Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6D3B01AB85511EFB8792962762E951A.roa
File: C6D3B01AB85511EFB8792962762E951A.roa (raw, json)
Hash identifier: cuS8s0JMJam7PcP00pw+JZ3+VWel3kA5l2ONFIYqoV0=
Subject key identifier: 49:5C:14:12:27:88:D1:AD:AF:74:72:82:42:EC:81:CA:A9:0D:A2:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6D3B01AB85511EFB8792962762E951A.roa
Signing time: Thu 12 Dec 2024 06:53:22 +0000
ROA not before: Thu 12 Dec 2024 06:53:18 +0000
ROA not after: Thu 06 Mar 2025 06:53:18 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58028 (0xe2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 12 06:53:18 2024 GMT
Not After : Mar 6 06:53:18 2025 GMT
Subject: CN=675a8862-71b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:8e:f1:08:1b:12:d4:43:b3:84:7e:3e:ed:
e7:96:30:a9:98:9f:79:62:7b:44:e1:00:0c:e4:7e:
45:22:59:88:c7:26:d0:03:a1:43:bd:70:11:63:d0:
01:e9:ce:23:f0:a5:25:a0:8e:97:1c:bd:11:bc:cd:
1d:0d:ff:29:bf:ca:72:d3:60:f7:29:76:64:1f:d5:
54:a8:81:62:88:80:16:43:02:bd:f4:6c:35:28:6a:
1a:7f:34:29:62:18:c7:fb:59:30:a4:04:b0:eb:5f:
5f:9a:c7:a7:e0:55:e0:b0:f9:49:e1:b5:1f:9c:fb:
4e:4a:65:24:19:8a:ee:b1:5a:26:21:8d:e8:d8:f8:
b9:26:8e:2e:2d:db:26:30:11:15:43:82:5f:b4:4b:
0a:67:66:6d:95:e2:66:a6:41:48:5f:4c:ed:66:02:
d8:57:60:5c:51:16:c9:10:e1:5d:56:0a:b8:5a:e0:
a9:45:ab:52:e0:e9:77:05:31:8c:c5:55:08:38:be:
8d:02:58:9e:49:e3:92:3d:8a:16:c2:eb:e1:01:36:
d4:61:7a:6b:45:4d:7e:10:76:f2:ec:73:ac:36:5b:
37:76:6f:0f:f7:c2:a7:7b:da:e1:57:4c:6d:cf:21:
2f:7a:a7:d7:1d:06:e2:10:c1:05:b0:e7:c8:a2:5a:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5C:14:12:27:88:D1:AD:AF:74:72:82:42:EC:81:CA:A9:0D:A2:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6D3B01AB85511EFB8792962762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:96:19:ed:19:8b:4f:d1:ae:2f:ca:d7:b7:fa:04:4d:55:f5:
83:26:78:ec:90:e4:d4:8e:07:53:d2:5b:de:94:02:c2:43:cd:
7e:e2:8c:2b:9f:a4:7c:5b:a1:73:ff:92:e8:96:c2:f4:c8:e3:
ae:ce:f0:27:7a:f3:28:96:3c:39:2a:d6:48:05:a6:33:12:de:
06:f5:5b:e0:7e:dd:b8:7f:35:2c:ad:e9:54:ce:79:78:b8:62:
01:b5:cd:19:9a:2f:e2:4f:48:d0:f4:b6:2c:ed:b9:d0:c3:f8:
42:88:8b:3b:96:28:7c:0a:8d:b5:6c:3d:58:10:5b:b5:39:2e:
36:af:20:20:74:7b:e0:6e:04:4b:cb:ea:de:cb:1d:55:e3:f5:
5f:aa:cf:c2:3f:06:b1:c7:5c:a6:e1:4d:6e:37:b8:ba:05:49:
b6:9f:e7:13:5e:1f:2f:8e:c0:8c:ad:7e:1e:4d:88:cf:09:6f:
cd:41:96:cb:e2:15:8a:f2:bf:9d:61:c3:40:e4:72:e8:bf:84:
64:b1:5c:65:ed:43:52:0d:ea:dd:d0:8e:a8:82:f3:f8:64:b3:
0a:50:02:da:46:97:df:95:6a:18:52:b9:e6:b1:bd:91:dc:0b:
c1:12:a9:51:cf:a9:39:44:ee:b1:7b:64:16:96:7d:b6:a1:c3:
ba:01:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:58 2025 by rpki-client