Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC39E566C97C11EFBC096A5E762E951A.roa
File: AC39E566C97C11EFBC096A5E762E951A.roa (raw, json)
Hash identifier: i/jkKN13z5qYFFtj0mr/IE84z2vn9i27pZMnTRWFKDQ=
Subject key identifier: D1:F2:B4:7D:B8:8C:99:6B:6B:B1:B4:27:1B:01:23:C8:35:97:98:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F525
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC39E566C97C11EFBC096A5E762E951A.roa
Signing time: Fri 03 Jan 2025 02:44:37 +0000
ROA not before: Fri 03 Jan 2025 02:44:34 +0000
ROA not after: Sat 13 Dec 2025 02:44:34 +0000
asID: 984
IP address blocks: 156.229.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62757 (0xf525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:44:34 2025 GMT
Not After : Dec 13 02:44:34 2025 GMT
Subject: CN=67774f15-7abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:27:31:b7:76:d8:5c:64:8f:f6:d5:01:1c:
6c:70:00:06:6f:cf:12:a7:54:48:dc:6b:fc:74:b6:
11:1d:0e:84:18:ef:70:08:7c:c4:89:ee:91:52:24:
65:a5:cc:7e:65:8f:e7:16:81:6d:c7:0f:f0:97:3f:
33:3a:db:9f:61:fb:34:39:a3:bf:c8:c4:c6:a7:65:
31:c8:49:10:6b:95:fb:25:78:58:7f:3f:2f:3c:6a:
28:5f:38:fa:ef:c9:da:ff:e0:4a:f9:c7:ef:52:78:
aa:59:dd:af:5e:83:ec:3a:58:9c:92:b2:fb:c5:9c:
54:b5:36:1b:dc:d0:fc:d0:d8:07:d5:06:44:39:d2:
cf:46:aa:aa:da:1a:38:8e:1a:16:b7:a2:7c:15:74:
f8:6f:5b:8e:f3:1a:e0:d8:90:6a:27:50:3c:a9:6e:
cb:5e:99:d7:b2:e2:9a:47:88:c2:aa:c7:96:98:d1:
52:a2:ca:da:8c:67:fc:36:20:a7:e8:84:ca:d8:b7:
11:95:b9:41:5e:20:db:f2:51:e3:c2:92:78:6a:2f:
1a:c4:9f:7f:e0:92:21:0e:8e:82:0e:92:e9:b2:f7:
8d:41:f4:d4:7b:89:d5:68:fa:30:46:1a:18:f8:9f:
5f:38:ca:01:9c:db:f4:76:91:18:88:4a:aa:55:f5:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F2:B4:7D:B8:8C:99:6B:6B:B1:B4:27:1B:01:23:C8:35:97:98:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC39E566C97C11EFBC096A5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.1.0/24
Signature Algorithm: sha256WithRSAEncryption
28:00:62:b7:60:a3:13:d1:5a:99:97:3f:9d:d7:0d:1f:3d:f0:
bb:98:2c:20:a1:3a:55:27:69:47:02:49:d8:5b:95:14:32:07:
39:17:23:f7:a4:52:81:df:4b:70:e4:ba:3d:b3:33:ba:2a:74:
7e:45:56:22:cf:4f:aa:68:f1:7a:dc:6c:5a:f3:5f:f9:a0:6f:
b5:9e:8e:49:8b:01:e8:1a:7a:12:7f:e1:4f:ed:b8:f1:43:64:
a5:c8:b9:5d:c1:d8:6e:24:d2:dc:80:dd:32:1e:97:f5:f6:bb:
68:20:04:a8:4d:d0:4d:91:bc:47:da:d6:4e:ec:fe:b4:3d:c9:
6d:61:81:36:db:45:59:a4:11:15:38:ac:db:b3:a6:a0:95:ca:
8b:f1:39:cc:89:04:e8:e9:1c:c2:6e:3b:77:db:f9:f2:45:97:
80:51:16:2a:c3:c6:06:e8:d7:da:c1:5f:f6:73:74:07:1d:8b:
3d:e2:28:98:d9:52:7f:30:01:27:3a:2c:9a:71:5b:9b:b9:e0:
dd:84:c1:70:e3:e5:c3:f6:01:e7:7e:ca:c8:f2:3c:7a:df:47:
60:98:f6:eb:be:cd:16:40:22:90:22:ac:e1:0e:04:0b:42:1d:
16:b3:ed:1b:86:b8:7e:b4:da:06:03:22:ab:d1:6a:ae:b1:f8:
89:58:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:56 2025 by rpki-client