Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6E062B6C27F11EF9D8A7674762E951A.roa
File: E6E062B6C27F11EF9D8A7674762E951A.roa (raw, json)
Hash identifier: BHLY/3LhNKa8krSF8KWsJMvmZzAi2lJIPk2dLf3xW/g=
Subject key identifier: 21:9F:A5:88:3B:DA:47:29:61:4C:29:80:C2:29:55:A5:93:A1:27:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6E062B6C27F11EF9D8A7674762E951A.roa
Signing time: Wed 25 Dec 2024 05:20:06 +0000
ROA not before: Wed 25 Dec 2024 05:20:03 +0000
ROA not after: Wed 10 Dec 2025 05:20:03 +0000
asID: 984
IP address blocks: 156.227.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59611 (0xe8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:20:03 2024 GMT
Not After : Dec 10 05:20:03 2025 GMT
Subject: CN=676b9606-b2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:7f:bc:4c:1d:47:fc:de:63:67:3b:e5:78:
26:72:3a:59:f5:20:fb:7d:96:e6:17:a0:1a:6a:bb:
5c:ad:29:8f:f2:92:69:30:12:f2:25:4b:32:4d:08:
d5:f4:66:8e:0a:62:64:31:09:de:14:5b:92:60:c7:
36:0d:5c:4a:69:3f:4d:62:d3:e7:cc:d7:35:f1:28:
04:db:be:35:10:db:7b:8d:a6:d5:14:09:d3:f7:d1:
5a:32:af:f5:a4:c3:09:3a:73:e1:8a:9b:92:21:ed:
39:9e:51:03:61:0d:b2:a5:3c:0e:1d:18:b5:03:3c:
c7:fd:92:f2:7c:df:fd:f1:7e:b3:2d:32:fc:71:ee:
63:e4:69:f4:be:e2:06:a0:bb:2c:ff:b6:15:45:3a:
ba:8b:4b:5e:e1:16:b5:22:45:19:5b:c2:52:b8:fc:
34:24:59:b4:8a:de:5b:e2:29:cc:77:5b:3d:73:4d:
a3:c5:98:15:f5:1b:17:fa:14:86:89:fe:22:60:52:
dc:34:8c:ba:7c:44:95:eb:17:f0:c0:a9:ed:91:f9:
39:26:ab:8d:0f:bd:2f:a8:c2:74:2d:49:ac:a1:2c:
a6:59:a5:b1:b4:71:f1:f3:f9:bd:15:a1:d4:c0:de:
be:c9:5f:4e:fb:b5:f4:c1:16:09:0a:89:6e:5e:1c:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9F:A5:88:3B:DA:47:29:61:4C:29:80:C2:29:55:A5:93:A1:27:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6E062B6C27F11EF9D8A7674762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.191.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:69:fa:8f:53:fb:de:53:c7:a8:2f:0b:ef:07:f7:ed:35:c2:
5e:05:6a:57:f2:e2:a2:c3:04:71:93:5d:cf:b6:d6:a7:7c:59:
58:37:c7:4a:14:8f:cd:23:73:37:67:83:9f:c0:15:6d:77:89:
51:95:d5:23:1b:08:b5:37:6f:72:dc:9e:60:18:e7:f7:d5:dc:
56:58:9d:76:02:eb:25:b7:e1:a3:9e:e5:b4:c2:a8:b6:ee:67:
ef:6b:c8:1b:0e:16:a3:1a:01:b2:45:83:99:40:ff:4a:a6:15:
24:67:f8:73:a6:39:58:a6:ea:59:39:1c:31:fc:c0:5e:de:4c:
27:2e:b3:77:b2:6e:07:e5:60:a1:b0:76:ce:9e:f1:03:91:8b:
ea:0e:d0:28:d2:59:ca:aa:5e:42:fb:99:d2:09:0d:67:7f:c0:
e0:4c:2b:b7:3e:67:b7:2e:1a:56:f7:3a:1c:07:ae:56:2c:50:
65:0c:b8:31:14:d4:59:c7:c7:38:e6:5d:28:b9:f9:67:a3:c5:
8c:58:06:e1:ab:a3:c5:79:8f:22:67:8b:56:d2:ed:db:85:32:
5f:26:a4:7a:0a:9b:19:68:92:2b:c3:be:dd:56:01:af:4f:34:
de:a8:db:40:1d:9c:ef:b1:d3:96:13:ab:0f:f7:be:1e:39:96:
aa:af:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:31 2025 by rpki-client