Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6DBC196C97E11EFA35B0670762E951A.roa
File: F6DBC196C97E11EFA35B0670762E951A.roa (raw, json)
Hash identifier: Ul38+5kahEWI2acPaG2hn+Mih8JtC8nGnZpWJhARuIk=
Subject key identifier: 26:E6:9F:8A:97:BE:01:90:10:DB:14:9B:CE:E5:1E:3B:C9:1E:B4:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F53B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6DBC196C97E11EFA35B0670762E951A.roa
Signing time: Fri 03 Jan 2025 03:01:02 +0000
ROA not before: Fri 03 Jan 2025 03:00:58 +0000
ROA not after: Sat 13 Dec 2025 03:00:58 +0000
asID: 984
IP address blocks: 156.229.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62779 (0xf53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 03:00:58 2025 GMT
Not After : Dec 13 03:00:58 2025 GMT
Subject: CN=677752ee-f070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e3:e5:61:9d:8f:fa:d0:2e:ac:c6:3a:57:92:
19:de:67:f0:07:b0:20:81:50:bd:da:33:07:18:1e:
47:a6:a1:ba:fe:53:51:e2:20:38:ee:7f:c5:62:43:
df:c7:f7:4a:41:1c:42:fa:3c:a9:30:94:3f:10:78:
63:eb:96:9a:30:5d:e1:04:cf:a4:fa:55:f1:9e:e8:
51:30:49:65:25:44:4a:27:01:35:b1:27:ef:0d:84:
c7:a9:dc:52:7a:02:98:da:ca:9d:fa:e2:4a:73:e5:
0a:b1:b4:f1:d6:dc:44:b3:93:b5:69:e4:f3:a4:9b:
a0:78:bd:70:d9:97:e1:93:13:81:1e:fd:19:56:5c:
74:95:db:2a:42:32:a4:42:7d:43:7e:0d:ef:2c:e0:
6e:6f:b6:4b:f3:71:86:e1:46:2b:30:05:b1:92:ae:
74:d0:76:e6:b2:48:8b:b3:d9:a2:4f:74:97:ef:32:
86:2e:dd:37:39:e3:82:6e:36:f3:86:2a:7e:53:08:
d3:5c:81:1d:80:b2:4e:41:54:f5:e6:e3:16:8f:7f:
57:bc:5d:ea:3f:cc:02:be:4a:9c:c6:8b:97:f3:ff:
7b:60:97:26:8f:3f:c6:be:47:a8:f9:4c:c1:0a:02:
5d:9b:a2:5a:2f:15:e8:85:45:b1:55:29:24:56:d3:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E6:9F:8A:97:BE:01:90:10:DB:14:9B:CE:E5:1E:3B:C9:1E:B4:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6DBC196C97E11EFA35B0670762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:8c:24:ef:f1:29:8e:0a:77:29:b4:3d:6e:63:33:10:bf:b0:
57:f3:16:4f:dd:c1:68:41:d7:34:d5:3d:8d:e1:e5:e7:f4:c0:
35:24:68:12:c2:60:3c:77:3b:5e:85:7b:ca:3c:f7:1c:df:4d:
29:91:c0:0d:8f:94:2e:fa:0c:74:a2:5e:6c:05:16:6a:78:7f:
32:0a:ec:57:05:0a:2c:de:89:ab:72:50:f8:da:67:aa:15:38:
52:1e:aa:6c:ad:40:ed:a6:17:1a:8a:64:0b:46:cb:66:3a:93:
d0:a3:a5:e4:90:b2:55:28:af:d4:1f:48:f0:46:27:db:7a:3f:
e0:45:30:3b:eb:52:16:59:c3:b6:c1:dc:97:0a:e5:2b:0b:e9:
de:f0:78:81:b9:1d:b4:24:a8:86:00:b9:2e:e7:30:67:ec:e4:
88:f1:31:c5:e2:33:e7:f5:e6:c8:75:c9:b8:a9:8c:a2:dd:50:
1a:54:b8:89:f5:ad:92:f7:bd:42:ec:9d:1c:41:67:18:40:16:
2e:29:89:b0:8c:2e:35:7c:40:60:e3:15:3c:76:d3:b0:cd:af:
c2:a6:77:eb:b6:1a:21:ae:82:a3:2c:5d:18:52:08:e6:8b:e7:
26:5c:f9:3f:85:e8:62:98:68:88:c1:ea:1a:55:9b:40:4f:ba:
ab:ec:4b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:24 2025 by rpki-client