Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/314CC198CD3711EFBB9F0683762E951A.roa
File: 314CC198CD3711EFBB9F0683762E951A.roa (raw, json)
Hash identifier: Sv+B6zWimZSb43K+bFVwJEddTYXdSTrtA4cwjItyLQ4=
Subject key identifier: CF:5F:44:1F:86:AC:F0:41:CC:AC:B6:48:E0:E6:C9:AB:02:27:34:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/314CC198CD3711EFBB9F0683762E951A.roa
Signing time: Tue 07 Jan 2025 20:37:21 +0000
ROA not before: Tue 07 Jan 2025 20:37:17 +0000
ROA not after: Sat 13 Dec 2025 20:37:17 +0000
asID: 984
IP address blocks: 156.243.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65059 (0xfe23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 20:37:17 2025 GMT
Not After : Dec 13 20:37:17 2025 GMT
Subject: CN=677d9080-340a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:c9:c1:4f:b9:c0:b0:9e:28:b2:26:35:af:
94:f3:4c:9b:cd:18:36:27:77:3f:dc:44:6e:9a:15:
cd:52:fd:f3:56:97:16:a5:94:65:07:ff:20:10:ef:
ec:f2:f7:18:45:68:13:35:e8:88:7f:3d:73:38:d9:
87:7c:f4:61:bb:08:2f:3b:9f:55:14:6d:c6:3a:36:
9e:17:d3:c2:15:0b:3f:1b:09:e6:47:14:35:8a:5f:
bc:ed:6b:1b:a0:9e:a5:b1:08:38:cb:6f:78:e4:e9:
d1:3e:71:28:c0:8d:01:6e:dd:81:f9:25:6e:ed:38:
39:2b:59:60:31:eb:f7:a2:97:c6:e1:12:33:0d:9a:
73:d3:49:46:21:28:9e:9e:15:81:78:bf:d9:02:c1:
91:19:da:f1:5d:c7:6b:72:b2:59:06:37:c2:b4:da:
24:b1:ab:26:25:5c:8a:66:7d:20:28:5e:dd:df:dd:
fb:40:13:58:53:09:f4:4a:63:67:b5:d5:40:25:a1:
5e:ff:f5:16:14:6e:fc:fd:15:ee:03:5a:72:ad:44:
f4:d2:cf:0b:27:c0:df:37:03:a0:ee:43:3b:24:38:
85:90:b6:31:5b:63:6f:fd:11:39:55:ca:e6:4a:b5:
4a:6d:56:b8:06:78:5e:d4:a7:d9:76:8d:9c:e2:0a:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5F:44:1F:86:AC:F0:41:CC:AC:B6:48:E0:E6:C9:AB:02:27:34:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/314CC198CD3711EFBB9F0683762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.58.0/24
Signature Algorithm: sha256WithRSAEncryption
39:15:bf:7a:38:09:ef:c4:cb:02:82:4d:94:16:86:76:24:16:
4e:15:15:25:44:8b:d0:48:f5:44:d9:16:f2:b1:08:d4:54:14:
83:94:20:75:e0:d6:48:ef:1e:db:c1:32:f1:5d:3b:f9:89:4f:
9e:33:b0:5b:f0:6c:0b:37:ce:e6:2d:aa:dd:f2:25:23:c2:ce:
f9:1d:e7:6e:77:52:b8:9a:e8:5b:76:e3:5f:03:0a:a4:f1:af:
7c:40:68:e3:94:27:a4:82:7b:ba:f3:58:9c:45:81:84:0f:0c:
87:7e:1c:6e:44:b6:1c:b3:4f:8a:e3:5e:e0:08:4e:7a:e0:bd:
d7:3a:17:27:09:e5:b2:aa:b7:6c:00:0f:22:2a:b3:7e:71:da:
a0:80:c7:46:be:04:b6:17:61:f1:8d:c0:1c:a0:45:15:a0:4d:
ea:6d:68:14:ed:50:5e:7a:6d:ab:cf:10:30:b2:2a:0c:ad:a9:
7a:43:76:8c:5d:88:63:71:4b:5a:0d:c5:2a:3b:2d:8d:ad:73:
ea:1c:67:f9:ad:fa:e3:fd:73:23:55:3a:0e:36:b7:25:f2:38:
59:f8:2c:3b:85:71:ee:98:41:7e:8c:00:c7:99:0e:7c:3b:7d:
59:96:f8:77:ac:b1:01:47:ad:d0:ac:f8:52:f9:60:6e:41:38:
b2:3f:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:26 2025 by rpki-client