Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C111CD10C95D11EFB01A888A762E951A.roa
File: C111CD10C95D11EFB01A888A762E951A.roa (raw, json)
Hash identifier: nM8LNC3bMN/aWNdvkEslAr9BfmB7XJ/UC3oPrKcF2e4=
Subject key identifier: 4A:60:A4:C8:16:12:C6:CC:96:70:C7:6F:AA:6E:A3:B3:D4:9F:18:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F440
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C111CD10C95D11EFB01A888A762E951A.roa
Signing time: Thu 02 Jan 2025 23:03:18 +0000
ROA not before: Thu 02 Jan 2025 23:03:14 +0000
ROA not after: Sat 13 Dec 2025 23:03:14 +0000
asID: 984
IP address blocks: 156.226.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62528 (0xf440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 23:03:14 2025 GMT
Not After : Dec 13 23:03:14 2025 GMT
Subject: CN=67771b36-d372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:56:4b:ff:6e:e5:dd:59:87:b2:18:77:06:
79:3c:d6:23:5c:bd:ca:3a:21:8e:24:23:80:a3:7f:
e7:6b:f9:8d:df:e9:2e:9f:71:3d:4c:33:a4:2d:ee:
8e:3c:06:3e:13:08:e5:bd:16:0e:d6:d8:f1:2b:7e:
1d:66:ff:ce:e5:bf:1c:56:fc:04:3c:6a:5c:c1:d7:
4d:7b:18:6f:2b:f7:ff:8e:57:1d:91:4d:78:b4:06:
e1:90:f4:66:f6:c5:95:d6:9f:02:d0:b5:a7:c9:8d:
ef:ea:53:58:72:d3:a3:7e:de:27:72:dd:8c:1c:cc:
1c:20:a6:59:d9:73:1e:9b:17:c5:78:f3:12:d1:a6:
2d:5c:f2:43:91:6f:2a:b8:a9:53:7e:c0:99:c3:9d:
3c:d7:21:a2:3e:a0:a6:2f:4e:c1:6a:89:47:7f:e9:
e8:76:9e:d8:1c:95:b7:ba:4b:5d:af:82:1d:bf:90:
82:0f:60:4d:c5:82:83:b5:ef:7b:1a:28:03:78:7a:
0b:ac:1d:f3:40:e8:97:0b:1c:6a:6a:3b:3f:ed:12:
04:ba:93:90:81:f9:d9:90:fa:2f:f2:b8:29:d7:f8:
d4:74:a7:6a:16:1a:3c:d9:2e:eb:8d:b1:77:ab:b6:
c5:32:cc:0a:48:f3:fe:00:96:87:30:89:9f:32:71:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:A4:C8:16:12:C6:CC:96:70:C7:6F:AA:6E:A3:B3:D4:9F:18:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C111CD10C95D11EFB01A888A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:df:9b:2b:c2:d2:87:0e:82:6e:8a:62:53:b1:b4:cc:c5:69:
30:6d:2d:77:42:56:a4:a3:24:69:a3:8a:35:f5:0e:17:7b:22:
c5:be:84:34:90:a6:dd:d5:3e:d4:51:e8:5f:e4:39:57:37:63:
bd:8d:6b:ce:81:91:5a:16:fa:c3:fc:bf:09:d4:26:85:43:ce:
9e:04:31:1e:0f:19:96:d5:27:de:09:f2:62:9e:17:10:3a:b2:
f7:20:60:6c:12:4f:2c:b6:46:17:72:6e:4d:2f:c1:9f:00:e1:
30:b4:ed:8f:dd:82:d0:1c:f3:d3:45:68:82:7c:a8:0a:70:70:
f3:da:1b:6e:64:c6:f2:e9:a7:88:81:6b:4f:58:80:79:e6:11:
f1:59:3d:71:b0:50:83:6c:2d:10:c7:57:18:9f:c3:18:c5:2e:
c4:e8:5f:44:12:48:5f:e3:cf:e7:9b:03:77:85:1a:9e:41:36:
23:03:4d:48:90:28:51:bc:86:36:d9:36:94:90:ff:e4:ed:8b:
15:9b:8a:74:9c:46:fe:49:5c:f2:cf:dd:49:af:d5:13:df:ac:
fb:38:29:d6:2b:24:7a:bd:94:07:2c:4c:b8:d3:a6:f5:7e:f4:
8e:07:51:ce:32:6d:2d:60:b8:62:4d:3d:b4:76:be:72:7d:7d:
28:e5:2e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:14 2025 by rpki-client