Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B36884ECD8411EFAEBF4782762E951A.roa
File: 9B36884ECD8411EFAEBF4782762E951A.roa (raw, json)
Hash identifier: sGu2+YXgnkuh2/2eOi2AoiRLajPXqHxG/I6AjB/B9U4=
Subject key identifier: BD:F5:59:25:E8:38:FD:10:8B:02:A1:28:17:05:A1:E0:52:D8:9B:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01001F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B36884ECD8411EFAEBF4782762E951A.roa
Signing time: Wed 08 Jan 2025 05:51:30 +0000
ROA not before: Wed 08 Jan 2025 05:51:26 +0000
ROA not after: Sat 13 Dec 2025 05:51:26 +0000
asID: 984
IP address blocks: 156.252.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65567 (0x1001f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 05:51:26 2025 GMT
Not After : Dec 13 05:51:26 2025 GMT
Subject: CN=677e1261-2956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:39:3d:03:da:43:5b:d2:81:a0:20:51:d0:
68:e3:78:e4:6e:3a:8f:a9:e2:51:54:82:b8:08:50:
5f:a3:88:dd:99:e0:13:f3:61:92:9b:af:61:4d:4f:
e6:3b:9b:3c:95:e6:22:de:56:32:02:2e:9a:98:81:
66:3d:f8:4f:b2:67:06:00:b9:f0:12:86:fa:69:6a:
48:d1:b2:7b:b3:45:22:ff:f7:36:6c:2d:ae:d8:2d:
fb:2b:55:73:54:01:ff:81:18:40:e8:af:bd:f7:f2:
35:73:c5:73:74:c9:9a:6e:f3:39:8c:aa:62:cb:d4:
cb:69:56:93:19:30:98:be:a0:a2:7f:db:be:9b:3a:
2a:4e:c5:8f:42:f9:cb:b0:f9:2a:a5:47:71:e1:99:
ba:c9:08:ab:f4:a0:70:6a:70:09:35:7c:0a:18:8f:
66:96:06:f2:bc:22:11:e2:b7:ce:b3:80:b1:28:bc:
cc:26:d0:00:bc:f7:c4:2b:34:b8:15:66:0d:15:e3:
5e:81:ec:cc:3e:5a:fe:19:0b:92:8c:f2:59:43:e0:
74:73:1d:0c:1d:7d:fe:89:1b:00:1e:07:6f:3f:b3:
49:da:2d:b7:6e:e7:77:3d:ed:b1:9f:51:4f:d1:08:
ee:40:ad:65:09:ca:1b:6d:03:23:8c:05:51:27:65:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F5:59:25:E8:38:FD:10:8B:02:A1:28:17:05:A1:E0:52:D8:9B:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B36884ECD8411EFAEBF4782762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.27.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d4:eb:63:59:c0:c9:e5:fb:36:c2:99:5a:13:a9:de:b1:0b:
79:bf:d4:bd:9f:9a:f5:a7:08:d0:76:3e:6a:f7:3e:b4:e8:42:
a9:cc:5a:e1:ef:cd:0a:54:92:7d:a6:d5:ae:1e:3b:9f:fb:3e:
7b:76:e9:9b:32:b0:2c:6a:a9:a7:26:77:78:da:f9:64:18:f4:
9e:7d:11:3e:31:78:39:06:0a:d6:a9:49:f1:fa:c5:1a:74:4c:
3d:f1:36:ad:0f:ff:88:6e:37:a4:dc:c7:7e:93:03:bb:49:54:
63:d6:82:f2:79:70:05:98:17:36:40:cf:2b:41:70:1a:7d:77:
ce:2d:49:3c:3f:ea:83:b3:f6:f2:0e:8d:89:3b:a6:6a:d8:bf:
02:fb:38:5d:c6:78:20:4e:6e:25:f2:23:00:c7:c0:2f:12:da:
24:57:7a:56:6a:c9:b5:2a:f8:83:01:21:7e:7e:9e:9c:2b:0e:
98:79:9d:c4:72:ed:09:21:4f:b3:1b:35:1b:41:92:a8:f9:67:
1f:cc:39:5f:75:36:ea:42:9a:a5:eb:c0:66:10:ef:9d:02:2b:
f2:dc:7d:7d:6d:4b:45:9d:c2:b9:2c:e9:7e:55:8b:52:e6:91:
9e:23:55:eb:16:0f:9a:15:9a:77:a7:52:a2:57:28:e4:e8:e7:
0e:98:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:31 2025 by rpki-client