Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D16C2A8D30011EFBC21D44B762E951A.roa
File: 2D16C2A8D30011EFBC21D44B762E951A.roa (raw, json)
Hash identifier: +4rXE4w1pcVjnP6r2kX2HqjNWmMACVK7FWQ5xX82PW4=
Subject key identifier: 4E:B3:1C:DF:5A:C7:48:3C:BE:92:B9:DC:4C:8E:31:D0:19:03:30:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0107E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D16C2A8D30011EFBC21D44B762E951A.roa
Signing time: Wed 15 Jan 2025 05:18:40 +0000
ROA not before: Wed 15 Jan 2025 05:18:34 +0000
ROA not after: Mon 03 Jan 2028 05:18:34 +0000
asID: 17561
IP address blocks: 156.254.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67559 (0x107e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 05:18:34 2025 GMT
Not After : Jan 3 05:18:34 2028 GMT
Subject: CN=6787452f-01af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:18:2c:7b:60:44:f6:a9:cb:58:83:84:90:
d6:c7:d8:fb:ff:76:71:1c:37:5a:9f:b1:6a:28:b5:
1a:bb:37:eb:74:9f:58:9c:26:11:5c:0e:d3:ba:94:
6d:e2:b4:e3:12:39:c5:38:b5:2e:2a:10:8f:9c:6f:
41:24:99:9d:3b:18:7e:bd:8d:fe:04:44:0a:61:4e:
91:2e:d2:f5:b9:86:b7:61:47:17:60:df:f6:7b:15:
9e:2a:e5:a0:ad:d7:8c:08:c6:41:5f:df:e1:f5:ce:
5b:51:87:ee:d6:ba:95:d4:88:bb:f1:0b:63:a3:4f:
cc:0e:d4:2a:4f:c2:66:49:ae:55:fd:c4:a1:4a:2a:
64:bc:d5:dc:61:37:eb:76:29:dd:8e:4a:02:e6:b4:
d5:71:63:a4:cc:28:0b:40:9a:49:e0:91:4d:b8:30:
df:b0:8a:38:e6:af:5c:80:17:33:c8:d9:65:7c:53:
2e:ee:bc:00:ca:d3:34:f5:26:9c:24:ee:6e:16:b8:
28:15:f5:f1:83:39:a9:2e:cb:8d:f0:f1:3d:da:d5:
c2:38:ad:b8:e4:f5:fa:37:84:6b:41:8b:82:c2:6c:
91:68:3e:22:b6:92:5a:77:1d:fc:d0:f2:7d:a2:99:
e9:85:a2:0c:7e:4e:85:e5:3f:9b:09:24:85:4f:a6:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:1C:DF:5A:C7:48:3C:BE:92:B9:DC:4C:8E:31:D0:19:03:30:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D16C2A8D30011EFBC21D44B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:18:72:dc:78:67:32:88:49:88:9d:0c:13:c9:ed:fd:86:86:
f5:c1:aa:a2:53:7c:40:fe:61:17:e7:8c:ff:4f:17:5c:5c:b3:
56:20:8f:4d:b8:cf:c4:2a:3e:35:a6:70:16:4f:f6:05:fe:27:
23:29:1a:9f:30:55:3a:b4:9a:b6:2c:1c:e9:5d:09:8c:46:72:
bd:5e:fb:44:62:44:cd:d0:5b:de:cf:bf:21:61:70:7a:2f:d7:
4b:e2:82:aa:ea:cb:99:4f:c5:76:e8:f1:fb:14:b1:c4:12:56:
9e:f7:28:0d:c3:34:17:22:ff:5f:5b:81:5c:8e:65:32:8f:41:
5c:0f:0e:fb:61:87:a7:1e:d9:9f:98:0c:f6:61:5c:29:a6:39:
4f:d4:aa:b3:9d:57:7c:f1:de:e8:b3:5d:fb:fd:a4:ed:68:2f:
48:13:8d:98:5a:d6:c1:c2:32:89:0c:30:6c:2b:ef:37:a2:f5:
8b:be:6b:5c:82:2f:0c:2d:1c:85:dc:42:39:23:6d:1b:07:a0:
90:69:fc:62:fa:62:98:cc:8f:93:1f:16:e7:ae:9c:fd:ca:39:
24:b4:52:bb:0d:4f:ff:fc:ff:26:a4:31:03:d5:8a:f2:0c:3d:
23:55:a1:0d:30:59:d6:99:e1:cc:54:03:08:e1:e3:f7:96:1d:
52:bb:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:57 2025 by rpki-client