Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31B0F898CD7311EF94763D95762E951A.roa
File: 31B0F898CD7311EF94763D95762E951A.roa (raw, json)
Hash identifier: BhefK4Yqyxk3PL1OBFZhto/32qei9tzip+1SdLAeqH4=
Subject key identifier: E4:F0:B1:1B:94:BD:5D:03:3C:79:51:14:32:50:32:19:67:6D:98:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31B0F898CD7311EF94763D95762E951A.roa
Signing time: Wed 08 Jan 2025 03:46:51 +0000
ROA not before: Wed 08 Jan 2025 03:46:47 +0000
ROA not after: Mon 13 Dec 2027 03:46:47 +0000
asID: 17561
IP address blocks: 156.248.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65435 (0xff9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:46:47 2025 GMT
Not After : Dec 13 03:46:47 2027 GMT
Subject: CN=677df52b-86ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:57:de:b4:3a:91:2c:b6:f4:f2:4a:3c:c8:
56:89:d2:76:f7:4f:75:29:a4:6b:04:58:cd:d9:fb:
66:30:72:ef:d5:1c:ba:0e:a9:15:ef:ef:1a:b2:a2:
6c:b8:01:64:d3:e3:e6:38:0a:ab:46:3a:9e:76:c4:
29:cb:ce:2f:e2:5d:f3:f1:98:8a:49:63:6c:d0:cc:
b4:75:a2:af:1a:20:9e:ad:2b:e0:cb:b4:64:9e:74:
bf:82:c5:17:ed:57:bc:cd:27:e0:ce:76:f2:9d:aa:
ce:5e:2e:4e:80:c0:be:a7:b7:b4:8e:a6:50:74:22:
57:f2:19:a9:94:a3:5e:1b:9b:15:47:54:6f:67:1a:
92:1a:c6:36:da:71:f6:ac:d3:f1:cd:e2:11:aa:b7:
02:f1:9a:bb:bd:72:f5:65:20:69:55:40:f8:0d:75:
8d:2f:44:3d:70:26:4e:37:e9:df:41:54:81:12:90:
b7:c7:4d:75:0d:7d:4c:c8:dc:21:9b:f7:d8:06:30:
bc:d1:eb:81:40:27:dc:be:23:df:b7:5d:9c:60:5b:
a2:5a:79:e7:3e:66:5f:77:13:d5:21:60:72:5d:85:
7f:8b:66:14:44:2c:da:66:7f:4d:10:5e:6e:f1:0f:
9e:64:79:3f:ad:a3:74:65:65:bb:a1:85:c8:79:8f:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F0:B1:1B:94:BD:5D:03:3C:79:51:14:32:50:32:19:67:6D:98:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31B0F898CD7311EF94763D95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7c:52:8d:4f:9a:fb:9d:63:7e:45:21:3f:75:37:1b:dd:42:
f8:8a:08:ce:d6:bd:fb:18:43:73:f5:74:9b:9c:9f:c8:80:7c:
09:ba:09:df:58:61:16:f7:a8:8f:bd:df:ea:4a:93:32:5d:7f:
79:09:d8:92:27:e5:3a:94:ce:79:16:08:a5:dd:0a:c3:dd:38:
3d:dd:7e:e9:8c:8f:ac:6c:d6:52:ee:a3:f1:73:e6:f2:4a:e7:
64:12:81:d8:78:8c:a6:f2:4b:6b:55:cc:94:5e:fe:13:e9:bf:
0a:c0:56:47:a2:b9:80:98:cd:df:a2:8c:e3:76:c3:c2:6c:6c:
65:7f:31:1a:1b:88:d3:07:e2:6c:24:05:37:4c:31:fb:bf:e0:
27:68:72:ed:d4:b7:39:19:75:fc:50:b5:11:ed:10:f4:16:d7:
92:b2:e5:13:4f:fc:c7:68:13:38:59:ec:33:3f:38:24:3f:52:
ce:23:90:2e:75:56:90:f5:ef:f5:92:7e:f1:c4:07:03:4c:a4:
75:ef:8b:bb:ea:26:e5:27:4d:47:ea:3c:95:92:86:9a:2d:3b:
b3:da:c4:79:b9:82:93:04:88:2b:df:85:6c:c4:9d:e6:2e:b4:
be:78:67:ac:5d:e8:8f:6b:fd:47:37:99:c0:42:09:be:72:91:
0c:b5:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:46 2025 by rpki-client