Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A46862EAC97211EFA01CD293762E951A.roa
File: A46862EAC97211EFA01CD293762E951A.roa (raw, json)
Hash identifier: np7oIlBlfm4Q68lbDA1sQglUDmGQHIKaNujDZGiD1Pk=
Subject key identifier: FC:B4:B6:83:8A:16:C6:AC:43:35:83:91:A9:8A:B4:E5:A8:D8:4E:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A46862EAC97211EFA01CD293762E951A.roa
Signing time: Fri 03 Jan 2025 01:32:49 +0000
ROA not before: Fri 03 Jan 2025 01:32:46 +0000
ROA not after: Mon 13 Dec 2027 01:32:46 +0000
asID: 17561
IP address blocks: 156.227.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62661 (0xf4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 01:32:46 2025 GMT
Not After : Dec 13 01:32:46 2027 GMT
Subject: CN=67773e41-03a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:19:29:b1:b4:9a:ef:aa:98:2c:3a:e4:b5:
62:4c:6b:61:58:a8:08:1f:24:70:09:62:83:87:e3:
0b:86:74:1f:06:98:97:d6:e1:a3:9f:45:80:04:73:
66:7a:3f:4f:06:53:69:54:d9:e0:e5:66:b5:30:aa:
49:ec:8e:1f:09:79:6b:c9:6d:7a:ea:21:c7:38:cc:
26:5b:38:7d:b5:33:f3:3d:17:49:4d:46:6c:f4:80:
bb:c1:2c:81:96:eb:f2:65:bb:71:b2:ca:e1:f1:e3:
75:74:2c:72:cd:e4:72:a7:ed:07:0d:5f:8a:8d:06:
79:bc:03:e5:c3:e7:01:09:e1:89:73:28:8b:e4:0b:
19:3d:66:e5:da:0a:46:b8:06:b9:58:76:43:55:70:
d0:51:09:01:b6:e0:63:51:45:38:22:26:e8:87:e1:
a1:58:c7:e1:ec:21:ca:0e:ac:d2:eb:7e:73:2d:f4:
40:41:9b:ff:ff:8e:01:ee:a4:e4:6b:e5:b7:ca:2c:
2e:35:80:0a:d8:5d:2a:5a:e4:91:c6:51:10:8b:3a:
b6:54:e6:c7:e4:e1:a4:98:ea:ce:bf:76:c6:2a:0f:
be:f7:e9:97:82:40:78:f4:45:4b:80:50:54:bb:97:
87:90:d0:d7:2e:d1:19:4a:87:6a:ed:ba:b4:2d:ba:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B4:B6:83:8A:16:C6:AC:43:35:83:91:A9:8A:B4:E5:A8:D8:4E:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A46862EAC97211EFA01CD293762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.84.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3a:0b:3a:c2:b5:be:9b:1d:32:79:f3:5b:85:5f:b0:78:18:
c2:0d:e3:7c:6a:1d:f2:65:13:64:8b:7b:45:59:32:f2:17:09:
27:c7:a0:e3:80:70:e7:5e:f7:1c:9a:9b:19:86:b7:f5:47:c8:
80:6d:99:a0:1c:6d:2f:7c:1b:d9:72:90:0a:08:98:45:43:08:
76:a8:9a:9a:1c:be:7e:50:87:57:6e:bb:c9:e7:66:5a:ae:5c:
11:ba:16:86:69:64:94:56:6c:5f:44:67:08:6c:fb:f0:67:3c:
85:8c:d1:76:1b:92:5a:bf:03:2b:59:7f:c6:ad:bf:b3:d0:b5:
86:f0:14:a5:9f:16:be:31:e9:c5:f8:bb:91:f2:e9:30:2f:8a:
eb:94:c2:ec:95:d4:51:31:cb:43:52:3f:db:2e:bb:96:c6:4c:
49:c0:a6:94:97:04:67:df:42:06:78:96:31:cf:1d:84:86:57:
dc:8e:9d:a2:61:f2:29:62:d7:11:28:05:e9:1f:29:1c:b2:32:
8e:4e:eb:30:47:65:94:06:93:14:10:8f:07:20:9a:90:8a:26:
92:23:89:aa:a5:0d:63:eb:49:0c:be:54:41:ce:9e:a5:a6:31:
bb:d8:72:42:58:95:8f:e5:89:b5:0c:12:30:0d:3b:df:13:15:
6e:0d:92:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:11 2025 by rpki-client