Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AA510FEC96911EFBD210456762E951A.roa
File: 9AA510FEC96911EFBD210456762E951A.roa (raw, json)
Hash identifier: vRM0kAk3c9iv8WfbCmO+acb5zYQ5aKQj/c2oMGlX5uY=
Subject key identifier: F0:A3:22:25:D6:E0:8A:25:56:F0:97:CF:02:2D:A3:96:B3:99:B6:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F47C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AA510FEC96911EFBD210456762E951A.roa
Signing time: Fri 03 Jan 2025 00:28:08 +0000
ROA not before: Fri 03 Jan 2025 00:00:03 +0000
ROA not after: Sat 13 Dec 2025 00:00:03 +0000
asID: 984
IP address blocks: 156.226.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62588 (0xf47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 00:00:03 2025 GMT
Not After : Dec 13 00:00:03 2025 GMT
Subject: CN=67772f17-0ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:db:39:be:d8:fe:3e:80:dc:68:a9:a2:9d:
d3:1d:c7:f2:a2:cd:dd:ba:bb:8c:26:9f:61:04:ad:
62:42:34:32:58:c9:b7:12:84:ee:c1:2f:27:c9:ef:
05:36:34:d3:18:19:72:1d:4e:fe:77:85:ba:aa:40:
9f:7c:51:5f:bc:e3:77:73:b3:e3:cd:ea:f3:68:95:
47:75:e1:d6:fe:26:e6:ca:2f:96:f7:fe:fb:8d:cc:
d7:d7:f0:06:e6:68:65:28:dc:f1:a7:f2:42:f3:5a:
73:54:55:4f:44:79:79:69:73:58:55:b8:b0:9c:53:
61:94:e9:25:81:9a:cf:a7:bc:b2:57:a4:f2:dd:78:
37:55:20:48:fb:fe:ac:ca:73:64:23:ef:cb:d0:1b:
5a:9a:0c:6c:5a:a3:36:5e:2d:bc:80:e2:ee:2e:5f:
32:11:2f:3b:d7:7f:b8:5a:91:f3:5e:b2:6b:e4:17:
4d:19:c0:6a:cb:5a:b9:fb:4e:bf:42:73:07:a9:84:
fc:eb:93:50:82:4b:84:61:61:7e:5b:e0:f1:72:80:
d0:7e:e5:7f:d1:0a:a8:c5:4d:60:c3:8e:70:06:ef:
74:2e:6f:9f:cc:02:cf:61:a6:21:80:f9:81:9c:6f:
f0:e1:07:dc:48:c9:a9:60:15:6f:36:32:7d:f4:24:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A3:22:25:D6:E0:8A:25:56:F0:97:CF:02:2D:A3:96:B3:99:B6:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AA510FEC96911EFBD210456762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ef:08:40:6e:60:68:1a:02:41:c5:53:c0:ec:3a:5d:dc:1c:
a2:15:7e:b1:91:f9:86:3d:79:2b:89:c4:72:6a:b4:ca:ac:0d:
3a:54:c1:3e:36:3f:bc:54:70:ed:22:dc:25:31:d2:72:38:db:
5d:99:e9:68:af:9e:bc:03:2a:2e:4d:a6:a6:bb:6b:e0:fb:65:
94:1d:06:e1:1b:45:77:e2:f4:db:3b:44:7d:f7:d6:31:8a:15:
55:d7:24:49:31:5b:b2:a0:22:53:dc:a6:4d:99:e1:b8:3f:4f:
71:b7:fb:34:a8:31:e6:fd:11:91:03:e1:31:b5:59:cb:49:cb:
18:01:98:cd:f7:f6:37:6d:f5:2f:66:57:0e:bd:22:a4:c6:62:
bd:87:e8:87:65:6f:33:6b:2d:2e:99:34:c9:87:94:92:56:95:
36:5a:8a:3e:c8:7d:e5:db:9e:9c:82:40:73:a8:74:be:49:ce:
82:88:27:f9:e0:8a:07:dc:a6:33:63:f2:a7:ec:63:bc:b1:c7:
8d:ac:e7:7b:01:d9:3f:be:fc:0e:3d:04:ef:2b:ec:5a:83:20:
79:6e:19:b1:46:a9:1a:89:24:1b:52:97:23:53:11:0f:07:50:
70:79:a8:a4:b2:46:a3:56:00:20:6e:81:6d:eb:3d:00:57:ec:
40:7e:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:31 2025 by rpki-client