Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B3D44D8C95311EFBA16D947762E951A.roa
File: 0B3D44D8C95311EFBA16D947762E951A.roa (raw, json)
Hash identifier: JwwmM/ZIC7ykq9sWx8lRu31u38K52mwyOnEkYSpnwXI=
Subject key identifier: FC:45:4F:8F:97:7A:AA:A0:5B:E5:1D:BA:BD:C9:DE:47:D8:63:06:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B3D44D8C95311EFBA16D947762E951A.roa
Signing time: Thu 02 Jan 2025 21:46:38 +0000
ROA not before: Thu 02 Jan 2025 21:46:34 +0000
ROA not after: Sat 13 Dec 2025 21:46:34 +0000
asID: 984
IP address blocks: 156.226.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62426 (0xf3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 21:46:34 2025 GMT
Not After : Dec 13 21:46:34 2025 GMT
Subject: CN=6777093e-4bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:43:26:23:96:05:f4:40:f9:6e:ac:26:49:
bd:33:a4:60:7e:fc:19:19:d1:02:34:2f:a5:50:bf:
27:60:6c:cf:94:b5:44:b5:a2:aa:ab:80:f3:2d:f0:
1e:7e:cc:4a:2a:77:b2:4c:ff:97:9a:d0:a7:d9:db:
bb:1d:b8:4a:0b:65:53:2b:d1:7e:ce:bc:03:97:b9:
bd:f6:b0:55:d3:50:a0:ce:ea:54:19:b6:13:53:42:
29:24:4d:23:40:01:45:09:6f:5a:be:f4:4e:5d:2d:
71:67:89:b9:75:62:81:b4:6b:3f:9b:ea:fd:36:b3:
6f:72:74:3a:89:50:ee:ae:f5:0a:29:bd:43:d1:f3:
d5:d4:05:4e:45:7f:e5:67:95:ac:70:d3:5b:e5:f2:
49:b2:59:29:57:a5:82:cf:38:9f:4a:39:42:7b:7f:
99:fd:ac:27:0d:cf:6f:6c:0a:73:41:ee:8e:d7:8b:
df:c6:62:b3:b3:be:fb:4b:ce:f7:85:48:06:0c:32:
06:a8:6e:6c:d9:6d:9e:43:f0:68:0a:19:fe:71:05:
2a:3d:50:c6:7c:40:1c:25:dd:28:af:61:90:85:bc:
2f:29:28:22:36:4c:3d:03:96:3c:7d:d4:3a:cc:c4:
a2:e9:38:ac:b3:03:bb:cc:b9:ba:d6:dc:af:48:9f:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:45:4F:8F:97:7A:AA:A0:5B:E5:1D:BA:BD:C9:DE:47:D8:63:06:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B3D44D8C95311EFBA16D947762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.132.0/24
Signature Algorithm: sha256WithRSAEncryption
49:21:7f:44:32:04:60:4d:89:4b:c5:13:e7:39:9f:c8:21:1a:
81:c1:82:e6:6d:dc:04:8e:ce:45:34:e3:c5:93:c2:e6:3c:a3:
5b:a4:8f:ab:86:e5:31:20:b2:a0:87:55:25:31:23:03:b4:ff:
d0:88:bf:68:21:6e:84:ad:8d:df:21:a7:b7:94:95:8a:8a:80:
7d:64:e3:5a:89:47:16:67:f9:9e:eb:52:80:9e:cf:33:0f:0d:
67:99:19:14:05:87:7d:27:07:d3:89:e9:84:a4:36:33:f5:00:
5b:1d:a6:8b:0e:81:25:2c:cd:5d:b2:44:6b:f9:d0:c5:1a:56:
ef:1f:1a:c2:79:8c:45:bc:b0:c4:81:ce:1b:64:a2:ee:97:6d:
be:b6:bf:f6:47:9c:af:cc:72:c1:08:0d:a6:c3:ca:2b:2e:38:
59:e2:bc:3e:82:df:6c:7a:29:86:a9:af:13:d0:6a:cb:96:1b:
22:48:c3:d5:d9:85:26:b4:43:db:86:9d:eb:aa:44:57:7c:70:
28:e2:99:c6:19:ed:a8:fa:4b:da:18:13:a2:7e:36:80:b1:8d:
de:8f:0b:23:05:f8:d9:ce:ae:62:d1:3b:51:17:80:8c:ca:21:
74:89:89:83:bc:36:98:d5:64:38:7f:e8:70:a4:54:4c:d7:7b:
a3:8c:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:44 2025 by rpki-client