Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31D30180C95A11EF9D8CF674762E951A.roa
File: 31D30180C95A11EF9D8CF674762E951A.roa (raw, json)
Hash identifier: W+yvPPq1wdJwlmG4e7f6BIHv+nuHPDmVEsRtGKImP8I=
Subject key identifier: 10:EF:53:1C:07:C0:AA:DF:7A:B2:85:12:AE:1D:FD:67:9E:D8:D7:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F41E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31D30180C95A11EF9D8CF674762E951A.roa
Signing time: Thu 02 Jan 2025 22:37:49 +0000
ROA not before: Thu 02 Jan 2025 22:37:46 +0000
ROA not after: Sat 13 Dec 2025 22:37:46 +0000
asID: 984
IP address blocks: 156.226.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62494 (0xf41e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 22:37:46 2025 GMT
Not After : Dec 13 22:37:46 2025 GMT
Subject: CN=6777153d-59f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:ee:89:17:0c:fa:83:ef:e0:65:5d:c1:63:
82:55:fa:2f:4a:09:0d:ce:f4:ab:f4:26:47:aa:df:
0f:ec:57:a6:71:f0:31:4a:f9:3b:ff:c6:64:5c:61:
c5:7c:6d:46:3b:89:43:ca:46:45:67:e0:bd:2d:35:
13:8f:2d:f0:61:5f:1d:07:18:2d:3f:53:56:b1:6c:
59:fa:88:cf:98:97:e4:3e:9f:c1:71:70:3a:c2:13:
86:77:34:32:fd:2b:8f:97:d1:04:ac:99:b2:2f:5d:
57:f1:90:ca:01:1d:15:b3:b7:9a:43:ee:fe:9d:38:
25:8e:7f:84:66:a9:63:84:17:d9:ad:6f:64:78:cf:
6a:e2:8f:59:f1:3d:19:fb:7a:14:05:1e:c8:ff:40:
ed:68:10:5f:fe:e3:5a:c8:c3:cc:84:3d:2b:01:2f:
91:c3:41:82:50:72:3d:40:ef:44:1c:ff:87:df:2d:
4d:5a:ee:4a:3f:13:13:cd:ac:5a:0a:19:b3:a6:9a:
61:4b:58:9c:de:4d:8b:ea:53:31:0a:1e:49:5e:2f:
8f:07:d6:8c:37:c5:5d:22:6e:79:b0:4b:f3:68:d0:
1e:e6:38:c1:77:c9:79:5a:d2:1a:3a:9c:de:21:46:
36:54:9f:58:eb:c5:1d:f8:49:86:90:a4:9c:60:a6:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:53:1C:07:C0:AA:DF:7A:B2:85:12:AE:1D:FD:67:9E:D8:D7:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31D30180C95A11EF9D8CF674762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.190.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1e:d0:e1:70:b3:ff:ab:1f:f6:c1:ad:28:a5:d2:c2:be:86:
df:90:f2:5a:a6:ac:da:b1:dc:46:c4:6d:77:08:58:ca:90:ad:
97:a0:37:08:8a:ee:a7:d2:ae:62:c1:39:e9:9c:8a:c5:26:68:
81:f8:42:6f:86:a3:0c:bf:d2:ec:ae:50:f9:a4:fe:7d:04:67:
82:3a:d2:c9:f3:9f:28:73:44:96:2f:91:11:61:1e:74:a2:23:
ac:57:02:07:93:73:54:61:ae:46:65:b9:0d:54:19:e5:48:cd:
26:a2:53:4b:b1:7d:3f:af:c4:f3:7f:60:da:7c:f8:9c:d0:e6:
7d:4e:e0:97:9d:a0:c5:b7:15:d1:8f:b8:86:48:a3:a7:7e:bd:
c4:a1:58:7c:29:89:f9:65:98:1e:ac:7a:fa:33:a0:d0:b2:fa:
00:54:32:85:f6:ad:13:38:32:dc:4d:3d:b0:1b:06:d1:18:ab:
ca:e7:7d:72:34:c4:fa:66:aa:9f:e9:dc:d9:dc:1b:c5:80:1e:
a8:7c:85:14:6f:54:ab:19:08:de:28:29:dc:af:17:af:4f:41:
34:6f:ee:ec:44:51:70:f9:71:e1:14:76:16:7e:1e:59:eb:18:
0f:22:ed:37:9a:24:f8:bb:42:d2:26:e7:f8:2a:3e:f4:2f:fb:
7f:ea:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:32 2025 by rpki-client