Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDEAC67EC28911EF88B6AFB1762E951A.roa
File: DDEAC67EC28911EF88B6AFB1762E951A.roa (raw, json)
Hash identifier: 1z3joAMBQ/hDZMUA9wW7FNC/zDiFoQsRAEr3gxKnpD4=
Subject key identifier: 9F:25:23:93:A9:E1:E5:A6:D8:47:46:C4:E0:25:28:86:89:66:D8:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E955
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDEAC67EC28911EF88B6AFB1762E951A.roa
Signing time: Wed 25 Dec 2024 06:31:26 +0000
ROA not before: Wed 25 Dec 2024 06:31:22 +0000
ROA not after: Fri 10 Dec 2027 06:31:22 +0000
asID: 17561
IP address blocks: 156.228.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59733 (0xe955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:31:22 2024 GMT
Not After : Dec 10 06:31:22 2027 GMT
Subject: CN=676ba6be-6503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:66:1c:e5:3d:a0:19:d3:6f:b6:bc:46:75:
f4:95:86:0a:4d:50:c2:0a:db:88:bd:02:ed:88:f8:
8a:0d:d1:b2:6c:09:61:65:18:68:ef:82:68:69:a9:
10:45:f5:68:36:ad:4a:15:ee:9e:87:5a:e4:bb:93:
28:1e:df:69:cb:3a:6e:50:1b:a1:ea:13:fc:f9:d9:
55:79:7d:ac:09:27:fa:49:58:3d:a7:81:31:d1:46:
db:0e:64:e8:14:98:e1:bc:66:bf:85:d2:7b:f8:ab:
98:87:ec:7b:c4:81:97:3c:12:41:32:d2:c2:ae:bf:
44:36:e5:04:30:b6:2e:c0:f2:22:93:66:42:41:09:
e0:f3:c6:72:7d:7d:58:83:03:b1:ff:db:b4:46:41:
7e:e4:34:c4:e7:19:f5:b2:f9:87:7f:93:3c:bc:0f:
7b:ef:aa:8b:d8:f5:e7:fc:17:83:21:ee:4d:62:2d:
c1:83:ec:02:09:23:f3:44:0c:e5:7c:71:27:6f:c4:
05:d0:60:ae:02:c7:3c:41:1f:ad:4c:4d:4a:91:62:
a9:f3:a1:b1:42:01:fb:fa:e7:1b:03:09:dd:bc:bd:
f3:99:39:10:49:e8:11:95:9d:bd:9b:b9:04:73:5c:
fb:f0:0e:f4:4c:a3:a7:d5:5a:93:16:b7:19:13:76:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:25:23:93:A9:E1:E5:A6:D8:47:46:C4:E0:25:28:86:89:66:D8:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDEAC67EC28911EF88B6AFB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.75.0/24
Signature Algorithm: sha256WithRSAEncryption
79:55:48:a8:6d:6f:90:75:01:ad:9e:6e:b0:b8:25:da:00:36:
62:37:9b:8d:e2:82:81:5f:cc:ec:66:94:3e:92:95:cc:c8:d3:
bc:ec:9e:5b:12:a9:35:4e:3f:be:65:60:8b:57:74:c6:8c:97:
d4:a9:5f:b5:41:e3:85:96:3b:47:27:d2:50:58:45:35:9a:06:
56:3b:59:18:b7:a2:8c:53:f7:de:55:bb:56:0a:4a:0c:79:51:
d3:83:c1:7b:81:55:0d:33:d9:c0:25:5a:40:ac:18:7b:5d:9a:
6a:3b:e2:34:d3:92:fb:24:d0:26:2e:27:ad:28:75:06:86:dc:
70:b8:27:3f:aa:52:a2:0c:a7:79:61:2c:3c:e4:45:a0:3d:3b:
31:4e:cf:e2:5f:82:14:27:fa:8e:bf:12:b2:03:68:bf:da:76:
84:8c:42:5c:09:e7:89:13:50:3c:5e:e9:a6:01:69:1c:73:45:
69:20:db:44:99:4f:a6:a1:ec:dc:d7:76:77:ff:8c:e5:8d:77:
fc:41:7f:f5:dc:0d:e9:c1:5e:3a:8d:0e:5d:21:22:f2:6a:11:
8e:e8:29:4c:66:db:36:1c:ea:66:d2:8c:9a:ec:0e:80:48:eb:
fc:fc:bc:2e:a5:fe:0e:bf:52:b9:98:16:c5:62:2f:50:57:33:
37:30:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:51 2025 by rpki-client