Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAA99850C35B11EFB5013364762E951A.roa
File: DAA99850C35B11EFB5013364762E951A.roa (raw, json)
Hash identifier: FRNvtdk+p57cFSZlJAbz0g/GaUJMP/IKaxMrW8BrQG0=
Subject key identifier: 97:42:2F:9F:1E:41:A1:56:54:AA:5F:FC:AB:C6:8F:01:73:DD:6A:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAA99850C35B11EFB5013364762E951A.roa
Signing time: Thu 26 Dec 2024 07:34:35 +0000
ROA not before: Thu 26 Dec 2024 07:34:31 +0000
ROA not after: Sun 23 Feb 2025 07:34:31 +0000
asID: 138915
IP address blocks: 156.227.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60521 (0xec69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 07:34:31 2024 GMT
Not After : Feb 23 07:34:31 2025 GMT
Subject: CN=676d070b-ed46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:37:57:3e:59:a8:5e:ec:1a:81:5b:c7:0a:
b1:57:44:f1:58:c6:9a:2a:3f:69:e1:cb:5d:90:24:
20:af:5b:69:a2:2b:22:3e:e4:f8:86:bb:ff:53:d7:
c2:9c:ce:5b:d5:70:20:b4:3f:a0:bf:40:d2:8c:1c:
ec:16:47:67:ce:3a:4a:1d:2c:36:b8:52:7c:b1:a0:
0a:32:cd:28:e9:2c:04:de:8b:6e:b7:1d:72:79:b7:
1c:3b:10:94:fd:c8:76:ff:c1:7e:cf:f3:3a:01:0b:
d1:68:f0:28:50:87:e3:87:27:ff:fe:4c:c3:95:6b:
e5:72:46:07:e4:4f:11:9a:2f:b4:03:ba:ad:bc:74:
3e:25:96:0e:29:6d:e0:f6:9f:c9:28:a1:26:04:36:
39:78:75:ff:21:8f:58:f0:32:cd:f8:92:5a:2d:bf:
c6:2c:c3:48:50:c9:8d:52:7a:8b:2b:4b:a8:68:e9:
c4:26:81:bf:72:84:cd:e1:52:29:7c:77:d7:93:1a:
52:d1:b9:ab:8c:b2:5f:ab:55:35:af:d9:43:da:c3:
52:9c:b5:8f:e4:f7:e0:28:b6:bf:65:7d:16:2a:0f:
57:bb:8f:68:45:f0:6a:31:22:7e:42:0b:c6:a9:8b:
3b:45:87:a6:12:a5:21:34:f7:64:ba:29:c3:7e:db:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:42:2F:9F:1E:41:A1:56:54:AA:5F:FC:AB:C6:8F:01:73:DD:6A:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAA99850C35B11EFB5013364762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.193.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5f:e3:75:a7:f0:4d:f9:ab:46:ad:84:0d:15:db:43:d2:d5:
5b:6d:8b:01:a5:e2:6b:b1:1a:4e:71:53:70:78:79:3a:fb:3e:
fc:6b:91:61:25:89:bc:96:29:4a:aa:8b:23:7c:8d:fc:55:e0:
ae:19:2f:32:5b:11:9a:77:7f:78:09:28:b2:41:1d:b7:95:2f:
89:01:2c:38:35:ca:c1:9f:5d:42:52:85:2e:c9:9e:18:fa:7d:
59:7c:4d:3e:17:73:35:2d:00:c0:ca:d8:73:3f:9f:73:54:73:
ed:10:e4:c0:f5:c7:35:74:fa:93:10:7e:11:56:19:81:ab:2c:
c1:0a:8e:a0:a6:9d:23:d7:da:ca:89:3e:43:1b:12:ab:35:d6:
dd:07:c0:f1:cb:a1:35:1b:b9:05:9e:38:b2:5f:44:5d:5e:37:
c3:79:7d:56:0e:33:17:e1:9d:b0:fa:50:64:12:2f:ea:93:0f:
85:5e:e7:0f:a8:22:1c:87:89:32:d2:2a:77:d8:d9:ba:33:cb:
7b:81:23:d7:a5:97:c3:1d:de:59:bb:7f:67:72:3f:43:99:76:
85:75:24:1b:45:9a:37:39:31:7e:ba:33:05:f2:ff:d6:a9:50:
d0:16:99:6f:78:25:d9:11:9a:23:98:ac:26:c1:2e:f7:91:39:
fb:b4:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:14 2025 by rpki-client