Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE72DB1ACCA111EFAF40ED52762E951A.roa
File: CE72DB1ACCA111EFAF40ED52762E951A.roa (raw, json)
Hash identifier: xHJQaFHw4r19jhHQT4SDlfYip5W1gKuv3UbWOLGhwn8=
Subject key identifier: 9B:A3:40:07:A2:3E:61:88:C6:B7:5B:0A:2D:DD:6A:2E:91:E6:D6:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F99A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE72DB1ACCA111EFAF40ED52762E951A.roa
Signing time: Tue 07 Jan 2025 02:48:00 +0000
ROA not before: Tue 07 Jan 2025 02:47:56 +0000
ROA not after: Mon 13 Dec 2027 02:47:56 +0000
asID: 17561
IP address blocks: 156.227.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63898 (0xf99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 02:47:56 2025 GMT
Not After : Dec 13 02:47:56 2027 GMT
Subject: CN=677c95e0-fb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:fc:57:c2:8c:7e:6a:8f:da:14:c6:f0:c2:
4d:e8:54:b9:73:cf:b5:f3:dc:ff:e0:9a:6e:28:db:
47:d4:b5:c2:10:aa:c4:b6:74:d5:15:25:4d:20:ef:
6b:53:21:4e:86:60:66:ac:9d:e3:35:16:cb:a7:bf:
61:03:1a:38:58:fd:19:cd:0d:d8:9d:a7:2f:1b:88:
9a:1a:69:57:39:f0:b4:2b:f2:e5:db:c6:b2:84:53:
f8:82:96:9a:e7:cf:be:59:ab:6e:6a:98:f6:93:c7:
be:a1:5c:91:1b:9d:f7:b4:d3:0f:1c:35:c4:b3:74:
c5:55:21:3f:67:5a:6a:d5:d7:76:dd:c5:a4:66:74:
cb:a1:ef:bf:67:a8:f0:83:ee:15:cb:f2:b6:a2:a6:
62:6c:27:8b:f1:36:cf:e5:f1:6f:d5:a0:17:46:dd:
e6:d5:7a:8b:32:56:a4:8e:b2:86:fe:56:a1:cf:a5:
d2:68:1d:7a:8c:67:a5:ac:4a:ce:92:4c:37:6b:11:
25:38:8a:fc:0d:35:38:1e:81:0f:34:51:4f:65:be:
2f:10:98:c6:52:cd:8b:29:13:8e:04:cf:89:f4:85:
ae:8c:5a:8f:d4:f3:cd:e5:af:b8:57:9c:af:e9:54:
bf:2a:3f:8f:4f:bc:d3:7c:dc:2b:f0:de:70:49:ba:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A3:40:07:A2:3E:61:88:C6:B7:5B:0A:2D:DD:6A:2E:91:E6:D6:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE72DB1ACCA111EFAF40ED52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:55:98:1f:5c:08:fa:9e:df:bf:d0:64:7d:56:5d:12:2f:8d:
8d:76:c7:e5:75:4a:c0:26:ef:d9:8e:aa:90:0a:8a:9c:37:3c:
64:ed:a1:39:ce:46:d3:2c:78:9f:cf:61:fd:eb:bb:fe:b6:a8:
f6:21:f8:da:5a:6f:aa:c3:be:2f:79:55:92:ee:3f:b2:bc:0c:
de:1f:4f:80:7c:f9:ed:77:49:51:8c:53:77:ad:c2:55:56:2d:
cd:89:5a:52:1d:98:64:8c:0b:cc:11:d6:6c:89:73:80:fe:c1:
55:88:53:a3:1a:09:88:57:79:6b:3a:49:6f:59:82:8c:31:ce:
53:40:d7:85:d4:b3:b4:7e:39:ec:01:fc:7d:62:5c:b5:44:a9:
15:87:fc:c2:f1:8d:e4:76:0f:0f:07:59:97:0a:87:1a:84:41:
48:95:2c:f6:6d:dd:f4:17:67:9c:56:ff:a3:e7:bf:11:32:a3:
86:cf:0f:d5:d6:ad:fc:4b:de:1c:5a:9d:b9:35:a0:53:1f:63:
2b:42:1b:09:b1:9f:3f:b7:48:c5:53:91:f9:0c:2a:57:8e:37:
fd:1b:38:ea:29:fa:bc:e4:67:8b:e8:ab:0d:c2:0d:94:93:bc:
43:ea:e7:36:88:03:9d:1f:8a:4f:5e:9f:a8:ba:08:cb:cb:10:
2f:2e:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:31 2025 by rpki-client