12:5d:f9:3e:92:e3:99:95:ee:fc:77:ee:
ad:90:4f:d9:6d:4a:ca:19:b6:0d:21:4e:e0:bd:6b:96:6c:d9:
9a:5c:b2:e9:0b:c3:bd:e6:1a:3d:b2:cd:58:49:86:59:c0:a5:
14:d4:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:49 2025 by rpki-client