Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C61CE7F0B2E611EFB49844AF762E951A.roa
File: C61CE7F0B2E611EFB49844AF762E951A.roa (raw, json)
Hash identifier: TAtuaBhfQTgTo/98VuB5tW+CGl+cRUSOQEk29aQsYGs=
Subject key identifier: 34:91:BE:02:42:F4:27:69:63:F8:91:5A:B8:56:4C:79:3B:BC:FE:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DFC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C61CE7F0B2E611EFB49844AF762E951A.roa
Signing time: Thu 05 Dec 2024 08:56:11 +0000
ROA not before: Thu 05 Dec 2024 08:56:07 +0000
ROA not after: Fri 24 Oct 2025 08:56:07 +0000
asID: 62816
IP address blocks: 156.228.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57281 (0xdfc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 5 08:56:07 2024 GMT
Not After : Oct 24 08:56:07 2025 GMT
Subject: CN=67516aab-84ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:93:13:4e:58:38:40:76:1d:fe:36:5d:0c:
77:4c:b0:ae:97:6d:21:8a:57:15:e2:31:da:f7:55:
90:b4:d7:6f:fe:d5:9e:73:47:83:73:a8:e5:a1:74:
35:d4:1c:42:3a:53:38:9e:8b:71:38:58:e3:6f:4e:
f6:18:12:20:ce:72:c4:cf:25:68:f3:09:03:79:25:
d8:4a:a8:0d:7b:05:19:5a:10:e6:fa:8e:6a:14:4a:
87:29:1d:c9:12:f4:18:aa:23:65:87:0a:92:af:a0:
f1:07:76:10:fd:77:8a:48:97:23:e2:33:12:11:60:
db:41:d0:67:0a:50:84:2c:fd:6b:f9:05:e9:04:2c:
da:3d:b2:23:f2:ee:65:80:4b:e7:da:af:c3:cf:bb:
4f:3b:8f:b8:57:69:4f:9e:a8:4d:84:04:e1:69:18:
20:11:af:f8:cc:d1:48:1d:6a:b4:b7:a8:be:72:ed:
96:18:69:f8:7a:4e:2d:02:fa:65:26:17:7a:df:87:
74:72:26:eb:8e:d1:77:ea:e2:88:f3:63:86:ec:a2:
05:65:f0:1e:bb:11:71:ed:b4:d0:08:4d:28:d4:95:
b5:c2:f1:92:63:bb:38:29:55:7d:81:63:f3:b9:41:
1d:69:ac:9d:1b:c9:03:dd:8e:4f:7d:0a:7b:ee:40:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:BE:02:42:F4:27:69:63:F8:91:5A:B8:56:4C:79:3B:BC:FE:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C61CE7F0B2E611EFB49844AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.122.0/23
Signature Algorithm: sha256WithRSAEncryption
94:75:14:39:89:47:b7:03:f0:f2:a7:51:0d:5f:15:37:de:b1:
4f:1a:cf:e6:61:02:ad:1a:86:d0:06:fa:c6:e2:00:99:72:1c:
97:86:e7:1a:17:a9:9e:2d:aa:28:e9:55:f6:70:20:b1:17:32:
52:f2:33:ba:16:d4:5a:78:5c:c6:64:3c:a1:7a:b5:9e:09:6f:
8e:4f:a5:53:b3:a5:21:ed:67:d2:64:36:77:58:c4:58:36:87:
fb:de:07:61:4e:eb:14:af:0a:37:45:14:1d:e5:03:24:48:86:
77:ca:9d:71:45:00:85:94:b6:8f:28:5a:3f:e1:ba:ac:36:4e:
a6:18:c1:dd:ed:c6:a9:8c:97:21:af:c9:4f:da:72:7c:1a:bd:
b4:a9:f4:ac:77:d1:40:3f:6a:7f:61:e7:63:54:95:81:aa:f2:
45:b1:a0:b3:25:44:32:db:80:22:f1:d3:b4:d9:5f:01:1e:6b:
b2:30:05:5d:f9:fc:f4:24:30:17:f4:e9:ef:fc:48:b0:ff:97:
10:7e:08:49:91:c6:67:dd:15:8a:dc:cc:65:39:71:a8:65:3c:
b6:60:5e:bc:5a:ed:7c:b7:39:a6:64:a5:10:e8:d3:3b:b3:c2:
f8:fb:a7:cf:cb:c4:2f:1b:86:99:31:48:9b:b6:f3:2a:2b:63:
99:1a:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:09 2025 by rpki-client