Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F336EDFACC9D11EFB45D1EB5762E951A.roa
File: F336EDFACC9D11EFB45D1EB5762E951A.roa (raw, json)
Hash identifier: xhBCPAY4ujTNAZX8bIB9RfHlDW+t6hBdXHdUbHBFDTc=
Subject key identifier: 20:EB:C2:1C:22:D6:4B:C8:91:EC:4B:D4:C1:EE:18:79:21:88:D3:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F978
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F336EDFACC9D11EFB45D1EB5762E951A.roa
Signing time: Tue 07 Jan 2025 02:20:24 +0000
ROA not before: Tue 07 Jan 2025 02:20:20 +0000
ROA not after: Mon 13 Dec 2027 02:20:20 +0000
asID: 17561
IP address blocks: 156.227.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63864 (0xf978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 02:20:20 2025 GMT
Not After : Dec 13 02:20:20 2027 GMT
Subject: CN=677c8f67-ae3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:63:68:3a:b8:5b:70:1d:14:6e:cb:58:3f:
6d:3c:80:15:ed:2a:12:21:7a:50:4b:7e:3f:b0:fe:
42:d0:91:76:eb:e9:61:b5:44:af:08:ec:8c:b8:d6:
ad:c7:99:ea:d2:16:0a:7f:b8:7f:a4:96:39:2d:6e:
22:e9:ab:b4:7c:76:83:a9:a9:22:c3:ac:7f:2e:44:
1c:ef:c2:1c:57:1f:39:0a:73:bf:86:9a:73:60:24:
71:f2:e6:52:a5:5c:97:10:36:de:18:24:b1:38:69:
09:e8:e6:a9:5e:1f:c9:d7:1b:87:09:e1:01:bd:fb:
1c:6e:df:04:ed:4e:7d:f9:ac:15:93:4f:cb:94:83:
14:90:2a:ff:29:53:32:7c:d2:b7:5e:38:2f:96:69:
ad:a8:e4:a2:91:a5:ef:b6:f9:37:e5:db:ca:3c:5f:
d2:17:f3:62:80:82:f5:b8:07:e9:17:d9:ab:dc:98:
59:fe:44:64:7e:52:e5:b9:70:1d:9e:b5:ec:3d:12:
f7:51:72:39:28:76:b2:d2:ea:d9:69:8d:ef:57:3c:
dd:ca:d2:34:3c:ef:d6:62:f7:56:cc:17:c8:bb:1a:
cc:d1:da:64:e4:1f:f8:b4:57:0c:9a:39:96:cf:20:
1d:10:b5:b0:f5:57:aa:19:92:95:35:6a:89:b1:51:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EB:C2:1C:22:D6:4B:C8:91:EC:4B:D4:C1:EE:18:79:21:88:D3:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F336EDFACC9D11EFB45D1EB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.114.0/24
Signature Algorithm: sha256WithRSAEncryption
36:8d:02:1c:5b:56:56:73:ef:31:ed:6b:86:6f:db:e8:d5:0f:
a6:ef:e7:91:56:48:7e:29:3c:88:44:d7:94:a9:e6:25:0b:f0:
25:fd:6c:b6:47:83:16:1a:20:94:98:c1:a1:c6:ab:0c:ba:d2:
e5:59:d1:56:cd:5d:bf:1e:1a:10:70:ca:83:dd:af:e7:8c:2a:
f6:4f:1b:07:81:d0:68:47:dc:b3:33:95:72:df:6f:d6:be:60:
30:ca:ae:0b:c7:f4:07:e9:d2:be:e0:f9:88:6d:ac:c6:25:98:
30:7e:ec:ce:e7:77:4c:dd:44:dc:6d:21:3f:7d:37:27:ec:fd:
bf:9f:94:87:89:d0:7a:70:be:40:a0:86:f6:92:5c:5f:42:31:
ce:a3:3d:8a:12:85:e2:bc:88:8f:a3:bb:9b:87:ce:0b:8e:97:
65:b3:45:7f:e5:b9:7d:47:bb:be:1d:5d:fc:3b:93:5f:d6:9f:
50:95:74:06:77:b6:75:5b:72:27:81:6b:1f:89:08:d7:83:ba:
7f:e8:2d:e8:da:8b:9b:06:6d:7d:42:a3:59:2c:10:8a:88:3a:
60:e3:27:98:98:f5:42:69:5e:cb:51:63:39:75:88:11:d7:05:
c5:08:e0:50:12:63:13:90:f6:27:1e:5f:f8:ea:cf:a2:1c:83:
3f:64:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:51 2025 by rpki-client