Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EE5EF82C97611EFB06606B1762E951A.roa
File: 9EE5EF82C97611EFB06606B1762E951A.roa (raw, json)
Hash identifier: KVj9bQaz/PyeBA3NXJ8RHaZc8S8Qt3Q3xsi0XX7EkiQ=
Subject key identifier: EB:6C:AB:36:80:BB:FB:41:ED:77:19:53:06:4D:6E:26:C3:02:4E:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EE5EF82C97611EFB06606B1762E951A.roa
Signing time: Fri 03 Jan 2025 02:01:18 +0000
ROA not before: Fri 03 Jan 2025 02:01:14 +0000
ROA not after: Mon 13 Dec 2027 02:01:14 +0000
asID: 17561
IP address blocks: 156.227.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62699 (0xf4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:01:14 2025 GMT
Not After : Dec 13 02:01:14 2027 GMT
Subject: CN=677744ee-0900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:6c:a5:b6:91:77:29:2e:39:b2:9d:e8:b5:
fd:50:ad:21:10:a4:ac:c2:b1:fe:4d:2c:54:44:43:
4d:ac:8a:67:7f:2f:56:15:98:15:67:40:60:99:80:
e4:d7:51:40:11:ca:47:13:59:43:00:d7:42:a2:da:
c6:5b:9b:ca:50:b6:1b:22:c4:0a:b4:7a:75:e0:e3:
57:fe:24:9d:69:a5:af:07:33:ae:8d:0c:72:9d:93:
2d:7d:61:7d:eb:23:94:de:c4:f8:d4:2e:4c:65:36:
ab:3c:b1:79:89:20:3a:42:73:a2:94:3e:3c:01:dd:
a0:e3:72:f7:48:bc:79:db:03:12:08:65:5b:75:d3:
73:0b:10:74:a3:d9:d7:70:b8:d1:35:e2:1d:1c:9c:
0a:33:cf:39:60:fd:19:84:4c:d1:98:c9:b6:7f:66:
9f:96:37:92:5c:c9:e9:82:3f:3d:3b:3d:25:ba:39:
00:d1:bd:a5:47:1a:dc:dd:3a:6e:86:0c:f1:07:9d:
ae:7a:48:b9:ba:75:d2:eb:0f:2a:a2:36:6a:0f:16:
6b:e0:8e:3d:cf:7f:82:c8:f3:d5:98:a8:d6:53:44:
5c:e3:51:73:11:47:6a:ec:92:18:b3:d3:88:d4:0f:
03:f8:76:45:f7:c2:ec:f7:64:ee:d7:09:c4:bd:47:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6C:AB:36:80:BB:FB:41:ED:77:19:53:06:4D:6E:26:C3:02:4E:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EE5EF82C97611EFB06606B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2d:dd:71:2c:1a:55:12:2e:59:65:12:2e:15:74:e6:42:a5:
15:05:c1:4c:13:a4:1f:61:1b:5f:e5:47:77:46:57:3e:78:f5:
a8:a7:85:f9:d3:60:b0:91:e7:ec:3b:8f:e5:9f:be:52:bf:d3:
8f:fe:1b:b3:4d:db:9c:c4:78:17:4d:6d:ec:ae:52:53:75:ce:
0e:e9:30:e5:f8:17:49:af:b0:88:5d:08:5c:ea:4f:34:fc:88:
da:ac:b8:d0:57:8b:98:03:b1:00:9d:fa:04:ed:b2:e2:45:32:
21:b7:3c:b6:9c:aa:3b:01:1c:98:44:1a:79:63:11:c3:ae:b3:
bd:df:c4:8f:b4:4b:27:b0:2e:7e:c1:65:1e:11:11:31:f5:9c:
42:5d:87:05:76:21:d9:8f:94:86:0c:5a:aa:b8:15:90:56:6e:
4e:f3:6e:3d:c4:15:cf:f1:80:2a:08:6a:91:16:14:d1:5e:04:
53:29:a2:8e:20:c0:10:b0:0d:96:8a:8d:e9:f1:19:29:52:36:
87:7a:22:8c:4e:e7:7a:94:4f:d9:4f:57:cc:35:68:43:88:b4:
27:3f:ae:b5:0c:6f:96:1c:b3:4a:74:5d:a7:a7:e8:d1:e8:10:
55:c9:74:a3:e8:5f:89:e9:ce:eb:08:75:5d:50:31:e0:13:e0:
e4:62:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:46 2025 by rpki-client