Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E79D6428C96011EFB087F19E762E951A.roa
File: E79D6428C96011EFB087F19E762E951A.roa (raw, json)
Hash identifier: kazUblLE7sEnOrQL8GLReMX7V/9woUe8QW/HbGe6Btc=
Subject key identifier: 28:C5:FF:8A:42:68:DB:AD:53:AC:FA:80:09:44:7E:B8:22:A6:56:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F45E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E79D6428C96011EFB087F19E762E951A.roa
Signing time: Thu 02 Jan 2025 23:25:51 +0000
ROA not before: Thu 02 Jan 2025 23:25:48 +0000
ROA not after: Sat 13 Dec 2025 23:25:48 +0000
asID: 984
IP address blocks: 156.226.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62558 (0xf45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 23:25:48 2025 GMT
Not After : Dec 13 23:25:48 2025 GMT
Subject: CN=6777207f-eb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:d7:ca:f8:b5:79:88:91:b5:9e:87:c1:87:
b7:e8:f3:eb:56:e6:20:9a:57:8c:6d:86:6a:fc:be:
3e:df:8d:70:08:3e:97:4c:38:d0:7e:3d:62:4c:98:
a6:04:c7:dd:92:51:9e:62:13:e8:82:2f:35:c9:2b:
a9:12:11:31:3d:d7:dd:fc:76:b0:85:ff:18:c3:7d:
8f:1b:d7:47:b4:8f:64:be:49:c4:c3:01:b4:b2:10:
8e:ea:db:21:66:67:2d:70:b3:2f:38:b1:10:46:fb:
6a:f0:e3:e9:03:1d:7c:b4:0b:52:cc:7d:70:f6:71:
fc:9a:c9:11:ae:ea:0b:19:c7:52:b5:ad:f5:42:74:
00:1b:50:99:71:75:91:3a:e5:07:0b:d6:8b:0e:8a:
3b:b6:a7:35:77:72:b2:be:13:5b:5c:07:e4:ea:4c:
fd:58:2d:6e:2e:73:6b:03:ce:89:e5:9b:7d:10:12:
f2:a2:9b:e8:c8:3f:78:96:b0:8b:d8:e0:9c:12:3f:
77:d2:8a:ba:95:af:e0:10:a0:d5:c1:23:23:82:eb:
e7:a2:21:4d:1b:28:93:3c:4e:32:b3:0f:db:fa:3e:
2d:30:18:ed:4f:a1:ce:a8:a8:96:16:f9:ae:cd:f4:
66:ed:6f:b8:7b:73:ca:bd:dd:47:c2:01:d2:9f:06:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C5:FF:8A:42:68:DB:AD:53:AC:FA:80:09:44:7E:B8:22:A6:56:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E79D6428C96011EFB087F19E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.225.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6b:32:94:25:eb:87:6f:c1:61:22:67:24:e4:9c:fe:08:fc:
10:38:d4:3d:32:fc:dd:4f:84:ed:ca:c4:81:a0:f0:ed:bc:f2:
0f:7a:d5:09:bd:0b:dd:85:58:7a:8f:3d:fb:ca:ba:0e:1a:1c:
47:eb:31:71:5f:b7:83:a0:b8:98:ff:51:b7:58:08:fa:d0:78:
2e:e6:a4:0d:ae:e8:8b:5f:fc:7e:94:97:95:93:3c:bd:5b:93:
a6:ef:93:1a:3e:b5:66:ee:df:cd:4f:66:27:9f:67:cf:51:fa:
79:18:b5:32:28:50:9a:98:9d:05:68:bc:3b:b5:30:11:13:3f:
28:29:10:5f:66:14:66:37:b5:69:3c:3d:d5:e4:b3:3f:a9:dd:
9e:2b:08:d5:05:45:c1:38:6d:b8:c6:51:2b:da:b5:b1:b7:e5:
91:90:bd:f1:39:21:5b:3a:e5:bd:7f:0d:55:1d:88:f6:09:b4:
de:58:5b:c0:a2:e7:b7:ab:50:02:ff:55:28:22:42:75:8b:9c:
7d:78:92:d3:d4:80:04:4b:0d:34:33:ff:75:24:a3:d1:f3:69:
0b:a3:78:9c:16:53:fe:e8:9b:be:13:2a:46:85:e8:89:2c:e5:
e6:2e:1b:52:d7:9e:d9:10:40:10:83:9e:ed:af:90:f4:f2:dd:
5d:d0:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:12 2025 by rpki-client