Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD942228CBD111EF8673CE9F762E951A.roa
File: DD942228CBD111EF8673CE9F762E951A.roa (raw, json)
Hash identifier: fHKle2EHPWCOqBns/I8xgjp9KmK2njav0W91sJCfwho=
Subject key identifier: D4:9E:A0:88:5B:9B:5C:6F:DC:27:DF:7F:1F:A4:98:F5:91:4A:D3:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD942228CBD111EF8673CE9F762E951A.roa
Signing time: Mon 06 Jan 2025 01:59:30 +0000
ROA not before: Mon 06 Jan 2025 01:59:26 +0000
ROA not after: Sun 09 Feb 2025 01:59:26 +0000
asID: 203020
IP address blocks: 156.237.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63430 (0xf7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 01:59:26 2025 GMT
Not After : Feb 9 01:59:26 2025 GMT
Subject: CN=677b3902-9668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:25:d4:a8:2f:67:7c:77:5c:50:2a:d4:7a:
c6:0c:71:e6:00:40:89:db:ff:0c:7f:6a:56:31:54:
b8:aa:2b:89:61:05:ea:fb:2f:76:3f:24:26:c7:05:
1f:70:b8:fc:42:38:60:64:f2:88:9c:81:69:00:c1:
a1:94:a6:1f:44:78:0b:a4:05:dd:15:a9:a3:ba:5f:
95:68:50:61:39:82:72:25:aa:84:2f:5f:0c:96:27:
eb:9c:dc:f6:4b:9c:0e:4e:3e:b4:f9:63:cc:05:93:
4e:09:5b:76:5c:84:ca:04:dc:f0:3f:75:09:f7:e4:
8c:04:64:57:fe:e5:f3:e8:b3:2b:cd:c0:ab:65:c2:
34:53:21:be:83:0f:45:5f:f9:56:d9:d6:55:7d:53:
4c:78:f3:fd:9c:13:b0:3c:43:73:f0:da:aa:a1:00:
18:30:7f:0d:95:d8:5b:84:af:1e:02:2f:11:35:8e:
e6:0d:3b:d2:e8:9a:44:7a:55:6f:12:d3:85:d8:d3:
a2:2e:0c:9d:de:cb:1b:c0:b9:06:4b:56:3e:b0:50:
06:23:34:65:b0:76:f5:96:d8:01:9d:4b:85:5b:90:
12:a0:3a:84:cb:72:89:37:2f:86:da:67:ea:a0:e2:
ed:49:3e:65:fe:8a:ac:ce:15:b7:13:aa:f1:fb:e0:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9E:A0:88:5B:9B:5C:6F:DC:27:DF:7F:1F:A4:98:F5:91:4A:D3:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD942228CBD111EF8673CE9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.84.0/22
Signature Algorithm: sha256WithRSAEncryption
53:5b:2b:36:0c:87:b6:96:91:9a:98:cc:01:c8:e0:16:b2:8c:
02:b6:f6:a6:d6:3e:a1:38:49:06:a3:39:20:0a:db:76:ce:88:
3c:d0:1d:40:f6:23:a1:8a:91:b8:a2:26:7b:2e:76:9b:88:7e:
84:9f:e9:c9:5d:e9:c5:29:e1:ac:ee:75:84:ab:95:31:86:1d:
00:7c:bd:e4:8c:37:f6:09:9d:26:64:c3:6c:5c:2b:46:ec:60:
9c:69:c0:42:49:ac:51:87:a2:59:01:b0:bd:04:8c:a5:30:62:
7e:a9:ac:b7:67:35:2d:37:44:ca:7f:fa:e1:e0:ad:d2:92:19:
41:82:ab:81:6f:19:35:56:02:b4:94:63:11:cf:d0:15:17:b0:
d4:72:73:a1:eb:e9:9a:75:91:b3:6e:43:0b:a9:27:49:e0:3f:
6b:32:20:02:e2:87:aa:d9:4e:a3:1b:0c:56:99:46:6a:b7:04:
2e:01:63:88:66:34:8f:c0:50:23:24:a8:86:53:81:37:5c:80:
b0:0a:07:51:83:f7:b0:ac:60:79:c0:9d:0d:70:aa:da:66:6a:
c1:46:4a:ef:2c:33:ea:20:ca:1c:8f:c3:c1:af:5b:2b:ac:4a:
02:a0:82:60:be:2d:e3:ac:15:95:44:56:f6:5f:67:0a:e2:c0:
f0:88:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:28 2025 by rpki-client