Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5CDBA6CC32411EFAD3EB772762E951A.roa
File: A5CDBA6CC32411EFAD3EB772762E951A.roa (raw, json)
Hash identifier: XeC1TsqPIjKMa3HgVAjkpGlyY7K/SXtgWCgJQSEqXVQ=
Subject key identifier: 74:6D:C0:0B:BB:99:77:22:A3:02:1B:2E:59:02:63:4B:93:D3:24:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5CDBA6CC32411EFAD3EB772762E951A.roa
Signing time: Thu 26 Dec 2024 00:59:24 +0000
ROA not before: Thu 26 Dec 2024 00:00:20 +0000
ROA not after: Wed 10 Dec 2025 00:00:20 +0000
asID: 984
IP address blocks: 156.228.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60011 (0xea6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:20 2024 GMT
Not After : Dec 10 00:00:20 2025 GMT
Subject: CN=676caa6c-892f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:ea:e4:44:63:5f:41:4f:7c:43:f8:5c:ae:
44:4d:39:15:ea:93:4e:4b:09:bc:ea:7d:03:01:59:
f4:30:0c:a1:26:ae:1f:7f:54:08:69:a2:8c:3d:04:
e7:4b:3a:e9:2e:3a:71:67:92:70:de:45:2d:6c:50:
56:b5:2a:0c:e2:db:6e:7e:72:a2:86:91:25:21:fa:
16:9b:37:99:1e:d2:7c:0a:fb:16:a6:6b:97:ae:8c:
ff:e8:cb:87:66:1f:1c:fe:20:f0:10:bd:8f:e2:b4:
2b:cc:bc:f0:3a:55:21:07:c8:78:1f:ac:2c:ef:7e:
19:15:fd:34:ea:e5:aa:4a:65:98:f8:51:4c:ba:e4:
c4:74:c0:aa:40:55:52:0e:23:57:c3:bb:ba:af:59:
0f:78:80:c0:30:d4:ab:26:bb:ed:78:0f:30:32:3d:
78:c6:51:e2:8f:87:77:2d:95:74:50:9b:d3:ac:c7:
7d:20:ab:e1:86:6c:9b:54:17:ac:a5:44:ca:d6:e2:
02:a3:2a:9a:6a:eb:35:dc:c3:4d:7d:f0:46:e8:a7:
c3:56:91:01:af:7e:89:e3:b3:a2:62:dc:8a:87:15:
c0:d9:62:58:73:58:e1:5f:ed:c8:3e:cf:24:86:27:
00:ef:36:a7:55:3f:1f:f8:bf:93:5a:04:e1:5d:f3:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6D:C0:0B:BB:99:77:22:A3:02:1B:2E:59:02:63:4B:93:D3:24:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5CDBA6CC32411EFAD3EB772762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.248.0/24
Signature Algorithm: sha256WithRSAEncryption
58:37:3d:ad:de:8a:12:0c:aa:cf:0d:a6:b2:78:4d:d0:7c:a4:
ad:66:af:da:9d:22:71:7d:a1:c6:49:6c:2f:bd:c6:73:af:9a:
1e:62:85:92:24:00:61:1a:e5:19:cf:12:00:a2:b1:5f:3c:7a:
30:c0:d8:72:dc:ff:12:65:f3:cb:c7:1f:0b:b4:d2:ec:94:70:
59:36:cb:d1:78:e6:48:2b:38:4c:6d:44:4b:f0:43:2b:92:3d:
af:ad:e5:ef:f6:97:8f:ab:c3:a8:04:c4:89:4d:f5:a5:fe:59:
36:c4:49:ad:3d:e0:22:5c:4a:9e:29:53:cc:e8:f0:a7:3d:6e:
81:fc:a7:d5:c3:70:fd:1c:58:1b:ba:5a:44:5b:3b:0b:de:c2:
70:4a:c5:93:ff:18:4c:00:86:8d:dd:e7:44:ac:2c:69:c0:9f:
2b:78:23:21:ad:88:b1:d2:e5:5f:09:77:6d:ac:e1:11:de:ec:
40:02:2d:b5:e8:25:f3:f3:5e:f0:55:93:98:d5:f5:67:05:b0:
22:8c:f7:69:0a:de:b3:6b:ff:39:27:57:03:a8:f6:5d:cf:36:
0b:35:28:64:d2:20:3b:f3:0c:e3:d2:c8:f4:70:8b:52:ef:c5:
b3:f1:63:f6:34:74:2d:16:fe:d0:b4:37:7f:12:30:fb:02:7d:
65:18:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:45 2025 by rpki-client