Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC709968C27D11EF82099765762E951A.roa
File: AC709968C27D11EF82099765762E951A.roa (raw, json)
Hash identifier: 8tD0eVaiQhGkLGxtXS/HZr3+vXXawcgeeZGiuUYWeJ4=
Subject key identifier: E1:84:E4:08:44:46:03:2A:E5:0A:EC:6C:02:29:AC:BC:36:42:EC:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC709968C27D11EF82099765762E951A.roa
Signing time: Wed 25 Dec 2024 05:04:09 +0000
ROA not before: Wed 25 Dec 2024 05:04:06 +0000
ROA not after: Wed 10 Dec 2025 05:04:06 +0000
asID: 984
IP address blocks: 156.227.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59583 (0xe8bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:04:06 2024 GMT
Not After : Dec 10 05:04:06 2025 GMT
Subject: CN=676b9249-cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:bf:dc:a7:dc:f3:92:82:c5:76:8f:c3:75:
cd:28:81:bd:02:72:20:79:ff:71:1c:86:27:72:19:
ea:18:20:f5:82:08:84:68:0a:ac:bd:11:6d:2f:9e:
75:f0:63:a6:3d:cb:f3:79:4f:1e:c7:f9:64:c4:6b:
87:40:df:92:9e:db:8c:54:99:88:37:e5:67:cd:23:
5f:e6:34:a9:bc:c6:f2:80:02:e6:26:cd:c1:c5:fc:
a8:e8:7b:82:37:af:a3:81:d7:86:94:50:db:3c:07:
9c:f4:e0:f3:bd:72:f0:ab:cf:7b:2c:c5:3e:68:11:
ef:a8:d2:9b:94:0d:e6:67:86:11:91:04:15:1e:53:
ea:a4:77:56:13:a9:64:5c:86:a9:da:bb:48:d5:c2:
e1:66:12:02:08:df:cc:fe:d4:c6:86:94:d0:c9:d8:
87:f3:16:f9:f1:73:67:a1:21:93:76:ba:96:64:54:
5f:ec:e4:59:5b:64:1e:d5:65:06:d8:3b:ec:d5:7c:
b7:29:52:54:2a:dc:f8:b9:43:0c:33:af:82:1a:ff:
38:85:89:fc:e2:98:6d:e7:d9:46:c9:95:3d:cb:78:
c8:4c:11:e5:4c:eb:fc:31:45:e6:df:d9:17:52:ed:
ab:31:8b:35:89:7a:fc:84:7c:a6:54:65:5c:6d:a3:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:84:E4:08:44:46:03:2A:E5:0A:EC:6C:02:29:AC:BC:36:42:EC:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC709968C27D11EF82099765762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.177.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a1:80:73:27:87:2c:5c:fb:54:1d:15:00:85:a6:d6:04:8f:
28:de:0e:c9:ed:a3:8e:00:45:fc:f9:47:ad:31:ea:45:c4:9f:
96:b7:49:e0:3f:52:ec:70:5e:5b:c4:87:db:01:71:7c:e3:c8:
b4:03:4d:d0:10:a8:25:5a:91:fa:16:2d:30:2a:02:16:86:03:
b7:55:d6:8b:12:80:b3:e4:c4:60:fb:b7:f9:59:a7:5c:1d:25:
a6:d1:76:f6:f7:e6:92:86:ec:7c:ba:8c:22:0d:5c:e0:d0:17:
84:bb:29:68:63:64:90:06:7a:11:67:77:80:08:09:c2:48:21:
a9:fe:87:77:db:50:b1:d7:ba:91:c3:58:4c:5a:9d:61:0b:38:
05:5a:b7:d3:25:ad:c7:a1:a6:0a:41:b3:44:65:86:e2:d9:1e:
c1:79:a7:6c:dd:c2:03:5a:cb:79:74:4f:3f:40:a7:29:2c:8f:
f1:0f:fb:37:95:79:1e:da:d6:78:1d:2e:f8:4b:b5:0d:b6:f3:
f1:82:61:aa:89:f5:92:40:07:dc:49:73:79:44:41:dd:f4:6f:
ee:63:67:ae:9f:7a:ea:5c:ea:52:10:92:fc:a1:96:cd:47:dc:
3e:13:8e:b1:df:21:f2:c2:c0:e9:08:ef:85:c7:df:d0:7b:4a:
1b:29:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:04 2025 by rpki-client