Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B077A06CC8D11EF99E40A41762E951A.roa
File: 9B077A06CC8D11EF99E40A41762E951A.roa (raw, json)
Hash identifier: sQ2m6dUSgdKlMnF6FTNz/8V7Ha7VwIFU4KYS8H6v7TI=
Subject key identifier: D4:93:53:04:86:5A:B1:6E:25:E3:18:C7:A2:85:A5:3E:21:9D:DA:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B077A06CC8D11EF99E40A41762E951A.roa
Signing time: Tue 07 Jan 2025 00:23:24 +0000
ROA not before: Tue 07 Jan 2025 00:00:19 +0000
ROA not after: Mon 13 Dec 2027 00:00:19 +0000
asID: 17561
IP address blocks: 156.226.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63731 (0xf8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 00:00:19 2025 GMT
Not After : Dec 13 00:00:19 2027 GMT
Subject: CN=677c73fb-334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:c1:ff:01:e4:36:24:2b:43:0c:49:93:cc:
30:ed:c9:76:bc:e3:fc:cc:9a:e7:1b:d4:e4:0b:2b:
66:6e:2d:8e:1e:31:1e:93:b3:ec:a7:2b:fc:39:4f:
a4:9b:98:c6:e7:a6:86:ff:7d:78:2d:f5:39:27:8f:
5b:26:e8:8a:38:96:15:e9:7e:a7:13:30:a1:04:48:
e4:3f:a0:9f:2d:a3:84:9c:86:17:f6:40:ef:2f:ce:
35:e7:c4:08:4c:08:55:1a:1d:74:67:10:cd:55:af:
93:4e:a7:27:d8:17:66:21:b3:ef:7d:78:49:e8:3d:
ca:f7:cc:f1:9a:7d:2c:2b:fc:ff:ee:8f:c2:0f:e9:
b7:79:c3:91:62:75:0c:0f:05:06:8c:58:fe:f1:69:
b9:12:e2:8e:2c:72:be:d0:20:db:6a:f5:99:f8:b5:
d3:bb:49:b5:a1:09:01:85:63:4d:ed:50:eb:22:e8:
a4:10:ef:a4:f1:ec:c1:64:ed:de:68:00:5d:87:0e:
6a:15:96:7c:a5:a0:40:85:f7:93:16:98:2c:4b:20:
fc:d5:c6:f9:d1:22:29:68:d8:55:77:83:8d:15:31:
9f:7b:7c:28:f4:29:69:2b:90:49:70:0a:67:92:65:
c9:9f:89:ec:3a:b6:94:65:8e:8c:e1:2f:33:d1:dc:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:93:53:04:86:5A:B1:6E:25:E3:18:C7:A2:85:A5:3E:21:9D:DA:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B077A06CC8D11EF99E40A41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:85:48:3f:81:f1:a9:11:6a:88:38:f5:bc:d4:80:fb:d8:8d:
02:27:1f:27:fd:4b:ca:60:d4:af:7e:82:6d:d0:7c:52:1a:b0:
e9:e4:6c:c9:c8:3e:13:20:4b:6c:f3:0f:80:e7:46:d7:a9:59:
5c:25:66:a0:3d:7e:76:ef:2c:eb:68:0b:00:75:5a:56:35:90:
73:e3:67:96:fd:f5:e3:fa:bc:f2:9c:9b:de:a0:62:83:31:5b:
be:71:95:12:ba:b6:ac:97:69:86:2c:5b:d2:fd:de:e2:8a:50:
8d:59:25:3d:e0:3b:76:5f:49:ec:54:3b:11:17:2c:9a:98:13:
a7:47:36:a3:6f:f2:95:1d:5d:e3:f7:32:72:ad:42:93:15:5c:
b3:9d:0b:7c:69:04:76:36:6e:89:31:dc:3a:9a:70:5f:43:70:
33:b0:cc:5b:b3:51:b0:41:44:ca:e3:c4:b5:3b:70:ca:87:c6:
d9:83:e7:d9:ec:dd:cb:e5:09:7d:42:09:be:2c:e4:37:38:b5:
bf:4c:42:4e:69:77:6f:e7:64:42:49:a2:5c:e7:bc:4c:50:ed:
b3:fb:f6:cb:d3:47:59:80:bb:91:41:9b:fa:69:66:22:fd:6e:
b8:25:86:fa:ac:10:d4:bf:4a:f3:14:75:42:16:a2:6d:71:28:
73:0f:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:54 2025 by rpki-client