Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2B60D22C28111EF815C6F7D762E951A.roa
File: B2B60D22C28111EF815C6F7D762E951A.roa (raw, json)
Hash identifier: f8kx5Fwj2RQEUvQy8jzNSque0GSWbRm+HSQpQ5VuTuw=
Subject key identifier: F5:21:5A:CF:64:BA:6D:12:BC:66:40:4D:5F:69:00:8F:10:10:37:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2B60D22C28111EF815C6F7D762E951A.roa
Signing time: Wed 25 Dec 2024 05:32:58 +0000
ROA not before: Wed 25 Dec 2024 05:32:54 +0000
ROA not after: Wed 10 Dec 2025 05:32:54 +0000
asID: 984
IP address blocks: 156.228.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59633 (0xe8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:32:54 2024 GMT
Not After : Dec 10 05:32:54 2025 GMT
Subject: CN=676b990a-9c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:47:5a:9d:62:fc:9a:fe:fb:30:e3:17:c7:
41:76:b2:34:de:52:d1:fd:c1:2c:3a:0a:0e:eb:96:
3c:e8:c4:17:72:bb:89:fa:79:02:e7:a3:0e:22:52:
5b:e9:2f:a4:02:76:58:cb:85:da:d0:63:48:82:c4:
30:19:af:77:9b:82:c6:5b:3d:82:26:53:60:d8:99:
33:d5:80:4c:ad:5a:40:35:6c:3f:22:4f:0f:4f:86:
00:ee:ee:9e:af:b2:6d:ad:c8:50:4f:0c:06:40:c7:
f7:cd:5d:ec:7d:e8:c0:3b:c0:a7:23:e0:78:8e:d4:
94:51:00:f6:60:c2:4d:fd:07:18:1e:3e:84:4a:81:
7f:a8:6f:9a:15:d1:a1:e0:de:38:cb:25:1e:b6:3c:
cc:0c:5d:57:c5:07:77:5d:d7:da:77:db:c2:92:e3:
97:e6:d8:91:bd:71:9c:a8:c8:f1:34:48:38:d5:8d:
9e:8a:57:2e:92:a6:c0:4e:47:c1:24:b7:0e:f1:5f:
88:83:f4:fc:47:95:2a:da:e1:8a:e7:f4:22:27:87:
16:e7:b9:ca:f4:92:a8:3f:b0:85:79:6b:24:78:27:
d2:fd:f2:97:96:64:e6:76:9b:94:50:97:e4:2e:3d:
c2:9d:5e:fd:06:f2:db:ec:87:1b:32:e7:84:08:0d:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:21:5A:CF:64:BA:6D:12:BC:66:40:4D:5F:69:00:8F:10:10:37:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2B60D22C28111EF815C6F7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.23.0/24
Signature Algorithm: sha256WithRSAEncryption
04:06:30:07:78:6e:ea:9f:8f:af:3f:74:2d:f3:ed:33:f7:2c:
ca:54:12:a6:cc:ea:8c:eb:7f:e0:7a:27:eb:72:66:4c:0e:44:
f0:9e:1e:be:77:8c:c8:74:8d:c3:d7:9a:91:7a:47:ce:a2:15:
2e:05:8d:54:37:2f:2e:8e:f9:47:fd:1c:5c:87:55:9a:6b:2b:
8e:1b:91:32:81:34:a6:26:15:f2:76:87:75:02:54:c9:ed:ea:
15:84:cc:0c:e5:67:a7:9d:de:c1:2c:c0:98:42:71:0d:bf:27:
d5:74:f2:30:61:98:d4:8a:d1:90:21:bc:8f:f2:6f:64:f0:cd:
d7:a8:74:a3:4d:76:d4:bf:d5:45:ef:c7:2f:91:31:a9:e3:e4:
e9:1d:63:61:81:15:1c:03:a7:59:6f:22:41:84:40:f5:3f:63:
d8:9e:2f:62:bf:15:f5:f7:90:2b:1d:79:89:0c:20:ae:26:18:
87:90:2c:74:75:3f:67:6c:1b:3f:2c:1f:ec:7d:8f:3b:a7:ce:
b4:00:c5:8e:36:b8:d8:84:a1:5e:39:01:b1:b6:ca:8e:4b:4e:
7c:79:f9:e6:e9:57:26:7a:05:83:58:55:8a:52:e9:3c:ee:ab:
b5:e8:3c:9d:2d:f5:ad:47:24:20:69:9b:ca:a4:03:29:f5:13:
61:0f:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:35 2025 by rpki-client