Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA30CF38CC9611EF9655F37E762E951A.roa
File: AA30CF38CC9611EF9655F37E762E951A.roa (raw, json)
Hash identifier: xaSg8fawY5j19VxOvLsTVGX0SE8ZXAWj/RgmcU1C4QE=
Subject key identifier: EB:19:27:74:39:1E:30:45:56:DB:09:38:8D:9F:0E:F8:91:82:B7:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F93C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA30CF38CC9611EF9655F37E762E951A.roa
Signing time: Tue 07 Jan 2025 01:28:14 +0000
ROA not before: Tue 07 Jan 2025 01:28:11 +0000
ROA not after: Mon 13 Dec 2027 01:28:11 +0000
asID: 17561
IP address blocks: 156.227.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63804 (0xf93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 01:28:11 2025 GMT
Not After : Dec 13 01:28:11 2027 GMT
Subject: CN=677c832e-7a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:d2:de:71:07:89:ed:4b:57:03:5a:b6:b7:
17:b0:eb:c5:f0:40:cb:80:12:2a:6c:ab:f9:8e:77:
8d:83:f2:bc:78:8d:57:df:77:f1:d8:b8:47:be:6e:
2f:31:75:b5:93:fe:1f:6d:13:b7:ed:6e:a0:a5:ff:
2f:f3:d3:21:cf:cb:85:99:fd:7a:c7:75:67:88:fe:
17:a8:a6:82:b6:d9:3a:50:0a:7e:dd:73:be:d6:cc:
df:ea:36:8f:e6:98:02:9d:70:ac:3f:aa:7a:1e:55:
90:44:de:96:17:1f:36:9b:0c:6f:bd:9d:29:4e:5b:
f9:e8:92:96:9f:c6:72:b3:0a:d3:26:c0:cd:1d:f8:
3f:45:50:e0:2c:95:5b:43:3a:ce:4c:03:dc:f3:ca:
a5:0d:5e:3d:f9:66:24:f2:4c:42:ce:c3:fe:8b:6b:
14:fe:0e:b7:4f:51:7b:2d:a6:7c:3c:fa:47:4f:be:
0a:5f:35:5e:0c:5b:83:ec:6f:ec:cc:10:48:84:3b:
6d:a3:ee:51:1a:46:dd:6e:14:07:81:a3:96:5c:70:
17:30:51:93:b0:5a:3b:f3:ff:70:1e:ed:d3:96:c1:
d6:20:f3:b0:ba:40:e0:16:d2:f9:ce:3c:cb:e6:f1:
0a:19:cc:0c:2e:47:5a:15:8b:27:05:c3:3f:14:1d:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:19:27:74:39:1E:30:45:56:DB:09:38:8D:9F:0E:F8:91:82:B7:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA30CF38CC9611EF9655F37E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0e:7d:10:ce:81:5a:85:2f:18:11:f3:4d:e6:9a:72:d1:fc:
d1:18:e6:67:fd:49:22:4a:3e:68:3e:1f:06:63:2f:0d:a1:c3:
aa:68:3a:a1:7a:67:b2:71:8c:9b:d9:4b:d3:bc:54:46:e7:3b:
bc:1e:ce:30:a1:2c:8f:b0:bf:2d:a5:c2:35:f8:f7:bd:ce:5f:
55:ca:6f:74:b8:c0:e6:b2:11:6b:19:21:c8:f3:c0:4d:ec:b0:
f9:cf:77:c4:d5:0b:37:e1:1b:c1:a7:62:33:62:b0:cf:38:e1:
b3:aa:c2:43:30:12:d6:9c:c5:62:01:0f:85:c6:77:31:37:da:
b2:dc:c8:4d:fa:c2:01:d2:52:06:d8:b7:46:eb:88:88:5d:42:
57:07:67:31:b9:a9:b0:de:c9:24:82:5b:03:c6:77:9a:44:94:
83:d3:01:3e:f0:e8:b3:e6:43:c4:5d:52:0e:57:44:76:65:65:
53:95:49:2a:b7:1c:45:fd:04:41:f5:48:cc:fe:9c:92:9a:20:
c9:2c:8d:5e:a6:41:17:bb:70:34:f2:56:f0:4c:2d:98:fd:c2:
29:99:1d:96:56:e8:aa:df:e8:ac:b1:9c:a1:d1:b1:26:af:bc:
35:9d:d2:cc:e7:6d:8b:6c:4d:bf:d1:4e:7e:5f:cf:99:84:11:
43:cf:50:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:12 2025 by rpki-client