Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED47AC568F8811EFB367CBB5762E951A.roa
File: ED47AC568F8811EFB367CBB5762E951A.roa (raw, json)
Hash identifier: ibGX4ok2RPIL7nch9q858UmR+lt3W772UmKi27lRrIs=
Subject key identifier: A5:0A:65:09:1E:B5:32:9C:CD:14:6A:A0:1C:45:62:BE:CA:10:58:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C741
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED47AC568F8811EFB367CBB5762E951A.roa
Signing time: Mon 21 Oct 2024 08:46:13 +0000
ROA not before: Mon 21 Oct 2024 08:46:09 +0000
ROA not after: Sat 10 May 2025 08:46:09 +0000
asID: 215071
IP address blocks: 156.227.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51009 (0xc741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Oct 21 08:46:09 2024 GMT
Not After : May 10 08:46:09 2025 GMT
Subject: CN=671614d5-1676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:93:48:6f:5c:0d:03:dc:b9:2d:18:62:43:
49:ca:5e:7d:4b:33:09:2d:39:1b:4c:b7:7a:a1:40:
c5:7e:a0:36:13:5e:63:b3:a6:0a:80:d7:36:8a:09:
97:41:ab:b2:ee:a7:7a:2f:f4:87:36:73:3c:df:45:
7b:28:b0:d1:14:82:9c:7a:d4:a6:a9:6f:03:3c:9e:
47:dc:21:49:c8:21:7f:93:7c:67:70:25:f6:a7:13:
36:ce:ed:d8:9d:a3:d5:73:c0:16:65:30:c3:1a:ac:
c7:27:71:32:0b:d6:7a:66:b8:27:f1:fb:bf:29:56:
0a:06:a7:04:e1:ef:c4:b6:99:9d:de:96:22:eb:09:
f8:f3:c9:72:68:ae:4f:f4:5b:46:8b:00:32:79:09:
56:3c:67:fb:69:cb:49:be:41:0b:51:1b:82:13:b0:
07:39:fb:b2:e8:ef:b2:00:94:dc:47:e7:6e:f2:ad:
ad:f1:4a:82:61:1a:fe:08:cc:15:10:4f:04:c0:36:
0c:93:8a:1a:7d:dd:8b:44:3b:fc:b9:8e:e7:dd:78:
2b:61:e4:ec:11:a3:67:85:63:0c:6b:11:3c:62:eb:
45:b4:ff:1a:e6:ea:ee:94:d9:03:3d:46:73:a0:8e:
ee:2b:62:d7:98:3b:77:72:ad:f8:d0:3b:f5:5d:b9:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0A:65:09:1E:B5:32:9C:CD:14:6A:A0:1C:45:62:BE:CA:10:58:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED47AC568F8811EFB367CBB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.5.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9f:b6:06:7b:d7:c0:fe:2d:a9:1a:05:61:2c:45:fe:14:7c:
da:e4:1e:25:53:ff:80:d4:fc:91:02:70:4b:9f:6c:00:0e:9d:
88:ba:48:df:dc:14:4d:d4:c7:f8:3b:7c:62:f2:ed:67:e7:53:
af:7c:a0:3e:e8:09:74:62:12:41:4a:36:4c:6c:b7:79:a7:69:
ad:40:b0:60:fd:b6:a1:31:ef:59:86:99:8f:94:be:b0:25:0c:
25:43:ec:88:78:62:33:01:a1:a3:45:ce:15:5e:a1:4c:70:eb:
7f:cf:fa:cc:e4:ba:96:1a:f3:47:4a:47:3d:14:97:fa:2c:db:
56:b3:b5:99:ae:25:b9:e4:d2:9e:31:12:6b:3f:34:25:ce:26:
77:02:6d:6e:f2:23:f6:47:0f:f0:d9:0a:fd:dd:58:97:1e:81:
3c:09:b6:cc:fb:d4:45:66:69:8d:61:9e:5f:a0:c6:86:5a:17:
17:04:69:51:f3:a3:3d:83:cf:0a:56:66:99:9b:ba:77:05:a4:
c9:8e:89:57:40:ef:7c:b8:3b:7c:0c:31:ff:84:4a:d3:30:21:
b8:87:24:cc:46:30:33:5d:4b:8a:9f:27:97:66:1a:36:f0:7e:
a8:8f:a0:25:13:2d:91:92:bf:d5:32:e5:16:e3:65:2e:78:42:
98:0e:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:06 2025 by rpki-client