Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E19C83A8C97711EFBC00F5BA762E951A.roa
File: E19C83A8C97711EFBC00F5BA762E951A.roa (raw, json)
Hash identifier: 4bt86YPxiExLgLw+1nonI3sD2HBlt+P/rPw7kLX08UA=
Subject key identifier: A7:C1:5C:0F:4D:C1:9B:A8:49:76:5E:F8:EE:A7:C8:0F:7B:9D:19:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E19C83A8C97711EFBC00F5BA762E951A.roa
Signing time: Fri 03 Jan 2025 02:10:20 +0000
ROA not before: Fri 03 Jan 2025 02:10:16 +0000
ROA not after: Mon 13 Dec 2027 02:10:16 +0000
asID: 17561
IP address blocks: 156.227.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62711 (0xf4f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:10:16 2025 GMT
Not After : Dec 13 02:10:16 2027 GMT
Subject: CN=6777470b-1d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:4a:33:44:7c:32:2f:f3:33:f9:a2:36:8d:
0f:02:f6:ed:f1:04:ab:4c:b9:94:b2:ac:27:10:db:
ec:c8:df:5a:87:a5:5d:aa:f3:e4:c7:f8:f6:ac:38:
05:cf:7c:01:e4:96:c3:1d:b5:99:55:c2:9e:a8:9d:
7c:63:d4:d2:61:7d:92:c3:57:fa:af:18:03:23:f5:
3b:b5:cf:b0:d5:42:ac:e6:c5:d1:9c:da:e2:18:86:
65:43:a6:cd:8c:50:09:21:cd:3e:aa:59:2f:74:36:
6d:22:3c:66:d8:b2:74:d0:ae:ff:8b:da:64:6b:20:
82:7c:94:f0:60:bf:52:fc:0b:8d:49:0c:af:c7:f7:
d5:0e:05:22:ea:03:62:34:c3:ba:64:c3:4f:db:0e:
2d:8b:78:ff:2f:66:2c:88:fc:65:9f:cb:25:7f:36:
79:e7:b6:55:c4:cd:b2:fc:97:86:41:f0:60:04:cc:
ae:05:45:85:b1:5c:20:56:d4:4f:cd:04:0e:37:11:
e7:4d:f8:37:a8:ba:88:b1:2f:be:6a:c8:e6:1f:e2:
65:26:18:17:cd:b3:67:fd:4b:e1:88:7a:60:3b:92:
0e:3a:d5:0b:d7:b8:79:b4:b3:1e:b3:c1:82:bd:76:
86:13:08:a3:39:a6:f3:67:b0:ca:60:3a:6d:ef:9b:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:5C:0F:4D:C1:9B:A8:49:76:5E:F8:EE:A7:C8:0F:7B:9D:19:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E19C83A8C97711EFBC00F5BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.109.0/24
Signature Algorithm: sha256WithRSAEncryption
00:85:8a:2d:bc:88:51:34:1f:78:34:a5:15:50:41:93:ca:0e:
75:8d:8b:5d:d3:99:b0:a0:a8:99:14:17:e2:89:7e:71:aa:b6:
7f:36:6b:a9:b4:af:eb:d2:6d:b7:cb:18:04:73:9a:28:d5:3a:
bc:39:52:db:6b:f2:d0:2a:82:4e:f3:9f:30:3b:14:c4:3e:69:
5d:72:a6:10:4e:10:40:fa:ff:f3:99:92:94:ce:0b:9c:64:34:
58:ea:c6:da:50:4d:45:51:42:77:27:3f:a8:7b:8b:4e:ef:50:
91:a0:12:f6:e1:93:ff:ed:cb:1a:e4:0e:9e:dc:76:a1:53:3f:
1c:81:31:39:a5:6b:ee:37:6b:fd:3f:ac:cf:d6:93:77:c8:09:
18:1d:10:5c:ff:94:c4:27:77:4b:9b:4a:24:df:21:fb:9c:e1:
31:6f:37:d4:c4:8c:0c:f4:b8:19:9b:bf:a8:94:df:92:ee:08:
ed:e9:39:65:f7:98:f7:37:9a:f9:d0:9b:10:37:90:d8:3d:4f:
13:2a:ad:ff:18:8a:47:14:21:4c:15:13:50:bc:87:41:65:35:
74:c0:cd:45:68:72:9a:aa:7e:2c:04:00:31:0e:92:9d:2b:b9:
95:23:61:34:84:03:70:3d:26:d2:a6:99:9e:36:a4:6c:59:85:
81:8f:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:07 2025 by rpki-client