Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4334CA2CAD611EF80E8B468762E951A.roa
File: B4334CA2CAD611EF80E8B468762E951A.roa (raw, json)
Hash identifier: 9+AeG94B7h7C35z21QWEXs8AoMFFR9YJDOpcQqVTdFg=
Subject key identifier: 86:81:6C:CF:8D:D8:05:AD:64:1C:E4:E6:0C:1F:1E:1F:A6:D1:F6:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F788
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4334CA2CAD611EF80E8B468762E951A.roa
Signing time: Sat 04 Jan 2025 20:01:37 +0000
ROA not before: Sun 05 Jan 2025 20:01:32 +0000
ROA not after: Thu 06 Feb 2025 20:01:32 +0000
asID: 200019
IP address blocks: 156.229.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 20:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63368 (0xf788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 20:01:32 2025 GMT
Not After : Feb 6 20:01:32 2025 GMT
Subject: CN=677993a1-315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:2f:e3:e6:e3:39:6e:a1:b2:b1:5c:ce:9f:
b9:a8:dc:15:7c:3b:33:31:d3:5f:d5:e5:d5:60:e6:
b4:30:d4:8c:10:f6:2d:aa:76:1d:e4:05:c4:e7:df:
53:33:65:47:22:29:78:c0:ea:8b:72:e6:bb:8c:14:
12:76:8c:c8:17:a6:46:05:84:90:68:22:21:9c:ff:
85:42:6d:0a:6d:cd:63:3e:d8:99:bc:4a:64:48:cb:
f0:bb:64:7d:77:9b:0a:fa:70:c8:d2:a0:e8:5e:7a:
1e:e5:75:fc:d5:d5:87:7d:01:9f:fe:8f:9a:5d:98:
ba:ba:e3:27:b4:96:b3:0b:80:64:03:de:1b:da:6d:
b8:19:f6:32:af:3d:cd:7e:6e:b1:64:b9:79:ed:3c:
e1:af:f0:78:e4:6b:1e:85:c9:76:d9:e7:7e:6b:17:
f3:58:08:b8:4b:ab:84:79:9a:27:de:3e:e2:61:41:
a5:ef:a8:3b:93:ad:5c:eb:5c:41:e5:76:29:6c:2f:
67:5a:f5:3f:7f:63:bf:3a:e5:61:6c:ae:48:b1:71:
07:87:3b:81:7a:d8:55:0d:9c:2a:a6:11:60:f7:64:
49:ae:ad:68:1f:61:e4:44:2f:75:9b:56:98:68:09:
2f:3c:31:10:67:75:a4:c9:66:bb:69:c3:f4:e0:38:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:6C:CF:8D:D8:05:AD:64:1C:E4:E6:0C:1F:1E:1F:A6:D1:F6:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4334CA2CAD611EF80E8B468762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.228.0/23
Signature Algorithm: sha256WithRSAEncryption
18:4d:97:95:a1:8c:b4:0e:86:16:92:09:79:28:60:4c:ca:7e:
3b:a5:4a:d7:7c:f1:a4:9b:31:1b:7d:d7:09:9c:10:c1:cb:98:
88:db:01:c2:16:c4:9d:ab:71:19:aa:92:8a:2c:2c:89:4f:b5:
61:54:2b:73:a9:43:0f:a9:58:69:6e:d9:a3:b4:39:c3:8e:f5:
bc:25:04:15:9c:de:76:91:d4:5a:4c:76:09:67:ca:f2:e4:1e:
8e:f2:33:30:c0:44:ea:fe:d0:cd:6c:42:bf:d2:43:92:61:36:
ad:41:0d:d3:3e:67:40:8f:51:54:7b:ec:a5:70:cc:cc:e2:6d:
55:f3:f1:2a:bb:bd:9a:69:11:e2:17:61:37:e3:0d:11:30:63:
31:81:74:f1:46:d2:2f:d3:cf:ad:2a:95:9b:01:ac:17:6f:0e:
a6:03:26:0c:e8:9d:f3:06:a7:57:d5:44:a7:69:bc:cb:05:ed:
85:06:3d:e5:c0:5f:e6:a1:69:9a:4f:f5:9a:8c:f1:f4:cc:e4:
39:25:ef:b5:24:02:d0:f4:1c:bf:f6:db:5c:2d:d8:f8:e8:3d:
56:13:6a:c0:a3:70:81:d5:03:3e:8b:4a:63:0c:8b:ef:05:10:
9f:00:ad:20:cf:d4:df:3f:81:31:6d:0f:19:14:5a:66:d4:c4:
4a:76:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:50 2025 by rpki-client