Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAC27D24C97511EF9B1A9CAB762E951A.roa
File: CAC27D24C97511EF9B1A9CAB762E951A.roa (raw, json)
Hash identifier: 1kmY3TN04MhmQGmojTjuc2VOForQH6YFmVb9CtKsRz8=
Subject key identifier: 4B:E0:91:FE:8D:77:DF:24:5B:D0:C7:6F:F1:67:FD:F2:C6:68:CA:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAC27D24C97511EF9B1A9CAB762E951A.roa
Signing time: Fri 03 Jan 2025 01:55:22 +0000
ROA not before: Fri 03 Jan 2025 01:55:18 +0000
ROA not after: Mon 13 Dec 2027 01:55:18 +0000
asID: 17561
IP address blocks: 156.227.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62691 (0xf4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 01:55:18 2025 GMT
Not After : Dec 13 01:55:18 2027 GMT
Subject: CN=6777438a-d46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:4d:8d:d4:db:4e:56:3d:f0:2b:1f:cb:89:
e6:40:27:42:80:e0:d5:00:a2:bd:b8:7b:66:5c:df:
db:d2:4f:f7:1c:b3:15:33:14:61:20:94:8a:38:09:
ce:29:fe:b6:fe:16:93:57:4d:fa:2c:27:65:11:e3:
bd:20:5a:d4:49:7b:18:34:52:74:82:28:1d:c1:85:
82:db:48:66:4a:3b:f3:54:37:cc:a6:f3:78:a0:f8:
1e:12:44:58:16:a3:95:c1:02:f4:b8:98:b5:fc:e7:
d3:b3:81:bc:89:52:d0:07:14:08:ac:69:36:b5:c3:
e2:fd:12:5c:14:30:91:6f:f5:bb:e6:7b:6e:45:6d:
fa:0a:79:0a:9b:47:37:e0:49:26:cb:a5:0c:59:3d:
43:ed:92:02:43:69:46:96:32:dc:cf:1b:06:d3:fe:
a7:d1:3d:c3:1d:fd:b6:64:a6:f5:f2:b8:16:b4:85:
d2:36:34:b7:d3:40:0f:9b:5d:c1:55:84:57:48:cf:
7f:66:ce:d5:c2:ad:c2:82:3f:57:58:62:20:c1:2f:
f7:7f:e1:12:10:e7:ad:87:73:8c:5d:f0:4b:c0:82:
1d:c8:ca:43:8a:4c:57:7d:b6:bc:a4:d7:49:18:60:
45:88:00:13:4e:06:eb:da:67:c7:e9:45:e0:07:9a:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:91:FE:8D:77:DF:24:5B:D0:C7:6F:F1:67:FD:F2:C6:68:CA:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAC27D24C97511EF9B1A9CAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.99.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1b:c7:61:1f:a7:46:3e:25:52:aa:c6:59:9b:e9:27:19:ac:
a8:0c:3a:11:fd:e2:b3:a4:0b:c2:45:8f:f2:31:e1:f3:48:e7:
40:21:1e:c7:87:a8:81:09:5e:c3:cf:3b:ca:08:b8:84:9f:7f:
4d:90:f7:a3:2e:89:80:78:05:d2:dd:a7:fc:a7:ea:59:ba:2c:
d3:be:c6:6c:c0:cb:ec:fb:cf:ce:b8:c2:2f:e2:37:d0:a3:d2:
e1:fb:c3:1b:2a:30:b3:73:ec:50:1a:a0:1a:4d:2c:45:f4:e8:
97:5e:18:d0:f9:19:85:9e:61:83:a7:93:5f:c3:25:4b:ba:41:
22:37:fd:c0:d3:f9:8c:8f:00:f3:cd:26:3b:4b:32:0c:90:0e:
c3:93:8a:c0:f3:7c:11:29:56:f0:67:47:df:c3:51:43:9f:c2:
70:29:5b:e3:b8:55:90:73:dc:5f:af:0a:5c:2d:71:bb:36:34:
5b:0e:f7:dd:43:c3:89:c0:6b:f9:96:cb:0d:da:bd:bc:bb:fb:
04:78:07:dd:ec:81:1f:64:dd:3d:46:92:ce:22:a9:01:65:99:
92:cf:dd:92:77:87:59:d7:db:5e:a9:df:95:c5:fd:46:f5:09:
a0:c7:21:a0:d8:0a:a3:19:93:f9:83:8f:7d:6a:59:4f:4d:44:
b4:af:c0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:23 2025 by rpki-client