Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8832A48CCA211EF8F205E58762E951A.roa
File: B8832A48CCA211EF8F205E58762E951A.roa (raw, json)
Hash identifier: jqf8qxP+Bc5gRqvrY1DL4F91k17jmPSvhMgVO24kaYw=
Subject key identifier: 50:65:7E:0D:37:9D:9F:9C:4B:9D:FB:28:1C:65:47:0F:F0:38:C5:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8832A48CCA211EF8F205E58762E951A.roa
Signing time: Tue 07 Jan 2025 02:54:32 +0000
ROA not before: Tue 07 Jan 2025 02:54:29 +0000
ROA not after: Mon 13 Dec 2027 02:54:29 +0000
asID: 17561
IP address blocks: 156.229.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63906 (0xf9a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 02:54:29 2025 GMT
Not After : Dec 13 02:54:29 2027 GMT
Subject: CN=677c9768-aef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:9d:7e:9d:d9:b7:61:c3:76:02:26:27:69:
6f:50:3c:29:e0:70:77:d4:03:5c:e4:30:f8:5d:4b:
f4:76:36:c8:26:ee:84:51:46:51:f3:e4:fe:c4:50:
59:5f:b2:cc:e8:82:e9:67:7d:d2:64:82:9d:3f:2f:
c6:cf:1c:7a:42:eb:14:fe:7d:6e:ef:e1:d7:0e:17:
96:c6:1a:4a:7a:90:8b:fe:55:88:eb:a2:31:41:50:
03:d3:78:2e:94:37:b4:cd:a2:b4:50:57:2e:5a:1e:
9c:98:b5:97:57:cb:b5:61:7a:38:61:01:ad:4b:99:
f9:2f:80:06:6e:ff:66:27:b1:6b:78:50:9b:e5:77:
b6:a5:dd:f1:52:e2:40:60:e9:2b:06:97:e8:c0:8b:
d3:2e:eb:53:88:bb:15:b6:d1:83:db:1c:5d:f5:30:
c3:f2:f1:04:24:34:66:96:9e:1a:25:8c:e6:c2:23:
7b:3b:ba:89:ea:20:4a:69:96:c1:4e:c1:a2:0d:2f:
3d:38:23:d9:67:42:b6:65:bd:4b:22:78:94:e4:b7:
50:24:ad:4d:bc:a3:e6:a4:73:bc:95:d5:92:2d:70:
6d:71:55:4f:7b:d0:99:7d:aa:77:73:9b:89:b0:f6:
38:91:3e:d4:2a:b2:49:02:f9:e1:2f:ad:41:a8:67:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:65:7E:0D:37:9D:9F:9C:4B:9D:FB:28:1C:65:47:0F:F0:38:C5:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8832A48CCA211EF8F205E58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.28.0/24
Signature Algorithm: sha256WithRSAEncryption
33:34:a2:02:73:52:ac:03:81:84:de:3f:40:18:2b:f5:cb:61:
ba:b9:4f:07:2e:0f:ca:41:fd:df:42:78:0e:20:75:c5:cc:7f:
54:4d:e2:2a:86:f2:d3:3b:95:83:59:5a:82:b1:fc:c5:3c:b7:
29:ba:12:24:4b:29:9b:d1:3f:31:2e:f0:47:46:e0:4c:4f:b1:
22:4c:9f:bd:dc:52:15:c5:db:b6:4c:e8:81:da:4c:fe:0b:1c:
eb:69:61:e3:dd:55:34:fa:27:8d:53:28:5e:5b:f5:54:ce:be:
45:50:1f:fe:e8:99:f4:93:9a:86:8d:e5:92:1d:8a:7a:b8:54:
e6:58:21:22:24:4d:cb:c7:e2:9e:a4:9e:4f:0d:bc:c9:f2:77:
65:71:27:4a:4b:c5:69:a0:5e:8b:45:14:a3:1b:b5:65:b7:11:
8d:6d:5f:39:05:79:6a:ba:56:17:ff:67:7c:12:38:bf:e9:48:
21:bb:2e:94:20:8d:6a:0b:cc:9e:b6:53:36:24:d5:36:59:99:
1b:68:a4:2f:07:2c:d3:f9:c3:e6:60:77:e6:b6:73:87:14:b0:
1b:b9:f2:52:bc:db:31:d3:29:cc:a5:4e:dd:18:c8:56:59:56:
c9:ff:10:43:d9:61:35:25:c4:29:91:22:6d:11:f7:5f:2f:f6:
55:4a:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:48 2025 by rpki-client