Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8589972C97B11EF92E30759762E951A.roa
File: D8589972C97B11EF92E30759762E951A.roa (raw, json)
Hash identifier: myjUy0r1R6eVTnPWx3/hwr7ACPq4GBH0bM2JE3YbD6w=
Subject key identifier: 7B:F2:DA:38:99:D0:05:0C:D7:AC:D0:A2:45:65:49:B8:FA:1B:D2:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F51D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8589972C97B11EF92E30759762E951A.roa
Signing time: Fri 03 Jan 2025 02:38:42 +0000
ROA not before: Fri 03 Jan 2025 02:38:38 +0000
ROA not after: Mon 13 Dec 2027 02:38:38 +0000
asID: 17561
IP address blocks: 156.227.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62749 (0xf51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:38:38 2025 GMT
Not After : Dec 13 02:38:38 2027 GMT
Subject: CN=67774db2-a5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:35:b4:ac:4e:cc:ab:bd:16:72:e7:06:a1:
cc:01:59:8a:27:4e:e3:ab:6b:22:df:89:84:ba:dc:
b5:9c:a8:cd:2f:9d:d3:84:11:f6:32:ec:6a:e5:d5:
06:9e:b2:a7:09:85:64:22:3c:a2:1e:a4:bb:27:e3:
4a:99:93:0d:6f:0e:c7:d4:e7:42:75:f0:77:91:e1:
88:7d:db:dc:a1:8b:50:43:f9:2d:5e:82:4a:36:b3:
00:4a:4a:41:02:33:23:c3:ae:14:1d:7a:d1:a9:6e:
33:c1:d9:ef:ab:99:7b:c0:bf:2e:e5:d1:bc:65:bf:
22:73:cc:78:42:b5:c4:2c:6a:da:e6:1f:8f:21:fd:
2c:19:1a:95:b4:0f:a7:35:a0:d5:64:46:42:3a:56:
b9:a7:65:0a:ce:39:b8:2c:a3:5f:71:a9:0d:0c:62:
23:52:f6:3b:d0:9c:0a:70:2c:0a:ee:3e:36:21:d7:
59:a0:6d:98:a0:9c:6e:f6:69:7f:bf:f1:2a:13:98:
cb:e3:03:27:56:3e:25:3e:85:7a:97:b3:f8:c0:a4:
54:81:8a:14:83:ac:ff:64:e6:de:36:18:27:b7:2b:
99:57:68:90:07:4c:03:46:de:c6:ab:8e:90:b4:e9:
13:dd:7d:ea:0d:50:83:ad:d6:42:b5:78:11:0e:c6:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F2:DA:38:99:D0:05:0C:D7:AC:D0:A2:45:65:49:B8:FA:1B:D2:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8589972C97B11EF92E30759762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.248.0/24
Signature Algorithm: sha256WithRSAEncryption
64:67:84:c9:95:78:4d:be:36:80:e4:61:bb:57:29:b4:73:7d:
e4:27:a9:f5:3a:f9:31:2d:ae:46:72:54:45:e8:de:59:9b:f9:
98:7d:ca:01:32:2b:26:32:0a:84:08:21:c9:e5:4a:11:53:8c:
f5:49:52:be:7a:0d:56:5a:fd:e0:94:d6:a0:fa:98:11:f5:99:
7d:05:2c:85:93:f4:29:e5:98:44:b7:1f:63:3f:7e:46:4a:f1:
19:df:09:c6:df:26:c2:c8:a7:fb:1d:e2:7c:e1:d4:40:cb:1f:
69:33:19:e1:51:03:6f:50:86:f6:2a:48:e0:e5:f0:3c:24:08:
52:42:e0:30:36:ee:b3:23:6a:45:d0:5a:c2:75:c9:f5:af:02:
82:cf:97:9b:ae:d0:bb:3d:56:d6:19:c4:be:85:2c:5b:00:b6:
c9:51:db:ca:aa:6d:ad:bf:0b:01:c7:07:3e:78:44:3c:bc:c3:
51:91:18:c5:a2:fe:3d:37:5f:d8:47:c4:32:d5:e3:3d:85:4b:
24:14:14:d5:f8:ff:32:af:57:35:09:82:66:de:b7:d8:11:d1:
6d:a5:3a:2f:05:70:a3:2f:aa:87:c7:d0:7e:80:76:34:73:f0:
74:9a:20:2d:47:db:fb:ae:e2:8a:b2:31:d2:bd:cf:1b:8f:50:
26:65:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:53 2025 by rpki-client