Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CD62A7AB5FE11EFB20016A3762E951A.roa
File: 0CD62A7AB5FE11EFB20016A3762E951A.roa (raw, json)
Hash identifier: uHD+bxBOC9O+CN+oDka5ORE86Ul0rbPqd3PjN9F3ph4=
Subject key identifier: 97:CB:CD:54:EC:23:40:F2:04:3F:AB:98:02:19:EC:EE:8A:93:01:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E16E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CD62A7AB5FE11EFB20016A3762E951A.roa
Signing time: Mon 09 Dec 2024 07:20:21 +0000
ROA not before: Mon 09 Dec 2024 07:20:17 +0000
ROA not after: Thu 06 Feb 2025 07:20:17 +0000
asID: 137443
IP address blocks: 156.236.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57710 (0xe16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:20:17 2024 GMT
Not After : Feb 6 07:20:17 2025 GMT
Subject: CN=67569a35-431e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:ab:7a:a7:7c:0a:2d:cf:75:3e:c6:50:d8:
69:f9:ae:ad:4d:d1:c5:cd:23:25:f4:50:82:11:a8:
08:50:72:9f:e3:c0:cc:98:d3:50:22:5a:00:a7:6d:
43:5d:26:b5:ff:b5:94:92:09:7a:c1:fe:f8:dc:40:
72:29:49:4c:f7:67:cd:64:79:f3:a3:22:64:cc:75:
86:92:e5:37:18:81:fc:eb:dd:b0:3d:37:38:66:14:
07:de:c5:36:5a:05:e6:f8:ff:82:35:b2:46:a1:e8:
83:d8:82:7d:ac:8b:d5:8f:9e:ac:52:2f:70:70:cb:
80:af:97:e7:3b:d8:b0:58:d3:ea:bc:24:87:a4:4b:
56:46:96:c4:a8:37:94:6d:68:7f:bf:46:00:b5:3f:
c4:3b:e1:d8:ab:04:fd:23:da:33:04:05:c8:2a:84:
16:b4:fe:5a:99:87:d2:da:d5:58:0a:bc:ee:84:a6:
9f:6e:2f:c9:e8:b1:01:72:12:d6:6a:b6:85:fa:21:
cf:26:9d:c8:ff:48:9d:a2:66:18:dc:71:94:1e:7b:
37:50:cf:91:1f:ce:93:00:f6:c4:3e:f8:fc:c3:2b:
59:cd:75:4b:91:44:19:98:7e:f8:12:26:8d:9f:6a:
66:7f:70:6c:11:c7:3b:56:cb:14:03:40:b4:36:de:
d8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:CD:54:EC:23:40:F2:04:3F:AB:98:02:19:EC:EE:8A:93:01:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CD62A7AB5FE11EFB20016A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.108.0/22
Signature Algorithm: sha256WithRSAEncryption
52:38:bb:5e:60:4e:e7:cf:a5:d6:09:1b:c6:ab:25:e6:a8:99:
46:a2:54:b6:2a:41:7d:ce:b7:d7:06:8e:f1:48:73:71:0c:8d:
5c:12:19:e3:52:be:d2:80:09:c5:2f:da:c9:de:92:44:e6:97:
68:a4:3b:3e:ca:1e:52:bf:28:10:08:81:5a:bb:15:34:9d:7b:
16:0b:57:35:b1:68:b9:13:12:d1:a4:3a:ca:05:82:1b:6a:a5:
ce:ed:07:ff:09:f9:a4:14:e5:25:3a:17:80:d5:64:69:39:89:
a4:18:36:95:ce:9d:d8:37:40:94:eb:02:02:0a:49:ad:38:78:
89:68:e2:d4:18:06:ca:7d:2b:5d:7b:09:2a:ed:d5:2d:b2:e7:
f5:e4:a3:48:32:f4:7f:82:dd:91:64:00:81:4e:24:d3:bc:45:
c9:76:0f:ac:3a:a6:6a:8e:4c:5d:1e:a0:b8:ea:6e:63:68:6d:
49:5b:12:b0:68:9f:de:e5:44:ec:a3:6a:18:1e:1e:84:d2:10:
80:d2:c3:7d:3d:7b:c3:56:d5:d2:12:09:e7:c0:d1:d9:92:5f:
30:ff:3c:bb:ab:61:4d:44:a9:d5:a5:7d:04:5f:70:c5:9b:6d:
75:19:c8:92:8a:08:e6:2d:5e:38:88:84:d6:d1:02:ba:4c:f3:
92:c6:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:36 2025 by rpki-client