Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D096A9ECD6211EF9C41D798762E951A.roa
File: 1D096A9ECD6211EF9C41D798762E951A.roa (raw, json)
Hash identifier: BZ3erbR/1Hzg0jFM2eftGaeV50nq6zmCqBqhdwT2P80=
Subject key identifier: 98:2E:E7:66:52:7F:EB:C4:7E:A1:A7:1D:F4:CF:80:2B:48:D3:12:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D096A9ECD6211EF9C41D798762E951A.roa
Signing time: Wed 08 Jan 2025 01:44:35 +0000
ROA not before: Wed 08 Jan 2025 01:44:31 +0000
ROA not after: Sat 13 Dec 2025 01:44:31 +0000
asID: 984
IP address blocks: 156.247.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65339 (0xff3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 01:44:31 2025 GMT
Not After : Dec 13 01:44:31 2025 GMT
Subject: CN=677dd883-2c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:30:9e:68:f9:96:3b:52:56:1b:5e:a4:7c:
fa:b4:1a:7f:d4:a8:d0:70:b4:dc:b7:09:3d:1c:5d:
9e:b9:7b:b6:5d:50:de:f0:06:e8:3d:48:21:75:98:
71:c6:8f:6d:46:45:96:f2:40:aa:24:b4:3e:a7:54:
0f:aa:b9:40:18:9c:18:9b:00:52:a1:5c:48:7e:1b:
de:61:2c:89:f8:83:5f:79:30:c2:8a:ed:9a:a2:85:
42:86:a2:e8:5e:7f:3b:7a:66:8b:6e:01:5f:99:1b:
a2:36:e7:65:a0:39:14:15:93:7f:b8:1d:23:42:20:
47:ad:15:ae:e5:fa:aa:82:0b:68:33:d8:25:c8:f5:
4c:bd:0d:f4:1b:28:2c:dd:38:1b:63:db:89:6a:3f:
17:bf:d1:b8:8b:26:96:73:8f:da:14:66:36:ef:45:
e1:25:73:ee:d9:60:c9:87:de:5d:35:cc:7a:62:3b:
53:24:d7:66:b3:3a:8c:b0:5b:59:78:8b:4a:c6:1b:
67:18:81:aa:b6:e1:37:8c:e2:e4:52:70:d9:8b:f6:
2d:57:58:22:8c:4c:d8:ca:ef:10:0e:80:d2:97:5d:
4b:78:fe:2e:78:fe:34:c2:e3:7e:76:30:f1:a2:90:
49:6c:10:e5:d9:90:91:88:5d:ad:fa:6b:5a:80:36:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2E:E7:66:52:7F:EB:C4:7E:A1:A7:1D:F4:CF:80:2B:48:D3:12:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D096A9ECD6211EF9C41D798762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.103.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c5:98:97:f4:78:f8:11:32:41:06:4f:44:fb:41:83:a6:14:
06:db:98:1f:71:c3:4f:b1:2f:c3:08:ec:5c:95:86:e0:c9:cb:
d4:26:c8:9f:d1:b7:ba:f2:1e:1d:ea:f8:72:71:93:c6:18:e0:
eb:55:a0:7b:8f:65:45:a5:ed:83:bc:dc:1a:74:fa:36:99:46:
f0:66:0e:0a:42:83:d9:0a:aa:ae:4d:64:26:92:f8:1a:a1:56:
a8:a4:44:bc:fc:8b:4e:43:a7:77:3a:84:48:53:05:5d:8d:26:
a6:1b:53:3a:ad:f3:a0:cf:7d:5a:a6:12:94:b7:b2:94:62:f6:
a7:85:a3:19:10:4a:fd:5d:4e:d4:52:46:fc:25:4a:6c:f0:5f:
e5:6f:34:33:06:a8:f2:1b:2f:fc:09:6a:91:c9:b9:d1:07:60:
f2:22:1a:1e:34:27:08:d7:8d:1c:55:da:f5:15:c0:40:b8:b5:
ed:eb:ef:3b:fe:ca:e8:45:70:91:3f:c6:10:54:1e:d5:b4:33:
d8:bf:d9:5b:19:1c:07:4a:c2:08:a6:9b:34:b3:00:cf:f4:9c:
81:4d:2e:d6:f0:6c:39:11:3c:5c:ca:11:6b:60:16:a3:af:f8:
ac:a2:66:72:e5:e1:be:c8:35:f0:44:ae:84:f2:94:e5:f1:f5:
6a:70:79:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:30 2025 by rpki-client