Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCADE672C28111EFAA67457F762E951A.roa
File: DCADE672C28111EFAA67457F762E951A.roa (raw, json)
Hash identifier: Fc8k/qtHl0cFvSWONibmzqN/0E0QYYs87PVAVq/lhQY=
Subject key identifier: 30:2D:52:59:D6:D0:35:5C:90:DE:D1:0B:19:32:A8:53:C8:CB:61:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCADE672C28111EFAA67457F762E951A.roa
Signing time: Wed 25 Dec 2024 05:34:08 +0000
ROA not before: Wed 25 Dec 2024 05:34:04 +0000
ROA not after: Wed 10 Dec 2025 05:34:04 +0000
asID: 984
IP address blocks: 156.228.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59635 (0xe8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:34:04 2024 GMT
Not After : Dec 10 05:34:04 2025 GMT
Subject: CN=676b9950-7d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:9e:a3:dd:1f:06:36:07:9b:b8:cc:55:aa:
a3:32:c3:18:7b:a0:73:d7:46:7f:44:13:41:e7:ca:
ac:31:12:41:d2:c7:90:ff:cd:b3:a0:32:93:19:93:
b1:2e:7b:67:ea:ab:a9:c6:d2:8b:86:6d:38:21:44:
61:7a:f4:a5:4c:43:6d:e4:62:b1:cb:a6:67:7d:99:
62:4b:86:e3:82:d6:42:8a:c9:7f:f3:dc:60:6f:33:
8e:02:29:52:aa:d0:cc:cf:e0:d2:37:a1:ea:c4:02:
17:9c:17:5b:8f:be:06:0e:f7:d3:07:6a:24:b6:c5:
6f:2e:28:70:73:5b:e5:7a:2e:1b:94:57:73:7d:a8:
3b:5a:3e:ee:33:c3:74:77:8f:1b:eb:33:13:d8:04:
8b:75:ab:98:76:1f:18:c7:55:69:f4:a3:76:4a:01:
e5:7d:d6:e8:5d:64:3a:9a:06:25:27:d3:67:e2:24:
1e:ee:28:a7:e8:0b:3f:cc:9e:d8:0c:1a:60:71:8b:
65:ee:4e:7f:05:fe:65:0d:91:dd:e6:bb:e5:33:ad:
83:47:2f:ea:4a:be:55:aa:6b:7a:35:ec:c8:b3:43:
8a:27:8f:2f:9e:99:60:88:02:3f:bb:9f:01:67:3b:
6e:a5:a5:4d:60:6b:77:c1:36:83:5f:f5:34:f1:74:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:52:59:D6:D0:35:5C:90:DE:D1:0B:19:32:A8:53:C8:CB:61:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCADE672C28111EFAA67457F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.24.0/24
Signature Algorithm: sha256WithRSAEncryption
41:df:cf:df:49:98:7f:93:b4:51:81:a4:76:84:13:a1:4b:c9:
4f:f1:ea:2f:05:d0:f3:ce:d5:d5:12:b6:59:ef:ab:ee:cb:c1:
2a:2b:29:3e:65:f2:77:df:b2:29:b6:77:23:88:91:d8:9f:35:
8f:78:e1:85:ff:a3:0e:9e:5f:54:9d:11:18:0a:96:6f:4f:fb:
cf:63:bb:fb:02:d1:b7:6c:b0:4a:8a:4e:0d:5a:3b:95:aa:22:
92:be:a7:c8:11:d0:2a:26:0f:5a:c9:f5:67:f8:df:e4:f1:76:
00:3a:b1:15:28:d2:4a:60:35:2f:04:d5:7e:3a:94:61:fb:fc:
55:a7:a3:37:41:87:af:d6:d9:7c:ba:0c:2d:41:02:e2:00:d4:
c3:bd:84:4b:bf:e3:ef:a0:24:dc:de:db:7a:a8:14:69:cd:90:
5a:0a:2b:cd:88:5d:23:91:99:2d:99:bc:68:04:51:7d:a8:fa:
58:98:de:c5:b8:46:ef:17:e6:6d:3d:0b:a2:82:da:82:38:70:
de:6e:eb:7d:9d:f7:67:06:40:5b:f7:24:dd:47:6a:e3:1b:22:
d6:90:77:8e:b8:cf:f6:fb:c3:38:a9:a3:e2:f5:dd:93:8d:53:
53:56:2d:c8:ef:76:7f:c1:74:31:ee:e7:de:15:d4:85:37:b2:
95:94:5a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:41 2025 by rpki-client