Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0A9E3A2CC9911EF8E965494762E951A.roa
File: A0A9E3A2CC9911EF8E965494762E951A.roa (raw, json)
Hash identifier: Kysttkxf/vPKpywWV7+yYaAlxG2WZaevSQoMl+NMFO8=
Subject key identifier: 8F:C7:3D:8B:CB:3F:77:56:FA:BE:05:AA:26:36:E4:D7:00:CD:D1:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F956
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0A9E3A2CC9911EF8E965494762E951A.roa
Signing time: Tue 07 Jan 2025 01:49:27 +0000
ROA not before: Tue 07 Jan 2025 01:49:23 +0000
ROA not after: Mon 13 Dec 2027 01:49:23 +0000
asID: 17561
IP address blocks: 156.227.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63830 (0xf956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 01:49:23 2025 GMT
Not After : Dec 13 01:49:23 2027 GMT
Subject: CN=677c8827-8459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:03:8f:ab:2b:4c:b5:72:60:17:d0:b2:12:
71:78:21:fb:9f:4f:c1:8b:67:61:5a:a9:d8:89:d8:
8e:11:0e:1f:f6:8e:93:d5:75:97:6f:ef:03:f9:1f:
60:ee:56:bd:a5:23:1c:82:fa:ff:8e:7f:a2:94:df:
78:55:45:68:86:39:ef:1b:4a:4e:54:a2:9f:94:b3:
bc:86:4f:6e:40:ad:b8:69:0a:ea:3f:62:92:16:4c:
df:74:44:4f:11:39:b3:7d:7a:df:81:f0:79:15:79:
02:0c:4c:fb:2c:bb:ce:c2:de:1d:71:b9:f8:e0:06:
79:83:f3:a1:16:e3:2e:3d:d1:ef:6a:e7:4b:b2:4d:
1c:11:94:85:ad:9f:c8:74:64:e6:71:2d:dd:cc:93:
37:a2:2d:28:0d:b5:3f:40:cc:e8:7b:dc:4b:e5:ce:
e6:fa:e5:24:10:00:61:52:62:1b:db:72:bb:7c:ac:
d0:53:7d:86:40:e6:54:30:ff:02:cc:ba:b3:f6:24:
05:70:1b:7e:ca:88:fe:1b:40:2a:ec:d0:57:cd:5f:
37:ce:d9:47:2e:50:05:06:16:85:b3:98:92:99:25:
a3:02:4d:59:0a:67:8e:43:6c:46:78:58:36:16:50:
2b:0b:35:d1:42:db:84:69:f7:74:d8:24:f8:d4:1b:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C7:3D:8B:CB:3F:77:56:FA:BE:05:AA:26:36:E4:D7:00:CD:D1:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0A9E3A2CC9911EF8E965494762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.97.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2b:fe:37:9e:ff:cc:59:38:c4:57:d3:df:75:65:c0:64:82:
e1:d5:f6:7a:24:af:3d:87:e5:f2:88:35:b0:58:2b:5e:ff:d7:
10:51:62:81:6a:22:fd:c1:c0:96:b5:4b:e4:5d:63:75:79:e8:
ac:a1:2b:c6:db:a8:14:06:e1:46:5f:3a:92:a3:ea:91:83:a0:
e9:00:5b:8c:0a:83:25:de:9c:eb:11:cb:8b:8b:a1:aa:57:3d:
86:c8:be:b3:6b:e4:38:15:0f:e0:b7:61:52:4e:a3:35:c2:b2:
cf:03:e9:6f:3b:70:ab:f1:a7:a4:53:78:0f:d4:78:e8:63:0c:
5d:26:59:27:69:f3:dd:fa:6d:ef:02:3f:ad:b5:fd:1a:61:6f:
04:89:36:64:19:e7:68:b8:85:09:c5:b1:20:c1:f7:18:06:c5:
9a:b1:50:1e:04:79:0c:58:65:0c:26:e2:58:69:c9:3b:8a:78:
b6:9e:72:4b:ab:77:e4:f8:d5:64:04:8d:fa:69:cf:32:22:60:
5e:77:db:47:0a:82:10:b8:ba:ba:e2:50:af:ca:73:95:fc:61:
7f:a3:78:bf:8a:9e:d3:95:2b:80:e5:73:81:08:b5:52:53:3b:
c7:97:e4:fc:6a:07:57:d9:a8:37:31:d2:4e:7d:b3:9a:31:bb:
96:8c:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:38 2025 by rpki-client