Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98FEBBBCC96211EF8305A7A9762E951A.roa
File: 98FEBBBCC96211EF8305A7A9762E951A.roa (raw, json)
Hash identifier: t2s80TFl4nXdhRorQdjQG/ZQlpm4ywOtzzMgp3KKuHI=
Subject key identifier: 8A:11:7C:EB:AE:23:90:33:11:F4:AA:AA:34:18:7F:23:C1:40:1A:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F46E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98FEBBBCC96211EF8305A7A9762E951A.roa
Signing time: Thu 02 Jan 2025 23:37:58 +0000
ROA not before: Thu 02 Jan 2025 23:37:55 +0000
ROA not after: Mon 13 Dec 2027 23:37:55 +0000
asID: 17561
IP address blocks: 156.226.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62574 (0xf46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 23:37:55 2025 GMT
Not After : Dec 13 23:37:55 2027 GMT
Subject: CN=67772356-46fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:f7:54:cc:06:bb:23:a6:76:ab:f0:c0:bf:
56:5f:87:dd:96:44:43:e2:bd:ef:a6:43:41:6a:5a:
a9:52:d4:a3:ad:8a:63:83:c9:64:23:f9:68:19:f8:
42:fb:7c:ba:c8:1c:17:74:65:b0:5a:06:27:9a:58:
7c:b0:e3:6d:2c:b9:3b:bc:b2:e1:2f:08:df:1f:eb:
d2:4b:24:f3:da:d7:7a:54:2f:cc:02:ef:88:0c:18:
7c:66:75:05:7f:29:f2:5a:e5:92:45:72:30:ba:0a:
0b:77:f4:6f:26:fc:31:74:21:8c:33:81:68:19:43:
bd:da:c8:2f:90:c1:02:70:8c:d7:e1:fa:34:9a:88:
f7:10:44:60:97:a0:67:c7:1d:2d:93:69:f2:41:b8:
a1:75:03:9c:37:45:b1:5e:d0:9a:53:99:5f:f3:eb:
f1:83:54:79:6f:66:1b:2a:3a:5b:d4:7b:4b:1c:ae:
2f:5d:02:a5:9e:f2:82:d2:7b:9c:b9:24:1a:90:19:
73:94:94:4e:38:51:f0:f9:a1:b2:c0:ed:3f:c5:88:
ab:82:b9:4c:49:f6:42:13:ee:77:40:24:fd:63:5b:
60:77:08:02:84:05:2a:5b:6e:71:0d:dc:20:45:62:
4a:4b:a0:c7:a7:6f:51:c0:8a:c0:5d:91:ac:f2:a7:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:7C:EB:AE:23:90:33:11:F4:AA:AA:34:18:7F:23:C1:40:1A:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98FEBBBCC96211EF8305A7A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.233.0/24
Signature Algorithm: sha256WithRSAEncryption
24:69:01:ef:7a:41:31:69:07:d8:9c:27:d0:32:56:75:ef:71:
21:64:c3:fa:75:d7:10:8f:88:0f:5c:b9:d5:87:91:b2:1f:2b:
1b:56:88:1e:aa:df:98:fa:23:68:58:b6:ba:db:11:e9:30:e3:
17:18:f8:35:c2:60:d7:37:1e:b6:76:92:f4:8e:ff:0d:16:d7:
80:91:3b:bb:bd:c5:58:8f:a7:fb:18:17:20:13:87:16:ca:f4:
58:63:44:40:06:f6:6d:4e:0b:19:9e:2a:d7:a5:ec:52:1a:b8:
47:c0:82:c8:c6:d6:5d:9c:6c:66:d8:b0:49:c0:aa:19:56:77:
1a:6c:c8:a8:ea:18:f2:80:49:d6:96:93:85:ba:57:5d:20:69:
42:5a:f5:d0:ea:cc:5f:8d:57:3f:4c:4d:34:d9:37:f6:bc:7a:
2f:91:6a:5b:4c:bf:6d:fe:a9:23:7b:34:8f:49:d8:0a:95:03:
68:d3:82:92:29:8b:25:2a:93:57:f6:78:d4:df:94:d6:30:6e:
4e:6c:56:5d:d7:ad:08:36:66:2d:b4:ff:70:1d:8c:7c:12:1e:
b2:9e:ee:f9:21:7a:d4:61:c2:5b:9a:75:8b:00:54:5f:13:f5:
f8:4e:f1:eb:19:70:85:94:e8:0a:d2:1c:99:00:48:29:20:81:
67:01:c1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:17 2025 by rpki-client