Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA14B0E2C94511EF88436973762E951A.roa
File: DA14B0E2C94511EF88436973762E951A.roa (raw, json)
Hash identifier: ektEzRK4bVWCMm1dVOJw9uz6U7L+AvruekoG+KfOOG4=
Subject key identifier: D7:4F:26:7F:95:80:C8:FE:6C:85:6E:6E:1A:E1:B6:EE:A3:F3:3D:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F35C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA14B0E2C94511EF88436973762E951A.roa
Signing time: Thu 02 Jan 2025 20:12:12 +0000
ROA not before: Thu 02 Jan 2025 20:12:08 +0000
ROA not after: Sat 13 Dec 2025 20:12:08 +0000
asID: 984
IP address blocks: 156.225.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62300 (0xf35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:12:08 2025 GMT
Not After : Dec 13 20:12:08 2025 GMT
Subject: CN=6776f31c-b7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:33:00:44:3d:3e:28:8d:a5:a5:e2:48:60:
b6:da:eb:26:57:4f:af:00:b4:78:b8:d9:de:0a:fa:
4e:e4:f8:94:8a:26:2d:1f:15:10:02:33:fd:7f:d5:
6f:92:9a:a0:d8:63:22:c7:c2:46:00:03:9d:a7:76:
d1:2c:93:98:ea:9b:c2:bd:ae:53:d4:26:c7:7e:7a:
0b:a5:a6:cc:42:b6:82:e9:e7:12:d5:a0:04:fc:73:
ca:d4:eb:8f:7a:b6:fc:e8:b9:54:f9:68:d5:e2:90:
0a:57:79:08:ca:16:fe:e6:88:c3:dd:f4:6d:75:46:
7f:9e:77:4b:4f:50:69:c9:46:85:1f:4b:79:b0:b1:
9d:97:5a:ac:39:9e:14:2e:f5:e4:6f:ae:b9:78:08:
d1:28:9b:cc:d5:82:ea:b0:d7:0a:2b:39:bd:67:60:
5a:b5:24:06:e5:94:79:3b:ce:d9:a5:e2:32:cc:c1:
0d:99:7b:4d:b1:93:03:10:b6:49:d5:23:c2:c0:d6:
3b:b8:cb:6f:8e:9a:d6:c1:80:37:9c:9b:cd:57:fd:
c5:b5:d7:23:87:6b:7e:04:9a:f6:45:82:d7:ad:89:
af:4f:46:2a:19:62:ab:9e:22:30:db:5f:58:5f:db:
93:db:37:51:8f:a2:6c:03:f7:72:cc:e4:bd:89:f4:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4F:26:7F:95:80:C8:FE:6C:85:6E:6E:1A:E1:B6:EE:A3:F3:3D:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA14B0E2C94511EF88436973762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:10:23:12:c4:b3:13:af:b9:70:ef:eb:1e:68:dc:69:97:65:
7b:5a:ad:47:0c:00:0b:e9:a6:ab:a7:9d:3d:a9:be:2b:e4:b9:
03:86:f7:a5:01:4b:cc:91:d6:fc:ad:42:0a:ef:b6:e0:f6:d9:
19:64:dc:d9:b9:fd:d1:74:31:de:70:ce:ea:09:db:ec:75:4c:
f8:87:f6:9d:b4:af:e1:a0:69:58:89:e9:05:13:6b:d9:4d:87:
ed:ce:5d:20:a5:a5:af:d5:e2:1f:c3:78:47:3c:a6:59:18:19:
36:c4:4b:96:26:4b:9e:5b:2a:5d:ff:ae:9d:25:5a:53:c3:3d:
84:a8:78:bb:c3:85:a1:86:d8:74:2b:fc:0f:29:5c:53:aa:2b:
3d:bd:f8:fd:c0:b8:29:83:9b:96:da:32:4b:d4:bf:ef:71:d9:
53:c9:72:a4:81:40:f3:7e:02:10:bf:43:85:71:f1:9c:74:36:
eb:f6:02:3b:92:06:5f:91:10:26:7c:f8:3f:f6:5a:d5:82:1e:
51:f3:08:2d:30:d3:30:34:50:4c:24:0b:89:72:9e:90:b8:0b:
31:39:04:84:8f:88:0e:df:84:9c:2d:d6:60:46:8f:c1:ee:65:
ec:59:88:42:cb:f5:51:8e:72:52:a9:63:7e:98:da:28:e3:53:
10:23:61:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:41 2025 by rpki-client