Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E2B360D31511EFA4257A51762E951A.roa
File: 34E2B360D31511EFA4257A51762E951A.roa (raw, json)
Hash identifier: Wnx8PEehU8I3lRa2H0JPwacRtOHWC8vbIWZHyJde+GQ=
Subject key identifier: 84:49:85:E8:6D:D4:35:8D:A1:7C:9B:69:BF:0C:28:B2:33:12:AC:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010867
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E2B360D31511EFA4257A51762E951A.roa
Signing time: Wed 15 Jan 2025 07:49:11 +0000
ROA not before: Wed 15 Jan 2025 07:49:07 +0000
ROA not after: Mon 03 Jan 2028 07:49:07 +0000
asID: 17561
IP address blocks: 156.254.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67687 (0x10867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 07:49:07 2025 GMT
Not After : Jan 3 07:49:07 2028 GMT
Subject: CN=67876877-dd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:c3:30:2c:08:ca:08:e5:62:36:23:8a:39:
2a:a8:33:ab:5c:7e:b2:02:36:98:22:27:06:ef:a2:
51:5b:0b:a3:c5:d0:89:7a:23:55:9c:1a:f8:3e:c3:
ac:4d:13:da:73:4a:f2:9d:5b:b8:f6:41:ad:d2:f6:
8c:e1:0c:37:d5:86:a4:5f:b6:1d:76:29:f5:d9:d3:
7f:6c:63:15:99:fd:90:44:7f:5a:68:bb:0e:20:96:
6a:4d:48:ef:b9:06:95:8a:03:e2:2d:82:b8:7a:64:
46:52:24:9d:63:40:87:22:8f:c6:42:78:c1:1e:08:
ec:3a:4c:c8:e6:f9:71:24:7a:1c:3a:c3:de:3d:ec:
64:50:fe:76:a6:8f:19:a3:10:bd:d1:c7:f3:a1:d9:
42:e4:b1:df:69:03:ba:13:1f:1e:1e:1b:8a:03:bd:
f4:da:e6:5d:10:3f:bf:55:0a:d8:ce:64:e6:cc:b3:
fb:f2:ee:fe:bb:7d:fa:07:0d:7b:48:2f:e0:df:43:
65:3c:0b:31:51:96:9c:34:7f:8c:4b:12:36:2c:b0:
fc:57:73:d9:5c:80:5c:de:a7:e2:90:7f:0a:54:14:
8a:c2:4f:a2:1d:f4:83:83:e7:0b:ea:63:ba:03:19:
fb:12:54:f9:d9:a1:d9:e3:c6:5e:e5:5a:45:2f:9c:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:49:85:E8:6D:D4:35:8D:A1:7C:9B:69:BF:0C:28:B2:33:12:AC:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E2B360D31511EFA4257A51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.73.0/24
Signature Algorithm: sha256WithRSAEncryption
72:68:32:cb:e9:37:67:6d:4f:cf:a1:8b:04:a2:27:19:df:2e:
e6:dd:cb:59:8a:bf:fe:37:dc:62:f7:6a:40:20:a9:33:9b:e4:
a0:29:7b:7a:e7:bc:b8:6e:ea:44:fb:44:10:e3:65:77:a6:c8:
36:04:ee:a7:fc:e6:ec:8e:21:99:5f:ad:19:ba:3e:09:bb:7d:
e8:21:0c:c1:8b:c6:1b:c7:3f:15:fe:ae:2d:61:3d:0e:40:14:
ed:6c:80:04:19:35:9c:67:9f:5c:77:f2:61:81:cf:00:c0:72:
dd:ba:9b:dd:7a:0c:c7:d9:87:cf:56:28:67:b5:7a:05:73:ed:
ad:41:a9:4b:f7:4c:07:6a:1a:9c:b6:3a:c8:74:84:6f:95:53:
4a:02:e7:9e:87:82:83:25:6b:5e:5b:02:56:e6:73:5f:a5:f1:
39:30:a6:11:00:52:1d:f4:e7:ae:1d:90:cd:e2:e9:37:a5:5b:
3b:85:04:bb:66:f3:09:48:fa:bb:ac:1f:23:8a:54:f9:4e:0b:
d8:da:64:f1:b9:06:53:46:95:b7:b9:f3:e0:b3:54:7d:0f:fc:
7e:f3:e5:78:73:6d:46:5f:c7:8a:7b:64:6e:79:ee:21:26:d1:
3d:c9:a6:90:1f:ef:26:e2:25:1b:32:40:ba:47:e7:44:12:98:
85:d3:a9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:56 2025 by rpki-client