Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30DEBDA8CD6711EFAF0487BE762E951A.roa
File: 30DEBDA8CD6711EFAF0487BE762E951A.roa (raw, json)
Hash identifier: g8JpavOz1jAkkJ5UyINmcebPVS6A2GA/v/Tf0A2tPuQ=
Subject key identifier: 15:38:DF:F1:45:83:F8:A0:1F:01:31:89:F8:31:74:DE:3F:F1:AC:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30DEBDA8CD6711EFAF0487BE762E951A.roa
Signing time: Wed 08 Jan 2025 02:20:56 +0000
ROA not before: Wed 08 Jan 2025 02:20:52 +0000
ROA not after: Sat 13 Dec 2025 02:20:52 +0000
asID: 984
IP address blocks: 156.247.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65355 (0xff4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:20:52 2025 GMT
Not After : Dec 13 02:20:52 2025 GMT
Subject: CN=677de108-0f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:fb:11:93:52:68:13:e7:13:0a:0e:07:6f:
db:56:0c:45:18:60:43:73:7c:15:fa:5b:fb:ce:19:
a7:05:3f:5b:a8:e9:e9:9d:05:14:f1:74:34:d6:ed:
7b:cb:3a:1b:35:2b:a7:d6:26:8d:40:9e:1f:36:e9:
92:77:a9:37:26:de:47:b8:9e:7b:88:d7:ac:04:aa:
43:10:4f:c7:de:f3:b6:b2:cf:32:cc:db:2f:c6:d8:
77:74:00:b6:b6:fb:11:48:ed:e3:3a:71:b0:65:dd:
62:32:11:5b:a7:70:26:18:59:5d:75:f7:c9:31:20:
48:78:b4:84:24:af:d5:66:b7:04:29:02:84:60:43:
f7:7d:f7:57:87:a1:44:d6:00:90:ce:de:43:4f:87:
df:d7:c1:29:b8:cf:6a:7f:b5:b6:dc:8a:e8:7b:61:
ce:b1:dd:32:7b:a8:cd:57:c0:65:eb:2f:c8:41:fc:
d8:26:56:69:fb:13:24:f9:a8:6b:0f:67:42:1e:b7:
f3:5a:d4:13:cc:0f:32:be:1a:ad:c8:6f:1a:ab:42:
e9:86:54:13:03:35:37:7e:f4:37:48:94:e4:fd:92:
f4:ab:42:07:db:8d:e4:9a:bf:89:51:d8:75:67:17:
c0:18:da:77:78:98:21:f2:f0:5d:d6:7d:77:f1:33:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:38:DF:F1:45:83:F8:A0:1F:01:31:89:F8:31:74:DE:3F:F1:AC:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30DEBDA8CD6711EFAF0487BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.112.0/24
Signature Algorithm: sha256WithRSAEncryption
91:8d:1f:04:d2:bf:fa:fd:63:12:c2:c5:82:40:70:e3:0c:7a:
78:f7:a6:b9:85:52:ec:75:12:f1:c1:ad:c6:cb:b8:9d:8d:ac:
42:9b:89:c0:38:2e:fe:6f:4e:b8:b6:dc:03:e9:8b:bf:ce:69:
54:2d:a7:84:e7:7d:33:53:59:f4:d0:75:69:48:10:7d:e4:9f:
58:10:54:7b:20:e4:d8:bd:84:8f:3a:11:81:e9:a6:d1:41:dc:
82:b0:01:f1:3f:9f:d5:60:22:83:b7:d0:56:cd:3c:53:b6:6a:
12:31:53:5f:0a:b8:d0:4f:d7:3e:fb:5f:fe:e6:f5:0e:7e:b7:
fc:93:02:f5:48:b9:f2:b9:88:15:55:d4:ab:04:05:08:d0:b7:
29:cd:93:44:c6:f8:f3:da:e1:8c:02:21:fc:19:4e:e8:ce:84:
c4:9a:98:7e:2e:bc:5b:4d:02:89:03:fa:09:a5:b0:87:1d:84:
c5:95:50:e5:36:fa:86:42:da:18:fb:07:bb:a8:c9:bf:07:be:
55:90:d6:a4:b6:60:d2:8d:8f:f9:ee:fe:e2:af:08:84:77:71:
cd:79:23:7b:08:6b:98:f2:55:3d:1f:f3:a8:90:82:7e:f4:62:
ab:bf:6b:2a:b3:d1:cf:a3:6a:eb:e2:50:5a:ab:94:50:de:45:
b0:8b:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:05 2025 by rpki-client