Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5311F00C27E11EF9B4D186E762E951A.roa
File: F5311F00C27E11EF9B4D186E762E951A.roa (raw, json)
Hash identifier: R7D4J3THsB0IAHvw25SP+4BcrgSmwK+9p+v5f7osBzw=
Subject key identifier: E8:21:56:51:0F:B8:17:AC:47:D0:DA:B5:67:F7:CA:6B:84:CA:DF:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5311F00C27E11EF9B4D186E762E951A.roa
Signing time: Wed 25 Dec 2024 05:13:21 +0000
ROA not before: Wed 25 Dec 2024 05:13:17 +0000
ROA not after: Wed 10 Dec 2025 05:13:17 +0000
asID: 984
IP address blocks: 156.227.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59599 (0xe8cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:13:17 2024 GMT
Not After : Dec 10 05:13:17 2025 GMT
Subject: CN=676b9471-c20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:60:db:73:0e:14:29:80:8d:f8:80:00:ff:
38:74:58:03:84:9c:d7:cc:75:a3:99:32:b4:2c:30:
dc:1e:67:51:0a:d0:55:da:4f:a0:22:dd:7e:cf:38:
45:cd:e9:1e:35:db:1d:74:d6:40:ec:42:27:aa:4f:
20:9b:87:19:b1:4d:44:9a:21:80:15:55:73:df:ac:
2d:ba:33:4a:f7:92:a7:fd:33:c8:e8:7d:8f:bb:51:
f9:0b:ef:b6:be:8d:3c:71:64:c0:d1:59:59:10:a7:
31:46:88:6f:bf:a0:0a:d1:1a:ca:d9:03:73:61:1e:
06:db:5f:f1:a2:59:7c:c8:4b:6a:de:11:87:f3:04:
b9:a3:2e:f6:69:33:69:e6:52:f4:94:48:3b:c2:eb:
0c:4f:47:ac:90:9a:83:1a:35:37:95:c3:20:2f:96:
e9:0c:bc:7a:2f:30:c5:71:e8:3e:cf:07:98:44:17:
07:2d:b2:75:3a:fd:1d:ff:fe:bd:ec:b5:ca:e1:5e:
f3:15:88:be:85:6b:bb:f7:81:cb:b6:8d:58:68:f7:
3b:0c:6c:76:4b:1b:2e:f5:b7:98:19:5c:ec:fc:77:
2e:9e:f9:48:58:13:07:8a:fe:e9:16:21:89:d6:32:
33:69:4f:8d:f1:e6:c7:39:ed:e9:d9:2e:13:ab:d1:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:21:56:51:0F:B8:17:AC:47:D0:DA:B5:67:F7:CA:6B:84:CA:DF:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5311F00C27E11EF9B4D186E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.185.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b5:4c:49:e2:7c:3d:60:7d:27:15:7d:59:c8:51:8d:9e:fd:
8b:72:1b:e1:67:e2:c0:5a:12:ef:76:5f:ce:96:f3:4b:01:a7:
c0:35:a0:03:48:0e:d7:14:de:da:6f:08:17:04:99:20:59:63:
3b:ad:34:4a:7b:67:3d:89:bb:31:8b:0f:05:1f:26:85:e1:73:
cd:c7:46:70:eb:01:98:41:b9:36:8f:0b:64:85:1e:d8:55:cf:
c9:da:5c:d7:3c:a2:10:f9:d4:64:bd:b4:8d:b7:72:a3:00:c7:
cc:f8:59:e5:48:2b:29:c0:9c:e3:46:1c:f1:14:08:61:1d:6e:
d5:eb:a5:7c:7f:f4:71:31:fd:67:7a:89:b4:6a:84:42:e6:82:
fa:dd:ea:2c:da:2b:d7:6f:40:fa:e6:dc:36:b6:8b:c4:92:69:
84:f3:c9:cc:b6:f4:72:17:1c:8a:14:eb:a1:25:12:bb:a6:bf:
fe:c5:3a:19:e6:fa:75:1d:e8:7e:92:c6:9a:8a:27:7e:03:02:
02:69:0b:97:80:78:f3:a2:31:2e:75:06:05:0f:62:59:92:41:
c8:ea:74:66:a9:53:56:18:6d:30:d0:6a:9b:68:9b:ac:dc:a8:
b5:e3:c8:07:31:ce:83:fd:ba:1d:22:b0:a7:55:85:77:2b:d1:
9e:ac:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:46 2025 by rpki-client