Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/353EBB3EC28911EF84CA70AD762E951A.roa
File: 353EBB3EC28911EF84CA70AD762E951A.roa (raw, json)
Hash identifier: iJU2WRO+CCGTikwdi2DS7MU8iQFEiXGpP97y/2u/+tY=
Subject key identifier: 14:D0:B1:E9:50:FF:D9:9F:CA:36:74:FC:34:71:C4:5B:7C:04:01:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E94D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/353EBB3EC28911EF84CA70AD762E951A.roa
Signing time: Wed 25 Dec 2024 06:26:43 +0000
ROA not before: Wed 25 Dec 2024 06:26:40 +0000
ROA not after: Wed 10 Dec 2025 06:26:40 +0000
asID: 984
IP address blocks: 156.228.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59725 (0xe94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:26:40 2024 GMT
Not After : Dec 10 06:26:40 2025 GMT
Subject: CN=676ba5a3-3862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:37:ce:75:99:09:85:46:b8:6a:11:73:b6:
01:99:c4:39:71:74:44:c6:6e:87:70:18:04:a4:a5:
06:e5:c2:45:70:17:3c:cf:78:8b:02:47:34:d0:17:
db:7e:65:e5:87:f8:63:6f:e1:b3:0e:20:65:52:82:
32:a9:6f:a2:f8:1f:ac:c1:e7:e5:b1:e1:38:b1:0a:
3d:b0:b9:4d:6f:96:ab:f3:23:8f:6a:4c:19:2f:c7:
e3:02:4e:77:c5:28:32:b1:fc:87:63:a8:db:34:9c:
a7:cb:06:93:3f:12:97:8a:16:bb:a5:78:90:00:7b:
3e:3a:33:99:fd:b3:2b:3e:91:08:a2:df:59:be:12:
17:50:fa:89:fb:72:ef:fe:a0:b7:03:01:9b:b5:f1:
97:b3:e2:a7:6a:a1:c4:24:72:b2:e2:f4:67:2c:df:
31:d4:27:69:b3:3c:df:3c:20:53:9f:f1:8b:a3:37:
1e:b8:85:24:7b:0f:cb:52:c4:4b:e7:03:e5:fe:80:
0b:6f:a3:a7:6f:6f:a6:eb:38:2f:fb:d3:07:0e:e2:
97:b2:c0:b7:37:b5:ce:dc:82:30:ba:ba:9d:e6:8a:
8b:1f:25:5d:12:34:35:5c:f2:7f:30:8d:d4:f8:57:
b0:7f:6c:26:56:2b:85:9a:6e:cf:bd:6a:c9:6e:3d:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D0:B1:E9:50:FF:D9:9F:CA:36:74:FC:34:71:C4:5B:7C:04:01:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/353EBB3EC28911EF84CA70AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.71.0/24
Signature Algorithm: sha256WithRSAEncryption
89:84:70:ca:96:4e:91:14:a8:0e:48:bf:82:ce:86:2e:ea:df:
1f:7b:5b:2c:e7:7a:c1:de:ab:9c:a8:7b:92:f8:f1:15:89:52:
40:e2:9a:fd:80:d3:ab:69:6f:62:7b:7f:1c:39:e4:55:82:65:
f9:83:3a:b4:15:18:a4:6a:0a:3d:f7:16:1d:b1:c1:8b:ab:c8:
b7:bb:57:17:19:4b:68:28:4e:dd:7b:de:39:6a:c5:64:0a:ee:
a0:13:53:77:36:f4:37:4d:45:48:f8:d9:2f:b2:00:b8:e8:a3:
5a:95:c9:e0:16:d9:ee:6c:ae:9a:03:13:bf:e4:a4:6c:61:f1:
74:fb:ce:dd:8c:0f:c8:de:6c:09:c2:a9:00:a8:73:8c:bb:53:
0a:8b:5e:00:6c:00:11:57:2b:b9:17:30:fb:7b:83:46:8e:81:
22:ab:38:5c:13:75:8c:bb:92:8e:c3:4a:50:bc:60:61:d1:5c:
e5:40:93:f5:e8:b6:24:5e:a7:91:c1:8e:ca:e8:67:92:2d:aa:
4b:55:25:e1:7e:f4:2c:69:fe:13:0f:75:d0:19:21:c7:c5:4b:
1a:b2:9b:ec:32:2d:0c:85:4a:b9:89:d7:b5:bb:1c:1a:5c:f3:
f8:1c:54:a3:32:ef:35:38:98:11:99:eb:ff:0e:f6:29:8f:a4:
09:ff:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:35:57 2025 by rpki-client