Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33A0C7B0D17D11EFA1A836AE762E951A.roa
File: 33A0C7B0D17D11EFA1A836AE762E951A.roa (raw, json)
Hash identifier: d4DnwlO4aLZJGFxCNASA5qvwZt+B6ZT6HUEBFXA+YsA=
Subject key identifier: 9D:97:13:00:72:0D:41:D0:F8:BC:14:4D:BA:F2:E9:17:7B:3E:F0:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010680
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33A0C7B0D17D11EFA1A836AE762E951A.roa
Signing time: Mon 13 Jan 2025 07:08:34 +0000
ROA not before: Mon 13 Jan 2025 07:08:30 +0000
ROA not after: Thu 20 Feb 2025 07:08:30 +0000
asID: 213828
IP address blocks: 156.253.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67200 (0x10680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 07:08:30 2025 GMT
Not After : Feb 20 07:08:30 2025 GMT
Subject: CN=6784bbf2-e6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:db:20:87:5d:ab:f0:36:b7:3e:bc:b4:ef:
ac:19:df:5e:fc:41:22:be:24:ea:7a:7f:bd:72:3c:
87:6e:ea:24:89:19:1a:76:96:1a:06:45:e0:3a:aa:
26:ae:05:37:78:57:99:bb:bb:e8:88:fd:70:30:d5:
aa:ea:87:4c:03:49:f0:92:ef:36:37:43:c4:6f:1b:
10:d9:72:1b:91:33:6a:01:f2:90:e0:e2:e3:fe:c7:
d1:92:6f:85:cf:d7:c8:d8:aa:da:51:5b:7e:34:9a:
91:21:1d:23:ac:93:a2:3a:ac:d3:3c:55:39:4e:13:
44:07:c0:9e:af:3c:00:a2:22:26:4c:3d:17:c6:f9:
71:54:bf:cd:cb:a8:84:75:41:ac:b6:fd:bc:bb:8e:
39:79:ce:b9:2b:ae:30:5f:89:eb:a8:e5:bb:b6:cf:
0a:9f:75:0b:55:64:59:a5:4b:8f:c2:3e:52:e8:a1:
ed:ee:10:67:b0:95:2b:93:19:d5:2d:88:34:ce:f7:
58:8b:94:75:1c:4d:52:41:8b:d3:75:1d:a8:8e:e4:
c7:68:fb:c5:6e:04:73:b9:0e:8f:74:48:19:60:68:
d7:5f:9e:4e:a3:30:60:55:2a:af:5f:c3:ad:7f:2e:
4b:df:d0:9d:46:57:75:80:b2:8c:21:57:be:8f:ae:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:97:13:00:72:0D:41:D0:F8:BC:14:4D:BA:F2:E9:17:7B:3E:F0:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33A0C7B0D17D11EFA1A836AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:42:dc:47:94:1b:71:53:91:80:51:47:bb:86:07:17:c8:a4:
b5:20:1c:ca:f9:e9:4f:e4:ce:d1:26:00:2a:84:dc:74:68:4f:
7d:70:1f:10:af:cf:96:e6:c6:be:a4:cb:2e:7e:44:86:d0:1a:
21:db:f7:55:c4:ec:f2:bb:fe:3d:d8:86:d6:ba:45:f7:58:ee:
3c:e9:c1:21:ee:40:bf:a8:07:31:61:95:38:ba:c9:3f:7b:78:
79:5c:85:34:81:f1:ae:42:cc:7d:cd:42:02:b6:07:81:89:40:
47:13:65:38:31:c6:df:81:73:cb:58:75:e5:e9:4d:82:54:df:
44:d6:1b:ba:b8:23:a5:f5:e6:87:4e:3d:d3:8e:3a:45:c5:26:
c0:98:ff:0f:89:84:c6:13:15:08:06:da:83:32:e2:db:5a:db:
a1:9b:77:1e:8f:61:de:77:8e:c7:70:5b:3b:fc:cc:ba:66:dd:
bb:9e:79:72:c1:16:5f:ac:33:5f:33:a0:e3:00:18:9d:15:e0:
ef:80:5e:52:e4:a3:fa:91:49:07:ce:15:f7:3b:98:64:0f:a7:
eb:d5:45:5d:2d:e2:91:07:a8:ca:f5:a9:1b:cc:5b:41:e7:e1:
d7:bc:f4:92:35:94:dd:65:f6:77:4d:4f:f6:05:91:74:ea:8f:
90:d9:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:52 2025 by rpki-client