Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD2EFA74C96311EF944820B0762E951A.roa
File: AD2EFA74C96311EF944820B0762E951A.roa (raw, json)
Hash identifier: JEk2ttZUrKEIRmk8yZWlOLZvhEf+ehopviek8UxExNk=
Subject key identifier: 77:0B:9E:FE:D9:47:29:05:BD:B3:8B:37:33:07:1B:17:42:92:85:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F478
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD2EFA74C96311EF944820B0762E951A.roa
Signing time: Thu 02 Jan 2025 23:45:42 +0000
ROA not before: Thu 02 Jan 2025 23:45:38 +0000
ROA not after: Mon 13 Dec 2027 23:45:38 +0000
asID: 17561
IP address blocks: 156.226.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62584 (0xf478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 23:45:38 2025 GMT
Not After : Dec 13 23:45:38 2027 GMT
Subject: CN=67772526-47dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:5c:a1:29:3e:cb:2e:31:b1:02:c0:58:bf:
ab:1b:a9:3a:74:52:8d:76:17:82:a4:3b:88:57:78:
76:0d:11:c1:56:77:9b:6a:13:13:30:54:9a:a2:16:
ec:e4:74:98:87:5c:7d:c9:ca:9c:c7:55:89:e9:fc:
0d:34:33:bc:55:72:9d:fe:13:e8:84:6b:da:87:54:
ef:38:dc:ae:42:d6:5e:02:db:76:7a:b7:b3:a6:71:
8f:3e:05:6d:96:64:37:8a:7b:26:30:02:f0:f1:43:
8b:78:e8:b3:11:b2:af:fb:a9:06:fc:3d:bd:13:d3:
1d:ea:71:8b:59:7e:65:88:84:90:b2:06:36:fa:e8:
2b:7f:26:43:79:48:fa:c8:cd:6d:6a:d9:da:34:ec:
23:94:d2:78:60:77:fb:6e:cd:84:45:4f:f7:01:fd:
72:ec:a7:d9:7a:b3:7f:32:39:6b:72:51:88:e1:63:
fa:52:0c:c8:04:52:77:53:1c:47:2c:74:0a:41:91:
4c:f0:47:dd:e7:32:4d:bf:c7:e5:a4:94:6c:a4:3b:
0c:d7:7a:7b:66:64:7f:26:00:9e:cf:de:fb:be:91:
bf:bd:1e:02:f0:71:c0:1d:6a:a2:a5:8e:01:66:4f:
ff:b3:dc:5e:ab:79:1d:d6:b0:47:5a:7a:4a:4f:de:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:9E:FE:D9:47:29:05:BD:B3:8B:37:33:07:1B:17:42:92:85:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD2EFA74C96311EF944820B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.239.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7f:a5:df:d3:ba:ea:4e:ec:68:70:41:92:f7:cb:db:62:80:
dd:d1:a3:a5:14:45:66:99:49:d7:55:74:e4:3f:78:96:09:c0:
67:49:b3:1a:ce:58:39:04:24:7e:0d:ff:57:a8:ff:67:1b:e9:
c7:f3:1f:77:1f:08:dd:d3:95:34:d8:b1:7c:8d:12:fa:83:c2:
ea:90:16:37:c2:f8:65:7b:3a:37:fa:0e:43:bf:57:23:c3:2c:
2c:06:cf:8c:4c:87:3a:fe:9f:d6:88:7e:00:10:1d:1d:7c:6e:
89:ad:d5:12:f6:31:c9:61:f1:72:42:dc:b3:82:3e:81:bd:cc:
b7:e3:84:f8:ab:c0:56:06:b3:01:e3:9b:dd:88:aa:d7:16:8e:
f6:03:05:c2:da:42:b2:92:fd:1d:86:05:fb:5a:f0:ed:6a:83:
7c:55:8b:1c:f1:17:d2:8e:0d:2b:c9:61:85:29:79:6f:b5:e5:
6b:c5:e7:dc:f6:a9:2b:ee:9b:39:6b:39:a9:8f:62:dd:d1:0b:
25:d4:be:b7:07:29:18:1e:e0:03:fe:98:18:2d:9f:97:42:d5:
41:a7:99:04:92:f8:ca:7d:7d:81:75:66:19:f3:02:75:46:72:
2e:3d:9e:d7:54:20:89:e4:67:5f:40:16:ce:04:06:17:37:6c:
1f:34:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:57 2025 by rpki-client