Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD0B4EDAD15511EF93254CAD762E951A.roa
File: BD0B4EDAD15511EF93254CAD762E951A.roa (raw, json)
Hash identifier: hnY/thjrqPbNdMbCtDMpnut8ks5O4iAnLHIa//61okk=
Subject key identifier: 6F:28:D1:CD:46:14:B9:AA:BE:27:29:5A:D3:80:13:D5:84:20:E3:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01064E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD0B4EDAD15511EF93254CAD762E951A.roa
Signing time: Mon 13 Jan 2025 02:26:05 +0000
ROA not before: Mon 13 Jan 2025 02:26:01 +0000
ROA not after: Thu 13 Mar 2025 02:26:01 +0000
asID: 17561
IP address blocks: 156.233.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67150 (0x1064e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 02:26:01 2025 GMT
Not After : Mar 13 02:26:01 2025 GMT
Subject: CN=678479bc-0073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:db:ad:15:30:e8:c3:94:73:66:f7:74:cf:
25:91:0e:5b:6a:03:78:e9:4e:d3:31:33:a2:90:67:
bd:db:64:cb:df:84:5b:f1:c7:43:cf:2d:fd:ac:3d:
e6:d2:0d:3f:f4:ec:87:d0:09:29:8b:7b:21:9e:99:
d1:bd:58:1d:24:b1:87:87:de:9e:48:6a:4b:04:66:
ec:25:27:0c:44:bf:0c:d2:85:68:4f:10:bc:31:f3:
06:6c:0c:17:15:94:09:e3:f3:6f:1f:ee:86:94:23:
fc:93:e6:48:bd:a9:89:ad:91:63:bb:d0:13:58:9c:
cf:85:47:ff:5a:b8:2a:8f:53:94:a0:c2:c5:ba:e1:
cf:07:9f:2d:88:c5:52:98:74:ba:f3:70:0d:45:c9:
6f:46:1f:b0:cd:0e:f0:04:8e:0a:e4:33:0a:29:f6:
f0:4b:91:72:a9:dc:32:be:76:49:40:a9:84:9b:57:
1f:e3:a6:f1:5e:04:34:ab:c6:4d:7a:51:02:f3:83:
c9:64:78:d2:d1:6b:22:6b:88:5a:96:80:7a:1c:5f:
20:20:c5:db:93:05:aa:28:ed:86:b5:5b:8d:71:62:
27:c7:b1:0f:96:e7:7c:c8:57:12:14:31:7e:dd:72:
ca:32:2c:c5:24:dc:86:d2:0b:88:9d:9f:12:2a:df:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:28:D1:CD:46:14:B9:AA:BE:27:29:5A:D3:80:13:D5:84:20:E3:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD0B4EDAD15511EF93254CAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:4a:b0:70:19:7e:74:0b:25:2a:82:44:d0:53:b0:7a:23:7c:
c6:c5:56:e4:cd:17:ed:5f:99:b6:b4:cf:a0:cc:00:d7:ed:60:
a9:ec:41:94:01:04:f4:92:4c:8a:0b:09:36:35:e9:b0:c0:af:
b6:f4:a2:0b:e0:42:ed:23:a6:e3:6e:e7:15:ba:d4:e7:48:8e:
1c:5a:12:a8:23:66:b7:7d:c0:b1:c1:f7:14:9b:1d:08:75:a1:
b0:2e:ac:d4:8a:d9:7b:a2:95:85:49:fe:9f:f5:4b:4d:4d:08:
56:68:3a:64:af:40:31:4e:c6:d3:3d:78:dc:2b:86:93:cc:72:
a0:63:7b:2a:1d:2e:06:9b:1c:99:95:90:96:b2:a9:f6:c2:43:
87:4d:b8:cb:89:da:6b:2b:38:4a:13:a1:8e:90:22:0d:79:1a:
0f:90:13:45:6c:a4:67:f8:8b:ff:c9:b3:2f:c6:48:07:7f:be:
2c:16:12:a9:1c:7a:94:61:22:f1:67:31:64:4f:a7:1a:6a:98:
fe:12:b2:a5:d4:b9:a1:a9:1e:a6:da:a3:49:b3:4e:69:7e:db:
2e:df:f1:50:d3:23:3b:23:9f:6b:79:58:2c:98:b9:47:72:36:
07:fa:4d:fe:b9:5c:bf:5d:b0:9b:f9:d3:ff:6c:0c:09:b1:35:
f1:8f:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:58 2025 by rpki-client