Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23630F14CD4C11EFB1D8BD86762E951A.roa
File: 23630F14CD4C11EFB1D8BD86762E951A.roa (raw, json)
Hash identifier: c32PyIW/+JyUKVW0LF8EUvRIVvBUTkQZPTdMucotd7U=
Subject key identifier: AB:D3:5A:7C:E4:66:23:1E:F5:8B:A7:9B:E3:1E:2A:62:52:68:EA:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23630F14CD4C11EFB1D8BD86762E951A.roa
Signing time: Tue 07 Jan 2025 23:07:17 +0000
ROA not before: Tue 07 Jan 2025 23:07:13 +0000
ROA not after: Sat 13 Dec 2025 23:07:13 +0000
asID: 984
IP address blocks: 156.246.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65223 (0xfec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 23:07:13 2025 GMT
Not After : Dec 13 23:07:13 2025 GMT
Subject: CN=677db3a5-afc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a8:55:f4:a4:ac:bc:92:f5:b9:92:6a:b4:51:
ae:0a:9c:b7:66:45:b9:c0:19:d8:0a:4c:e1:17:fd:
bc:95:cd:c2:bf:20:7e:5f:c4:06:f6:aa:3b:26:ee:
5f:09:b1:e7:d9:fc:6a:be:07:6b:a1:96:8d:a0:81:
0d:16:28:1b:13:b7:7d:1e:ae:48:4a:54:93:34:33:
50:77:3b:77:fd:8a:4d:2c:16:a3:3f:6b:6a:86:cf:
57:0e:ed:25:88:72:42:de:b5:89:26:69:a4:10:b6:
2b:ae:f9:b6:bd:7d:d3:6a:5b:9e:2f:ae:f2:c0:90:
ce:21:a0:9f:23:fa:95:40:02:c1:0e:e5:5b:f3:d8:
26:6d:33:76:b0:da:0f:32:24:b1:0d:e7:66:ac:3e:
8b:72:37:51:fc:cb:79:3b:98:87:1e:7f:41:24:38:
b8:cd:21:7e:b8:9c:2e:23:5a:57:dd:12:c8:02:74:
fb:2a:0a:78:b5:bb:c2:8f:d7:62:ed:be:91:34:17:
fa:74:80:96:ec:10:c5:d8:70:e5:ac:11:8a:3f:3f:
83:a6:3c:0e:66:fb:fd:39:74:8b:42:47:6b:59:5f:
1f:ea:e8:2b:c9:eb:43:d3:aa:86:3d:2f:13:f0:24:
e4:77:ea:c1:f7:36:cf:64:ef:74:b0:a7:72:d8:21:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:5A:7C:E4:66:23:1E:F5:8B:A7:9B:E3:1E:2A:62:52:68:EA:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23630F14CD4C11EFB1D8BD86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1c:03:8f:4e:9e:71:a6:38:ed:ba:35:e0:69:84:be:33:27:
5c:e6:86:2b:e5:63:a5:85:84:80:96:da:1d:96:1d:36:34:44:
69:ee:98:2a:89:af:7a:6f:50:d7:72:e4:41:b2:8f:2d:c9:20:
b7:43:ee:67:54:72:56:3b:e0:5c:4b:64:a9:4a:2f:47:34:b0:
d9:f9:3a:4e:44:41:bf:5d:fa:49:13:16:80:42:d0:8b:69:e2:
1e:33:e2:35:4f:e4:83:70:b8:fd:a9:4f:bc:2d:f8:65:6f:d9:
fa:0c:b1:f0:d9:89:d2:b4:5c:4f:f4:dd:f5:c6:67:29:be:d5:
91:89:76:ee:1b:36:b2:9e:39:11:80:16:48:3d:35:80:63:1b:
ed:d6:3c:bb:25:1d:fa:83:b0:3b:ab:3e:26:27:a4:03:66:3e:
8b:a4:3b:ae:56:47:d2:5e:47:94:3b:17:03:6d:2c:7d:ee:73:
d4:3f:22:62:94:0f:2a:5b:9a:ae:7a:f0:27:81:93:2d:1a:7b:
dd:ee:5c:6f:89:c5:55:b9:19:33:b5:d2:09:a8:b6:8c:db:54:
db:6d:52:82:c6:19:e2:cf:69:c4:21:73:b5:3b:7b:68:e6:62:
f4:3f:22:c9:c0:6e:a0:ab:aa:9d:db:f4:1e:c6:c3:90:f3:bd:
db:73:a4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:46 2025 by rpki-client