Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF61ACF6CC9311EFB47FB86A762E951A.roa
File: EF61ACF6CC9311EFB47FB86A762E951A.roa (raw, json)
Hash identifier: TV7U+JQB93n9xszTAy9sQyEIdMtVZqaaHjExFI1GajA=
Subject key identifier: CA:2A:70:7A:3F:D2:E4:BC:7F:5E:66:61:1A:67:8D:B0:A1:EB:7A:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F924
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF61ACF6CC9311EFB47FB86A762E951A.roa
Signing time: Tue 07 Jan 2025 01:08:42 +0000
ROA not before: Tue 07 Jan 2025 01:08:38 +0000
ROA not after: Mon 13 Dec 2027 01:08:38 +0000
asID: 17561
IP address blocks: 156.227.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63780 (0xf924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 01:08:38 2025 GMT
Not After : Dec 13 01:08:38 2027 GMT
Subject: CN=677c7e9a-fd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:c9:9d:7b:1c:db:29:a0:dc:59:c6:75:63:
16:97:e6:89:5e:2e:2e:d2:46:05:b4:78:1c:2d:1f:
1c:8f:52:3d:1e:cb:87:b3:9f:10:d0:22:4f:88:6f:
84:86:f2:10:9d:b1:d2:e3:b0:f6:ff:7e:dc:6c:17:
05:24:78:dc:4b:bf:7b:13:fc:2b:8d:68:66:36:36:
17:92:a2:5b:81:ef:fd:97:8f:15:54:d8:da:2d:4f:
5f:83:90:3e:ae:85:2c:cf:e1:02:d0:69:23:52:15:
09:cc:15:90:29:94:29:18:df:9f:fd:7e:95:3e:62:
50:ab:be:9f:5b:61:0d:03:54:80:cd:f9:de:5a:e3:
26:98:61:6d:5b:65:cb:f7:20:27:01:28:c4:4c:65:
f2:3f:d5:ec:68:48:3a:83:c4:5f:36:01:41:c4:c7:
b0:23:a6:90:7e:7b:0f:29:f8:29:92:10:6c:21:37:
1b:cb:4c:ed:23:89:bf:d8:bd:51:df:25:c2:05:d4:
46:4a:70:b1:9a:3e:2f:a3:cc:04:c0:89:a4:da:a8:
49:68:59:3f:d1:5a:be:dd:ba:70:31:c5:1b:6a:81:
fd:ab:5c:ff:18:ce:b0:6c:50:f4:20:07:8d:0c:1a:
17:68:34:d6:3a:55:f0:8c:05:5b:d2:08:a1:34:ed:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2A:70:7A:3F:D2:E4:BC:7F:5E:66:61:1A:67:8D:B0:A1:EB:7A:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF61ACF6CC9311EFB47FB86A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.70.0/24
Signature Algorithm: sha256WithRSAEncryption
43:88:02:62:35:83:e9:94:41:38:26:a1:ac:a2:fb:12:d5:9d:
97:3f:d4:bd:10:86:77:f4:cb:cb:6a:81:8b:ba:68:f3:7c:34:
1f:50:d9:fa:e9:25:6a:1f:65:fb:d8:53:ce:ed:0a:d0:f1:9b:
85:12:6b:85:40:16:fd:12:86:5e:f2:a3:5f:ac:5d:50:8c:a1:
e8:ef:b1:f9:22:8d:8b:00:d5:5d:3c:87:3a:d7:48:bd:0c:27:
0a:f2:1b:f0:1f:3a:51:2b:45:11:08:02:d8:74:40:8a:00:ef:
db:ec:5a:7f:d1:3e:5a:49:a1:c2:ac:9c:26:49:d2:c3:95:70:
13:d5:97:9d:30:5e:73:83:2b:1e:02:4f:b3:42:b1:d8:cf:f9:
5b:60:09:98:b7:a2:fd:8c:6a:34:94:c2:98:b3:f9:cf:f0:6b:
ff:51:4c:b9:b5:6c:b0:af:f1:f6:50:5f:28:1b:4d:64:61:81:
fc:a7:26:70:a4:61:5d:1f:a7:f4:47:ed:8a:b0:39:f7:b7:0c:
8c:95:72:62:6f:c4:ce:15:6b:1e:0e:2f:5e:33:99:36:8c:88:
fa:3b:ab:b9:5e:b0:5a:e8:be:8f:cc:b0:cc:e8:8a:97:b0:49:
d7:48:be:5e:8a:1e:32:98:c4:d9:9b:35:6f:a6:e8:e1:7d:71:
ac:d6:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:24 2025 by rpki-client