Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D8B3762C94F11EF9FA63DAE762E951A.roa
File: 0D8B3762C94F11EF9FA63DAE762E951A.roa (raw, json)
Hash identifier: thOcMVjy+zseqR6dJ3I+Vlz8gkGTtBX85fiiE+HiSSo=
Subject key identifier: 57:A5:5D:90:DC:07:77:9E:71:E5:4F:F5:DA:2E:4F:A3:D8:FC:0B:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D8B3762C94F11EF9FA63DAE762E951A.roa
Signing time: Thu 02 Jan 2025 21:18:04 +0000
ROA not before: Thu 02 Jan 2025 21:18:00 +0000
ROA not after: Mon 13 Dec 2027 21:18:00 +0000
asID: 17561
IP address blocks: 156.225.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62388 (0xf3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 21:18:00 2025 GMT
Not After : Dec 13 21:18:00 2027 GMT
Subject: CN=6777028c-05ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:ad:32:15:dc:67:39:8e:5b:0e:f6:fe:f9:
9d:a5:33:69:fb:02:ef:e4:81:f0:2a:8e:c3:0d:3d:
17:16:91:a0:fe:5b:3a:5f:76:82:e6:3f:c3:b6:92:
1a:df:cf:ca:d9:d6:25:fa:e0:d8:c3:1b:b9:7d:a2:
bf:f3:de:e2:18:55:82:4c:d3:19:29:8b:c7:ba:a1:
c2:85:d3:3f:a2:21:d1:c5:f1:ab:5f:b6:2e:c2:9b:
fa:31:45:34:ef:b9:91:69:05:f9:f5:d1:27:e3:7f:
da:e3:66:20:5d:0f:81:97:ba:36:56:93:65:b1:2b:
38:0f:33:4f:6b:2e:e9:6b:0c:b5:db:da:00:f0:05:
94:a5:a1:2a:b1:50:d9:a2:c7:2e:da:d6:63:d9:10:
50:23:30:56:62:14:a4:09:56:6a:70:10:31:cf:93:
70:5b:6b:a9:25:92:07:e0:a4:c3:6a:fa:af:98:9c:
34:6e:9d:aa:3f:6d:3b:06:95:ba:a9:d4:34:5f:f7:
47:32:57:e7:c4:21:27:fa:97:b9:f4:cf:29:e9:59:
b7:a7:3b:cd:3a:d5:8f:24:c7:43:19:da:6d:cb:f5:
90:fb:58:0f:f7:13:3b:a8:57:39:cb:52:e4:15:5c:
bb:05:c8:10:e5:17:ee:62:a2:a1:df:6a:63:20:5a:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:5D:90:DC:07:77:9E:71:E5:4F:F5:DA:2E:4F:A3:D8:FC:0B:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D8B3762C94F11EF9FA63DAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.177.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3b:95:7b:e6:9a:09:61:8b:bf:6c:3a:11:a4:e2:69:d9:21:
97:f0:5e:55:33:4c:99:07:54:9c:8b:41:fa:3e:52:3f:1d:f9:
1a:57:66:fc:a7:ac:2a:93:53:b1:97:5b:12:33:e8:0b:19:5d:
8f:d2:f0:08:08:00:ba:5c:aa:c0:57:e0:bd:48:d9:54:c9:9b:
15:61:ca:21:85:6e:b4:29:ca:6b:3c:5c:3e:81:b9:64:9a:2a:
05:fb:ef:9c:3b:85:d0:b4:6c:5e:57:c4:b2:82:73:a5:f9:f6:
36:f2:61:8b:e2:fc:f9:63:58:c2:4c:e3:e1:66:7d:32:a3:a7:
cb:9c:1d:00:6a:92:05:20:ba:59:f6:e8:11:d8:8c:d5:ca:17:
29:5d:d2:d3:7c:1f:e3:37:fa:a6:42:5d:1a:15:fa:b0:1c:b4:
38:c4:05:b6:2e:f2:9b:b8:a2:5a:70:aa:f7:83:da:1d:df:d5:
74:79:3a:18:6d:7b:87:1f:33:c1:9d:08:bc:3c:13:35:7c:a3:
ab:16:65:54:c5:52:9c:64:f7:f8:3b:bf:25:51:5a:10:8e:ae:
1c:9b:b3:db:37:9f:e9:ed:73:a2:77:ea:88:cb:3e:bb:4f:56:
12:c6:95:8e:b8:d1:3b:8b:7d:80:58:03:39:c8:0a:10:e7:e3:
c7:9a:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:51 2025 by rpki-client