Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D27A62ECDC911EFADB3A3B1762E951A.roa
File: 0D27A62ECDC911EFADB3A3B1762E951A.roa (raw, json)
Hash identifier: Q2hFOq/FQhPzpZ+v2aZgiSNGxrFrGba6cgkz01EIoks=
Subject key identifier: 79:B8:DA:62:D0:1E:99:ED:65:30:FC:CB:48:52:F5:3C:5E:7E:15:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D27A62ECDC911EFADB3A3B1762E951A.roa
Signing time: Wed 08 Jan 2025 14:01:26 +0000
ROA not before: Wed 08 Jan 2025 14:01:23 +0000
ROA not after: Thu 23 Dec 2027 14:01:23 +0000
asID: 17561
IP address blocks: 156.243.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65977 (0x101b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 14:01:23 2025 GMT
Not After : Dec 23 14:01:23 2027 GMT
Subject: CN=677e8536-8899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:43:ca:e5:3c:c1:98:78:a0:e2:7a:e5:f7:
db:bf:05:aa:35:08:fc:3f:a1:4c:1d:84:97:44:a0:
86:8b:57:1c:d3:45:15:d5:a6:10:63:9a:6f:ee:18:
73:c4:95:58:02:44:da:b6:a3:08:42:84:52:68:30:
98:b6:86:7b:f5:ca:03:18:89:ab:d6:f0:cd:49:3b:
1b:49:f4:2a:56:3f:48:7a:86:57:11:55:67:ee:b2:
bb:74:76:2e:4e:e2:19:00:fc:77:65:df:46:ec:7f:
d8:d9:89:7f:40:a4:4f:b0:70:9e:01:4f:fc:d2:96:
c9:e0:8c:cd:b4:bd:e9:72:10:0e:13:8e:23:81:c8:
b8:13:bb:9d:52:6b:27:ff:39:5f:aa:b9:39:9f:a8:
e0:36:cd:3c:15:23:e5:b3:73:4f:c3:fd:b7:7c:87:
39:cc:1e:20:e6:4a:a8:8f:66:69:f2:9f:b0:d3:47:
b7:53:43:86:a3:47:28:65:75:54:04:d8:80:36:6f:
c4:6f:cc:4a:b9:11:08:ad:99:a7:ef:e4:3a:c4:5a:
0e:83:fd:7f:a2:18:d4:c5:5a:fb:a3:97:30:4a:a7:
67:de:ba:37:4b:67:9d:d9:3c:bf:51:34:39:d1:e1:
33:5e:6c:9d:eb:dd:25:8b:1c:64:ec:75:e6:cc:fd:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B8:DA:62:D0:1E:99:ED:65:30:FC:CB:48:52:F5:3C:5E:7E:15:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D27A62ECDC911EFADB3A3B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.222.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8c:a2:5c:9d:e2:c4:94:02:b3:1f:26:6b:af:9c:50:59:25:
99:1b:9a:b0:70:9d:10:4c:d7:6f:b1:ec:d5:3f:86:31:fc:c5:
ac:0c:32:c4:f2:9b:3e:df:1c:9f:a0:a6:04:c9:01:3f:50:03:
38:8d:28:59:4e:35:f4:b7:61:69:e4:70:97:c4:30:72:58:de:
9b:d4:bf:c7:80:b2:56:5d:9a:a8:37:65:b8:18:4e:b8:b9:bf:
92:6a:86:60:c5:d8:23:0d:9b:08:bd:32:30:06:43:07:b3:f2:
97:30:19:9b:41:0f:fb:f3:fa:35:53:17:cf:d8:6d:19:75:2d:
c1:68:d2:08:d5:0e:0f:e9:cb:9b:a1:9a:f1:e1:ff:72:60:3c:
47:6a:8e:28:cf:1b:4a:20:85:3d:5d:3c:e4:52:ce:08:74:b7:
ef:b2:c0:e1:02:0c:36:7b:ab:9d:0a:4e:e2:b0:67:6d:2f:1d:
3b:61:4b:27:f1:ef:4f:fb:ca:b0:d3:ff:03:ce:ac:7c:81:a5:
c5:1d:a0:9b:b2:e3:9c:0f:8f:5f:40:f0:d0:2c:f5:8d:bd:de:
a0:bd:f5:52:f7:da:54:b6:98:b8:36:ed:69:d5:c0:e1:af:12:
e4:ea:83:52:75:0e:f5:68:85:cd:6f:f9:f2:98:b7:91:25:e4:
3f:15:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:57:38 2025 by rpki-client