Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABE954B4CDCA11EFA19D67BC762E951A.roa
File: ABE954B4CDCA11EFA19D67BC762E951A.roa (raw, json)
Hash identifier: lAfGi2a333WB5G1rJ0KEavMIaaRA/PxpnPR3+TIQeE0=
Subject key identifier: 34:4F:11:6A:02:1E:F5:A6:CD:0D:18:56:42:A7:8D:A5:84:49:67:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABE954B4CDCA11EFA19D67BC762E951A.roa
Signing time: Wed 08 Jan 2025 14:13:02 +0000
ROA not before: Wed 08 Jan 2025 14:12:59 +0000
ROA not after: Fri 26 Dec 2025 14:12:59 +0000
asID: 984
IP address blocks: 156.227.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66002 (0x101d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:12:59 2025 GMT
Not After : Dec 26 14:12:59 2025 GMT
Subject: CN=677e87ee-3961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:42:79:d0:7c:3c:cd:17:68:e0:8e:70:e6:
9b:19:f6:49:ad:8c:49:e0:7b:c0:e7:24:98:36:c3:
88:a0:30:4a:9f:19:a4:b7:41:64:cf:21:a8:45:42:
fa:b3:d5:65:2d:28:da:20:81:18:eb:5d:fa:15:a5:
e0:54:02:77:e0:00:a4:6a:a7:8f:21:9b:ee:b4:c9:
27:97:57:c6:f2:7e:55:43:84:34:0e:8e:c0:21:42:
47:d1:bf:a2:ca:83:5f:7f:13:ac:40:fe:2e:57:20:
86:cc:b6:b2:49:74:4b:27:19:43:f1:47:7a:0b:29:
67:21:36:98:38:24:71:43:12:db:da:34:57:a3:e1:
27:e5:5e:d4:d3:22:3b:f6:2a:c0:1a:9c:c8:81:a5:
9a:28:7d:6b:82:93:46:87:a6:8b:04:55:64:c6:b5:
91:1e:50:31:48:7d:01:00:a4:e7:ec:92:97:b8:7f:
1b:9c:3a:94:6e:7a:5e:54:6d:f8:c8:4a:51:68:4b:
10:8b:a9:99:17:93:15:6a:55:7c:7d:96:fa:12:19:
40:a6:39:2e:9b:8c:fc:3a:5a:6e:4f:41:62:db:93:
0f:f2:8b:ac:60:b2:d0:28:86:e0:f0:ef:7e:49:07:
e8:e4:11:ab:b3:52:04:10:93:f2:66:8f:e3:2b:c5:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:11:6A:02:1E:F5:A6:CD:0D:18:56:42:A7:8D:A5:84:49:67:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABE954B4CDCA11EFA19D67BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.21.0/24
Signature Algorithm: sha256WithRSAEncryption
80:27:c2:3e:75:f5:0c:7b:a7:c6:a5:c3:99:19:1e:18:87:3b:
07:75:eb:95:6e:f7:46:88:41:c3:d8:95:6e:97:ce:97:21:e3:
69:ed:a8:9b:c6:f6:76:47:d4:05:f2:0c:b5:53:c6:63:33:56:
06:f1:21:8a:2c:28:98:77:f8:3e:46:53:c2:68:45:cc:5a:ef:
de:ff:7d:82:d2:de:e1:ed:85:7c:79:23:78:46:b0:6d:75:01:
71:57:24:8a:a6:35:9f:a7:12:1d:e8:24:c4:01:18:c6:3f:cc:
f8:d7:d8:4a:04:9d:fe:83:72:d0:4d:04:70:80:fd:22:2c:ff:
8c:b1:8e:d6:a1:95:2d:06:35:06:03:4b:2d:f2:ea:de:39:1d:
9b:9f:83:4a:ba:a2:50:99:7d:40:42:d3:44:4f:ef:d8:fa:70:
30:e7:de:c2:9d:f8:35:d5:2c:e9:8d:08:67:60:1d:b3:c0:10:
f4:c2:dc:26:4c:af:f5:64:36:fe:f8:39:2e:5a:ce:67:d9:bf:
f2:01:de:d7:59:25:5f:e9:c5:ec:56:a5:bd:4a:7e:0b:1f:20:
04:6c:0d:63:77:65:f6:af:89:29:06:69:5d:e2:fb:c2:ce:50:
bf:cd:57:eb:01:b7:8a:57:72:c9:5e:00:a4:df:d8:43:54:dd:
d8:4f:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:14 2025 by rpki-client