Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/954B3FE6C97511EFAD973DA9762E951A.roa
File: 954B3FE6C97511EFAD973DA9762E951A.roa (raw, json)
Hash identifier: JjCITPnL5OIqUBgR/fdBCgKVutd5WY6fnRD/ngLu5ts=
Subject key identifier: 84:94:90:72:43:B3:BC:42:11:69:05:81:66:3E:37:68:35:DD:8D:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/954B3FE6C97511EFAD973DA9762E951A.roa
Signing time: Fri 03 Jan 2025 01:53:52 +0000
ROA not before: Fri 03 Jan 2025 01:53:49 +0000
ROA not after: Mon 13 Dec 2027 01:53:49 +0000
asID: 17561
IP address blocks: 156.227.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62689 (0xf4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 3 01:53:49 2025 GMT
Not After : Dec 13 01:53:49 2027 GMT
Subject: CN=67774330-ee25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:75:ed:3f:5a:4b:75:15:0e:e6:9c:87:57:a6:
65:93:88:79:45:9d:e9:f4:28:64:bd:7e:fd:63:c6:
09:bf:34:00:92:32:7f:e2:b0:a5:75:c5:c4:2a:6e:
22:1b:7d:62:6f:98:55:07:86:f5:2a:53:ab:1e:13:
bd:b6:f1:7f:42:c7:51:a4:ad:bd:20:90:f5:ff:a2:
eb:d5:00:b3:98:a3:47:10:ec:83:35:94:f5:bc:81:
60:d6:30:e6:0f:80:60:d0:fa:55:3c:86:e9:dc:6e:
90:7f:23:79:67:a2:ac:bc:21:a4:90:c3:87:47:ea:
a2:c8:89:f8:80:37:68:95:3d:69:fe:f1:fc:d9:d6:
0e:9e:f3:22:2f:e4:fd:78:23:8a:d0:38:6b:64:be:
28:2c:b3:09:c9:5b:01:df:98:7a:aa:b7:68:04:72:
ab:b6:09:65:e7:f1:4e:3b:94:dd:5a:1d:58:67:71:
93:15:8f:6b:b0:f6:32:45:10:4c:29:cb:49:f5:93:
cd:a9:da:e1:91:94:eb:dc:a5:60:e5:87:90:8f:2f:
30:a7:d0:6c:73:de:42:4e:d5:a8:3d:a0:a8:73:2c:
5d:ef:3a:5d:ed:b1:52:b8:e1:dd:92:be:f2:5a:5b:
4f:c1:fd:b8:6d:34:bd:94:24:43:cf:3d:eb:0f:2c:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:94:90:72:43:B3:BC:42:11:69:05:81:66:3E:37:68:35:DD:8D:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/954B3FE6C97511EFAD973DA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.98.0/24
Signature Algorithm: sha256WithRSAEncryption
88:09:fa:72:94:67:b4:df:c8:ee:db:62:6a:7c:33:55:63:f2:
9d:23:17:33:ee:91:70:67:66:d4:44:e8:18:54:29:ca:40:ef:
63:c5:d3:65:fd:55:2b:c8:f8:21:91:26:16:1d:d5:94:b8:66:
41:61:d9:95:f7:43:12:de:74:f3:d4:11:a2:dc:e4:1b:1c:5a:
20:b1:ff:f6:c7:01:b7:73:bd:de:70:cb:e3:50:07:c0:3f:bf:
a3:6d:b7:b9:05:00:bb:6c:15:6f:df:05:7b:14:b9:c9:b2:70:
10:48:06:8e:1c:1f:7a:75:aa:0d:d7:ab:f0:03:58:3f:c7:29:
35:2a:1a:38:7e:cf:29:e6:09:7e:92:9e:ea:93:dd:35:eb:78:
d8:9a:95:10:9b:3d:92:8b:10:4f:80:86:8e:be:8b:81:3b:59:
85:83:02:36:ba:7b:51:62:14:98:f2:84:f8:12:be:72:b0:34:
03:a1:5d:0d:78:7a:9f:d7:a0:c2:05:17:21:10:08:4c:e6:e0:
0a:6d:9d:3a:44:a2:78:2e:fa:64:ef:d3:85:68:db:d2:2c:8c:
73:ce:5a:bf:2c:fb:d3:b1:e4:76:aa:84:3e:6a:a3:e6:33:22:
62:59:2c:8f:59:55:f6:19:e0:1f:ec:d5:35:27:f8:44:74:dc:
40:a1:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:22:01 2025 by rpki-client