Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F4A0F42D2F011EF9A7D8D63762E951A.roa
File: 0F4A0F42D2F011EF9A7D8D63762E951A.roa (raw, json)
Hash identifier: 33npaXStixhMk485L+CytUXSj+QFOHCEWiONc9So8XY=
Subject key identifier: 47:1E:B6:1A:DA:F8:39:1E:52:18:82:2C:20:31:CD:48:A7:CE:76:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010779
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F4A0F42D2F011EF9A7D8D63762E951A.roa
Signing time: Wed 15 Jan 2025 03:23:16 +0000
ROA not before: Wed 15 Jan 2025 03:23:13 +0000
ROA not after: Mon 03 Jan 2028 03:23:13 +0000
asID: 17561
IP address blocks: 156.241.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67449 (0x10779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 03:23:13 2025 GMT
Not After : Jan 3 03:23:13 2028 GMT
Subject: CN=67872a24-d00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:95:dc:12:1a:64:da:18:8e:83:64:33:32:
14:c6:99:60:66:86:8c:9b:2f:13:80:9e:b9:26:52:
9d:36:ba:e3:97:16:c7:6c:86:b8:b4:75:3c:3d:05:
ba:1d:31:a1:77:20:95:49:a5:38:60:18:06:a2:5f:
2f:6c:16:4b:c4:12:ac:3c:ad:01:66:0c:02:3d:1d:
c5:67:3c:72:d7:47:75:79:ac:c0:9d:82:e4:63:6c:
9b:71:64:f8:79:78:0c:3b:1b:ef:9e:bd:7d:33:8c:
97:85:e8:20:63:34:81:a1:cb:d2:8a:01:6c:a2:ca:
a4:03:22:be:4b:5e:df:4a:d2:69:69:15:cd:45:32:
08:3c:2e:f3:57:f7:fb:76:5e:de:ab:ff:8c:86:b4:
b9:f7:c0:3c:99:3b:de:99:84:ac:bb:86:16:f6:1c:
1e:9a:19:91:82:a8:0e:57:22:12:99:38:b1:1c:4a:
87:65:1d:cd:74:87:d7:f0:e4:54:6d:18:86:97:47:
e3:66:db:b2:8c:25:fc:85:ba:36:ad:7b:8c:aa:4f:
86:fc:26:ff:f3:8a:7c:21:1b:ee:88:bd:cf:43:6f:
bc:5d:1c:4d:11:e1:ba:12:f3:3f:e3:8a:30:fd:89:
5e:b5:0c:a3:0d:38:32:33:f8:c6:dc:19:5c:84:2b:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1E:B6:1A:DA:F8:39:1E:52:18:82:2C:20:31:CD:48:A7:CE:76:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F4A0F42D2F011EF9A7D8D63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ab:36:e7:2f:e8:55:38:b1:8c:0b:5b:41:0e:0d:bc:ec:16:
7a:6d:bc:ab:18:b9:c5:21:d0:e2:c4:7f:10:ab:1f:23:58:df:
84:f6:30:61:26:30:6d:ce:cc:be:73:97:87:ac:e9:f0:c5:bf:
c0:87:01:b3:d2:ec:f0:e2:cd:e9:70:4a:21:66:bb:4c:05:64:
70:1d:7e:4b:9f:69:45:a2:e8:b1:60:a0:53:aa:af:cd:14:32:
26:eb:4e:ff:b7:e9:08:0d:2f:b5:8b:34:b9:74:07:74:1d:be:
14:74:c5:67:82:89:55:f6:17:29:16:d9:73:92:e9:d9:10:8c:
d1:ef:e5:fd:cc:d9:34:bc:13:28:f1:c2:14:f5:29:07:05:03:
fa:34:e9:c4:b0:3c:f5:f8:e1:93:f6:e3:24:b0:fa:b2:52:30:
57:88:81:93:8f:74:1c:f1:66:c2:05:2b:58:4c:ec:0b:78:a6:
fa:f8:44:42:30:14:4e:c9:d0:a4:2e:d4:12:12:ed:93:30:6f:
f7:02:e5:81:63:6b:6b:eb:4e:b6:3d:66:ad:20:bb:35:d2:df:
58:3d:e8:0f:8e:82:fb:5c:f6:07:51:d2:89:51:73:8c:70:a4:
b9:6c:cd:61:b8:6e:4b:5b:ac:fd:6f:55:de:24:fd:7f:3c:38:
5a:b5:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:07 2025 by rpki-client