Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7C4BD8EC28811EFB3D21FAB762E951A.roa
File: B7C4BD8EC28811EFB3D21FAB762E951A.roa (raw, json)
Hash identifier: 8zZxKhmkxTHv88dz0DT/IoNcc5rSkLtK+ps2tXIyjY8=
Subject key identifier: 4F:3B:12:DA:25:EB:D5:0B:BC:11:5E:C3:ED:90:E1:43:4A:C4:F3:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E947
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7C4BD8EC28811EFB3D21FAB762E951A.roa
Signing time: Wed 25 Dec 2024 06:23:13 +0000
ROA not before: Wed 25 Dec 2024 06:23:09 +0000
ROA not after: Wed 10 Dec 2025 06:23:09 +0000
asID: 984
IP address blocks: 156.228.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59719 (0xe947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:23:09 2024 GMT
Not After : Dec 10 06:23:09 2025 GMT
Subject: CN=676ba4d1-62ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:4f:3d:d6:b5:9a:64:ba:1e:a5:92:41:42:
a4:a8:50:34:64:88:f8:ef:a1:78:ff:c3:f2:4c:b2:
67:40:54:df:75:62:98:2c:96:37:9e:ee:67:8b:cf:
d6:4d:fc:ac:ff:2d:e9:cc:11:ff:98:cc:1b:18:96:
03:29:0d:8f:87:27:70:f4:d4:24:c2:03:39:63:b2:
f6:31:9e:05:40:21:ef:8e:ae:fc:13:04:87:17:2c:
c4:bd:18:d9:ff:29:a5:5b:8c:5d:6c:8b:6f:d2:8d:
6f:be:98:2f:b7:a8:35:e4:16:1e:5d:ed:3f:bd:fc:
fb:23:4f:ca:23:22:ff:ec:4d:d5:1f:57:32:7e:9a:
37:1b:dd:3a:88:30:75:08:48:28:bd:99:05:f2:5a:
43:fb:47:77:0e:f6:be:f1:d1:24:44:97:cd:9a:99:
ec:0b:73:5f:13:9c:13:03:b4:13:09:b1:d9:8a:a9:
96:6a:c3:9c:72:d8:0b:2b:bd:01:dd:11:b2:06:ad:
53:05:29:fe:3c:e2:d8:ae:5e:9e:98:f8:0b:99:36:
4c:c5:75:25:89:78:5c:54:87:97:0b:e8:79:c4:85:
37:c9:52:f3:9b:cb:c0:2d:49:cf:4d:53:90:39:20:
d3:5c:12:bb:55:02:c3:67:52:a2:1c:ff:78:e1:09:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3B:12:DA:25:EB:D5:0B:BC:11:5E:C3:ED:90:E1:43:4A:C4:F3:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7C4BD8EC28811EFB3D21FAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.68.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9b:60:b6:76:55:a9:d2:92:67:9f:fb:c1:89:8a:f8:0c:c2:
2b:a5:6b:50:0c:ee:fa:40:de:b8:52:e8:38:5a:08:87:47:49:
36:a1:20:f7:e3:6b:ca:28:30:c9:6c:78:30:55:45:c2:65:97:
db:ba:df:44:df:44:da:13:2c:86:b7:12:29:aa:eb:10:80:b9:
d3:c1:53:1d:e9:9e:90:b7:92:b2:ae:59:7f:e0:d6:f3:51:93:
20:20:ab:ab:d7:11:74:be:aa:72:b5:1c:76:31:7f:58:b6:df:
04:5a:e9:9c:2c:0b:49:9c:d4:f9:a5:63:59:e7:93:00:d4:6f:
62:43:a3:56:31:c6:6b:01:12:35:5e:98:fd:7e:58:01:5c:f6:
78:01:60:cf:00:66:d6:f7:38:84:6a:bd:f6:2e:70:4a:cb:47:
77:a1:2e:bf:33:2b:d8:37:8f:dc:05:77:eb:9e:16:aa:26:00:
d4:22:55:64:69:a8:fa:8f:8f:d8:f1:65:7f:48:90:a9:47:6e:
bf:82:5c:d0:f4:3d:81:56:28:e1:e4:ed:9f:b7:1c:9e:13:13:
8b:e9:8f:b1:f7:38:51:39:c5:9c:48:ab:18:70:2f:89:78:c1:
86:4c:84:d7:c6:38:2e:94:0e:bf:7a:23:0e:bd:92:e9:8c:f3:
59:21:87:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:30 2025 by rpki-client