Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6008928C97611EFB5934DB3762E951A.roa
File: D6008928C97611EFB5934DB3762E951A.roa (raw, json)
Hash identifier: ewow1l4prHXxeb/5N17qyywbDkSHXCK0NGjBIuSsawY=
Subject key identifier: 91:1D:0F:CE:C2:0D:7D:C5:5F:DB:73:6C:E2:1C:3C:A6:FA:90:30:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6008928C97611EFB5934DB3762E951A.roa
Signing time: Fri 03 Jan 2025 02:02:51 +0000
ROA not before: Fri 03 Jan 2025 02:02:47 +0000
ROA not after: Mon 13 Dec 2027 02:02:47 +0000
asID: 17561
IP address blocks: 156.227.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62701 (0xf4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:02:47 2025 GMT
Not After : Dec 13 02:02:47 2027 GMT
Subject: CN=6777454a-97d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:e7:dc:54:3c:5b:b0:04:3d:8c:4a:b1:fc:
3b:b6:c2:5d:f6:bd:07:46:35:e2:f8:49:ff:a9:92:
c0:71:a2:2a:8c:01:d2:80:f8:b5:e4:71:37:9b:e7:
f5:7d:3c:9b:3e:66:aa:ed:73:eb:29:d0:f2:e6:46:
4a:92:0c:67:98:40:80:2a:0a:65:04:a5:14:19:ad:
d6:a8:6c:78:ca:f2:06:5d:0a:a3:09:4a:cc:db:e0:
d4:1a:ca:83:f7:6b:91:be:f3:38:fd:08:b7:53:0b:
33:0d:71:d5:0f:c8:5d:ec:fd:0a:fe:90:88:4f:93:
e3:29:10:33:99:9b:9c:70:82:8e:35:39:6f:b8:1c:
01:b8:07:8f:bb:53:a0:f7:45:cb:63:5b:dd:c8:54:
de:b2:5a:ff:86:c3:99:dc:23:bb:06:f3:bd:87:a7:
9f:83:88:a3:da:a5:10:13:71:25:87:f2:61:82:ee:
52:a5:b7:31:cc:d9:59:f3:75:9c:b9:83:a8:72:c6:
0c:58:4c:62:fa:3a:01:57:ca:69:a7:4b:68:23:40:
ba:7f:c9:5c:ea:7d:27:be:84:1d:de:62:61:2e:f5:
80:b0:e1:94:88:f6:b7:67:ea:f4:c7:21:14:63:9f:
85:f8:17:fd:03:e7:b8:2d:b4:79:9f:de:d6:90:91:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:0F:CE:C2:0D:7D:C5:5F:DB:73:6C:E2:1C:3C:A6:FA:90:30:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6008928C97611EFB5934DB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:98:a8:63:66:70:9f:16:de:9d:19:52:b4:ed:8e:68:b5:44:
3e:0a:34:3f:3d:7e:07:a7:e8:2c:bf:d0:3f:56:56:d3:45:60:
17:75:36:2e:18:3c:29:ea:77:d7:b2:0b:ff:db:95:bf:a4:c1:
03:f5:30:93:bf:73:00:26:bc:41:e2:56:89:16:8d:0a:78:7f:
2c:77:3d:b1:4f:bb:b6:d5:9d:d4:95:0d:1d:22:f7:3c:21:3d:
25:a5:3d:d4:a5:4c:af:b3:32:34:ea:56:78:60:46:39:bb:88:
e7:9b:80:35:22:a7:c4:46:b5:a4:6f:9b:7d:ac:92:ce:f6:76:
ab:4a:f5:ff:8a:cd:c9:be:ec:1b:da:92:0c:99:c8:8f:5f:68:
4d:8c:56:db:d2:23:27:b4:22:85:6f:ff:71:5d:70:93:6d:4f:
e7:89:99:06:67:f4:0d:64:34:45:de:42:bc:5b:eb:26:93:f9:
15:1c:66:68:9d:cb:79:a7:72:15:b7:45:40:58:c6:e0:6c:aa:
1b:d1:87:15:95:3f:e5:89:61:6f:df:09:a0:37:65:97:21:0a:
20:0c:f6:81:1b:55:17:18:12:92:26:60:c8:e5:b1:7b:0e:9c:
60:41:e2:14:71:eb:a1:39:24:0b:63:9f:85:25:4b:9d:2c:d2:
fb:93:b9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:04 2025 by rpki-client