Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AFCCE96D2E111EF92E2E275762E951A.roa
File: 2AFCCE96D2E111EF92E2E275762E951A.roa (raw, json)
Hash identifier: 9RaKmOTkmiEeRL0tW2Ipt9Oz9tKDvVwr4OoOuUOmpaw=
Subject key identifier: 36:29:AA:22:90:25:CD:D8:7E:92:A4:19:E8:0C:61:05:71:39:18:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010737
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AFCCE96D2E111EF92E2E275762E951A.roa
Signing time: Wed 15 Jan 2025 01:36:40 +0000
ROA not before: Wed 15 Jan 2025 01:36:36 +0000
ROA not after: Sat 13 Dec 2025 01:36:36 +0000
asID: 984
IP address blocks: 156.253.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67383 (0x10737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 01:36:36 2025 GMT
Not After : Dec 13 01:36:36 2025 GMT
Subject: CN=67871128-0948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b4:63:32:f0:17:23:3c:ac:68:4a:53:92:25:
d0:80:9d:9d:fc:fc:51:7a:62:8b:08:74:12:6f:1a:
a4:4d:91:17:41:f8:a9:12:db:ff:9b:52:99:af:fc:
93:e5:30:86:64:2e:b8:0d:7c:57:52:1c:2b:81:2a:
df:1f:87:73:9e:cd:b9:32:a1:c8:ee:9b:72:b3:e2:
12:bf:48:b6:c0:47:fb:63:d3:3e:e9:7f:65:51:e1:
cc:64:0c:18:a6:7f:ec:0f:b2:83:48:68:f8:9d:a6:
31:8b:c3:85:5f:e1:a7:d8:a4:5b:6b:d5:dc:01:a6:
41:80:63:07:6c:e3:c7:41:0b:9e:ff:a7:19:44:bd:
42:f1:34:8c:5d:cd:46:58:9f:33:9f:db:55:6d:dd:
ba:31:64:66:ff:be:9b:31:13:da:54:28:e7:93:ef:
c0:04:cb:00:69:9b:05:40:89:22:cb:a5:cc:4c:ca:
4c:ce:05:39:5c:d3:82:8e:a7:9f:cb:ad:2c:14:3c:
68:05:ed:20:ad:db:8d:1b:49:18:53:c2:db:08:fc:
85:f5:e9:36:7f:ff:cc:22:5f:ac:f6:d5:74:06:1f:
8c:45:b1:4a:7c:53:cc:f0:f3:c1:0e:4e:af:ab:c9:
16:02:8f:47:0a:6e:31:32:d7:c0:43:5d:27:12:b0:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:29:AA:22:90:25:CD:D8:7E:92:A4:19:E8:0C:61:05:71:39:18:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AFCCE96D2E111EF92E2E275762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5d:83:33:17:1d:54:6f:b0:97:ee:89:96:fd:b4:93:7b:fd:
e4:78:b4:7e:31:39:d9:7d:45:d2:45:ae:db:5a:f0:85:b0:10:
5c:5c:68:2a:8f:bf:3c:66:ef:8f:5e:c8:fa:5f:0e:99:54:68:
f1:84:42:a4:fc:65:ba:74:44:fe:11:11:03:26:2b:29:fd:84:
32:68:63:d7:0a:6c:39:8c:7d:6d:e4:9a:bb:0d:45:a9:a9:99:
92:43:64:7a:28:3a:7e:cc:dd:64:91:c2:38:fc:fc:27:80:8c:
78:ac:c8:f6:15:a1:2c:2c:66:cb:e8:f6:a1:e8:ba:af:36:5b:
a7:f2:4a:51:b9:27:08:49:2c:4e:91:d1:af:91:cb:3b:78:2f:
d1:5a:7f:51:64:ce:9c:78:42:3b:7d:6e:d4:80:b5:19:52:87:
51:b9:af:d0:ea:56:c0:ff:29:23:25:8d:5a:16:f7:84:75:4a:
a1:ae:42:a6:cf:35:33:c7:66:44:90:1f:15:7b:aa:30:31:17:
ab:4c:b5:4c:4f:66:6c:94:a6:0b:20:1a:95:65:d0:1b:46:70:
a2:00:10:47:72:9e:38:9c:02:f0:06:aa:29:c8:08:3d:a1:4f:
53:ca:90:e1:63:71:0d:73:0a:dd:25:b1:40:f3:b1:8a:b7:7c:
b6:3c:6e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:46 2025 by rpki-client