Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFC6BB16CC0611EFBD408B79762E951A.roa
File: DFC6BB16CC0611EFBD408B79762E951A.roa (raw, json)
Hash identifier: ShizoHyYpy8ah/0ormDIPkhmiHrrrID2m2GSCae0MgA=
Subject key identifier: A5:1F:34:55:84:2F:21:1B:CA:D0:6D:F2:36:88:B9:CF:F2:82:EC:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F843
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFC6BB16CC0611EFBD408B79762E951A.roa
Signing time: Mon 06 Jan 2025 08:18:57 +0000
ROA not before: Mon 06 Jan 2025 08:18:53 +0000
ROA not after: Fri 07 Mar 2025 08:18:53 +0000
asID: 135377
IP address blocks: 156.229.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63555 (0xf843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 08:18:53 2025 GMT
Not After : Mar 7 08:18:53 2025 GMT
Subject: CN=677b91f1-af0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:db:fd:a5:ae:45:bb:8e:02:4f:f6:c1:e3:
3b:00:58:a7:2d:9f:ed:e4:f4:3e:41:23:29:5b:47:
83:da:43:e3:a8:e6:9e:54:f0:72:9d:68:1a:17:42:
fb:b7:c6:35:1c:f7:c9:d2:42:f4:fe:ca:14:b3:a1:
3d:3f:e8:37:b3:bb:60:e5:f0:65:0c:be:1c:fc:59:
40:ee:aa:01:13:e9:a8:21:f3:67:02:dd:8e:e9:d3:
a0:3b:df:d7:a6:40:db:c8:8f:5e:35:f6:76:c3:2c:
99:21:a9:45:6b:2f:e8:05:5b:7c:a1:2e:4f:88:64:
69:2c:35:e8:c8:b4:65:25:a8:ae:6b:c7:da:53:42:
e6:ed:fc:a5:0a:eb:1a:c0:78:83:c2:52:c0:55:a6:
29:66:c6:03:50:64:0f:fb:9a:c7:97:43:b8:03:d9:
49:b4:e8:8e:ba:b5:e1:d3:45:16:78:65:be:ba:ae:
70:82:e1:77:49:bb:8c:12:77:de:94:10:5f:b1:9f:
15:55:e9:ea:35:1c:6f:3c:8b:b5:38:a4:10:4f:4f:
51:82:1b:12:d7:24:9f:9a:7c:95:86:92:2c:34:df:
27:3d:1e:88:7d:ec:b1:a1:e8:16:aa:33:d0:7d:b4:
cf:3f:39:46:35:c3:a1:a2:23:91:83:b2:18:d2:43:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1F:34:55:84:2F:21:1B:CA:D0:6D:F2:36:88:B9:CF:F2:82:EC:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFC6BB16CC0611EFBD408B79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:74:7a:82:74:77:8a:6f:eb:34:67:66:fb:2c:ad:9e:e0:48:
c5:00:15:4e:8c:92:5f:a0:e1:22:0d:73:41:59:31:d3:f1:12:
02:3e:5c:74:b8:4c:f3:34:65:35:ab:c5:9c:4c:41:20:20:3d:
89:cb:c8:38:aa:0d:ac:74:d3:76:0d:2e:08:13:f0:e9:a2:7e:
fc:d7:07:41:65:3c:a3:e3:15:19:cd:03:0b:10:09:7a:dd:62:
a9:04:cd:72:d9:a8:6f:3e:47:0f:2d:09:79:91:82:69:00:05:
a0:8f:b1:6d:4a:da:92:ee:91:29:2c:50:f2:d0:6c:d3:9a:b1:
44:c3:a5:a6:6c:9d:83:5b:fb:b3:f2:30:47:65:66:f3:37:08:
9e:46:f9:5f:ff:f2:5c:5d:72:8d:12:6a:e0:16:ff:94:9d:39:
db:49:cf:3a:3b:2e:a3:37:50:01:0a:19:77:51:d1:1c:32:b3:
be:95:77:57:3e:70:4d:5f:bb:78:a3:13:3c:b2:66:2e:45:ab:
b9:b3:6e:fc:9d:ce:40:f2:95:10:3a:0b:65:c8:1c:aa:92:8c:
39:b6:5a:79:2a:62:f2:be:7a:b0:ec:e7:bc:7c:d6:23:ea:e4:
77:3e:fd:87:8a:65:db:87:0b:fd:cf:d2:bf:1f:f1:26:2a:25:
53:74:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:17 2025 by rpki-client