Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/830569CEDD8411EF8C36D978762E951A.roa
File: 830569CEDD8411EF8C36D978762E951A.roa (raw, json)
Hash identifier: sDz4Gs1dxudYxxNtOWNHYeKAdaxdIwaTAlm/Pz6NP6k=
Subject key identifier: 5B:C2:38:5B:ED:43:A9:D8:84:EB:6F:25:6E:94:34:55:E2:E9:1D:29
Certificate issuer: /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial: 22
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/830569CEDD8411EF8C36D978762E951A.roa
Signing time: Tue 28 Jan 2025 14:31:08 +0000
ROA not before: Tue 28 Jan 2025 14:31:04 +0000
ROA not after: Wed 31 Jan 2035 14:31:04 +0000
asID: 30992
IP address blocks: 129.0.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Validity
Not Before: Jan 28 14:31:04 2025 GMT
Not After : Jan 31 14:31:04 2035 GMT
Subject: CN=6798ea2b-9317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:86:a8:33:17:ab:76:2c:c1:ab:a7:3b:77:
f3:ba:13:17:3f:06:e9:e7:df:ca:0d:c5:00:92:5a:
b7:29:94:7c:a6:49:93:f9:b3:fa:81:1d:58:2f:37:
b3:2d:ce:3a:64:b5:df:1f:dc:2c:73:38:62:51:5e:
a0:64:ab:42:10:5e:4e:8d:23:c4:7f:b4:d1:35:01:
d2:07:d2:4f:0a:56:74:12:1d:da:f9:de:27:06:da:
30:a9:72:6b:30:87:c9:f7:d1:3c:d9:5a:ad:d3:33:
b8:a0:db:bb:8c:12:8b:6d:da:eb:39:62:37:03:ea:
cf:33:9f:f1:0f:d2:db:2a:91:6d:5d:c8:42:06:4b:
a6:c0:09:5e:82:1d:ca:6c:89:82:2a:b3:28:68:d0:
14:82:79:c3:24:c7:3a:8e:64:a2:52:3c:14:7f:b3:
e5:f3:bb:58:90:df:97:5d:4f:44:23:69:57:9e:d5:
12:6e:df:07:16:65:20:9d:99:fb:86:b8:89:70:2d:
f6:90:a6:61:57:d6:1c:27:ee:b7:c9:26:90:37:4c:
14:0d:ea:91:b0:ad:ca:fc:66:43:69:fe:4d:c8:bf:
a9:7c:3c:45:a1:ab:8c:d9:37:e3:07:aa:7a:72:93:
85:27:bb:ee:bd:dd:c8:63:ca:e9:01:19:39:51:04:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C2:38:5B:ED:43:A9:D8:84:EB:6F:25:6E:94:34:55:E2:E9:1D:29
X509v3 Authority Key Identifier:
keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/830569CEDD8411EF8C36D978762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.0.111.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ff:77:36:8e:f8:f0:40:05:1d:a9:58:92:df:e6:88:53:39:
81:7f:5e:9e:0b:ac:a2:eb:86:f5:da:9d:13:9c:ff:a7:ee:98:
e7:c8:1a:7d:4d:e6:4d:17:9a:1a:91:ff:67:88:89:3c:7c:6c:
77:d2:92:58:8a:f3:b8:56:86:b5:6a:af:14:42:a5:b2:43:73:
c3:35:3e:34:b6:b7:11:e5:0a:9d:74:13:9a:75:7a:dd:ff:d1:
b2:97:a3:ca:30:10:c8:05:ac:18:ad:1a:e1:79:6a:67:8b:95:
ad:4c:c1:10:0b:31:51:ca:e3:40:c8:bd:f2:5d:15:61:c1:91:
78:5d:a8:9d:f7:da:c4:b7:a1:3c:6f:96:06:09:15:ba:b6:28:
ae:a8:7b:f6:de:9b:5c:44:03:8c:e2:cc:b4:c1:5f:b4:c8:32:
31:0e:0f:d6:8d:aa:f3:15:00:d8:b5:f6:18:14:cb:4f:77:9c:
a7:01:27:01:23:25:3a:9e:2d:87:9a:1c:6f:ad:cf:37:d2:76:
b4:fb:df:e1:18:ae:89:7f:52:a7:3d:d3:c4:93:0b:d8:8e:22:
bd:c6:a6:f2:b1:8c:9c:65:61:92:0f:dc:71:c2:b4:66:77:70:
33:31:95:fd:15:10:d5:68:1f:0f:5c:fe:52:1a:a0:18:98:72:
42:ae:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:12:17 2025 by rpki-client