Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6707786C97911EFA91FC449762E951A.roa
File: C6707786C97911EFA91FC449762E951A.roa (raw, json)
Hash identifier: f0dCzlHR2NC2p4d/zQd1qeaUTca2gLzr26/P758z0G4=
Subject key identifier: A9:7A:BE:C5:47:33:9A:76:E7:EB:D5:FC:E5:6C:E2:FB:D1:56:7F:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F509
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6707786C97911EFA91FC449762E951A.roa
Signing time: Fri 03 Jan 2025 02:23:53 +0000
ROA not before: Fri 03 Jan 2025 02:23:49 +0000
ROA not after: Mon 13 Dec 2027 02:23:49 +0000
asID: 17561
IP address blocks: 156.227.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62729 (0xf509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:23:49 2025 GMT
Not After : Dec 13 02:23:49 2027 GMT
Subject: CN=67774a39-67b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:93:33:d6:bb:79:9b:86:44:32:93:1a:d9:fb:
37:70:90:6d:45:98:a8:4e:45:80:f1:70:e0:3c:e1:
96:f3:ea:f9:6e:29:23:67:69:14:c8:ca:c7:e3:8a:
bf:7c:e6:06:d2:bd:cb:ea:7b:37:87:b2:36:d0:44:
97:e0:65:14:58:2e:84:91:78:f1:2c:d4:bd:14:a7:
00:97:58:66:04:71:1e:b0:6a:e1:9e:ea:74:47:5e:
af:a5:89:aa:75:b5:3d:16:dc:68:05:d9:a4:0d:cf:
a7:bb:ac:63:1e:d4:2e:e4:3e:ad:ff:eb:01:07:22:
f1:6b:97:ff:47:01:08:f2:fc:66:53:09:c8:4a:d0:
d2:68:11:da:1b:fc:f1:d1:15:1a:8f:6a:2d:8b:d6:
40:ae:aa:8d:25:f1:22:87:6c:dd:85:fa:69:9b:7b:
74:a0:78:05:27:9c:50:0f:41:59:a4:da:fa:bc:44:
88:79:26:6d:67:24:bc:38:66:fe:75:a2:06:26:7f:
36:20:fb:ed:32:43:c0:ad:b8:ae:45:aa:92:d6:82:
7b:13:b8:c3:c3:55:4b:0e:93:84:7a:78:24:ef:7e:
68:04:a8:7c:52:4e:ce:71:07:7f:3f:78:37:ef:7e:
35:22:5f:d5:b7:1f:1b:4d:e4:4f:b1:b6:ed:f0:7b:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7A:BE:C5:47:33:9A:76:E7:EB:D5:FC:E5:6C:E2:FB:D1:56:7F:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6707786C97911EFA91FC449762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:68:35:a5:83:22:0b:88:5c:9e:6d:0c:c5:f2:a6:7f:59:f6:
60:13:49:59:d7:f9:7d:8e:9d:87:92:c0:1b:b4:77:a2:c8:2d:
8e:52:35:c0:cc:b9:ef:71:9e:e2:fe:02:1b:98:09:68:ef:f3:
2a:08:84:bb:66:99:74:b9:c4:ae:7f:ea:44:d3:c9:3b:ee:aa:
85:a7:19:f8:fd:4c:ad:36:b4:f9:8d:ab:75:40:e4:01:95:ab:
82:e1:69:00:9b:97:77:ec:fe:8b:b6:de:e1:b3:22:c2:a7:c6:
b6:ba:34:a1:fe:cf:cd:9c:c6:8b:ba:94:0d:f0:7a:de:af:7c:
b4:ba:55:0a:54:54:34:ab:7c:c9:17:c9:9c:ef:5f:6f:00:17:
03:31:75:1e:9b:54:e8:6a:52:73:ce:94:0f:bd:29:75:4e:7c:
ea:ba:98:21:78:7f:b0:9e:d1:07:27:0f:3e:0e:70:32:83:7c:
9d:26:bc:0d:eb:36:51:44:ca:74:9b:cb:54:73:ee:be:10:a9:
98:51:52:a5:f3:30:42:6d:2d:56:f5:11:0c:af:fc:4b:cb:02:
ce:38:de:3f:6a:06:b9:7e:e1:a0:3c:9e:ef:f9:c3:b2:12:71:
c8:45:51:da:07:a9:e6:0e:2e:0a:c9:3c:02:89:eb:6a:7e:47:
df:17:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:54 2025 by rpki-client