Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7F37882C34B11EFA7C5C27E762E951A.roa
File: A7F37882C34B11EFA7C5C27E762E951A.roa (raw, json)
Hash identifier: NJH4SbENBVhY/L9biW/hgqdaa9cpBMFAQ+4Vbo09WfA=
Subject key identifier: 71:97:90:90:74:A7:E3:31:9C:E0:01:99:88:4A:A8:4E:19:75:C2:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7F37882C34B11EFA7C5C27E762E951A.roa
Signing time: Thu 26 Dec 2024 05:38:38 +0000
ROA not before: Thu 26 Dec 2024 05:38:34 +0000
ROA not after: Wed 10 Dec 2025 05:38:34 +0000
asID: 984
IP address blocks: 156.245.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60485 (0xec45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 05:38:34 2024 GMT
Not After : Dec 10 05:38:34 2025 GMT
Subject: CN=676cebde-2676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:8e:04:20:25:94:49:7d:69:0c:76:10:85:
97:96:05:a7:4f:52:fc:37:4f:b1:54:ed:17:1b:5a:
fc:c5:99:8f:55:27:cd:59:cb:ef:1c:4f:58:9c:71:
7f:cb:22:83:63:9f:1b:b9:4d:1b:3f:f0:d5:e7:df:
b8:75:e6:86:6c:48:4f:fb:fe:68:96:f8:48:f8:aa:
88:c5:fa:84:11:eb:b3:bf:06:af:da:2e:4f:93:e3:
a3:18:60:ac:1b:06:ba:5f:a7:7e:ad:60:8f:ae:3e:
d4:27:5f:bd:1e:23:d2:7d:29:db:37:6a:15:d8:a8:
e4:fe:49:11:6f:89:97:0d:1e:14:a0:a4:e8:9a:e7:
38:b7:fb:04:f4:6b:0c:8f:09:3a:7e:e3:5a:93:27:
24:a1:79:6f:c0:83:af:d4:90:03:3b:f0:86:9f:69:
01:e2:ed:5b:3b:c6:71:36:e7:59:0c:50:66:88:a0:
8d:c2:94:84:b3:7a:a9:ad:bd:f6:94:52:40:27:9d:
ec:a4:d5:8e:8c:1a:7f:9c:b1:43:18:1f:37:5b:df:
bd:68:f6:a0:e0:ce:cf:fd:b1:4b:a9:80:66:8f:a5:
fc:dd:48:9c:9d:0b:32:b2:03:a9:86:d7:93:4a:57:
4c:47:4b:22:4e:a5:09:c2:1f:77:7b:ae:2e:f3:6b:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:97:90:90:74:A7:E3:31:9C:E0:01:99:88:4A:A8:4E:19:75:C2:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7F37882C34B11EFA7C5C27E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.229.0/24
Signature Algorithm: sha256WithRSAEncryption
16:eb:25:69:68:9d:12:84:94:ad:1b:3c:57:2a:b2:3c:93:6b:
40:9f:25:3e:f8:15:df:6f:03:88:d6:a4:a8:9e:ef:23:ff:e3:
39:8e:1c:e6:53:64:1a:b0:e7:93:e4:15:cb:95:85:bf:7b:36:
2b:f6:79:98:9b:a1:e2:d4:87:f3:1f:51:91:bd:70:d7:b9:62:
ed:b8:f2:08:3e:c6:ff:ce:b8:cd:93:35:9f:be:cc:ee:c5:9e:
27:57:77:dc:c8:46:cd:53:8f:e4:3b:60:6d:f4:5a:0b:38:f8:
2a:25:e4:4a:7b:e5:9a:ef:d4:7f:ef:df:ef:f1:e4:15:af:c4:
be:10:91:e1:65:af:33:a6:39:76:3c:94:f9:33:aa:76:84:c6:
24:17:b2:ce:0a:fe:da:0e:a4:9b:57:d6:9b:d1:fc:e6:87:58:
06:ed:90:e5:8a:98:da:b5:7e:9d:94:c4:51:63:77:21:b8:0d:
d4:22:b7:5a:e9:e4:58:73:dd:31:84:03:a5:19:1a:c6:de:c0:
b0:68:50:dc:21:6d:e3:d9:4c:ab:8e:7f:04:4d:98:0e:9a:8b:
9f:84:36:17:3f:9b:28:9b:42:bd:57:69:c2:ac:b7:e0:74:78:
c8:47:7c:6a:72:4c:48:51:19:94:12:b8:a4:3f:2a:48:96:25:
e5:b7:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:43 2025 by rpki-client