Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/369836DCD4B711EF9CE77653762E951A.roa
File: 369836DCD4B711EF9CE77653762E951A.roa (raw, json)
Hash identifier: 0FfiEemVIt2MgwcdiuPdgv27V5NoghfnbkmYKB6UMeY=
Subject key identifier: 76:B9:3B:57:F4:F2:3F:77:6B:CC:44:20:6C:59:E1:D0:A7:4A:F3:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010965
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/369836DCD4B711EF9CE77653762E951A.roa
Signing time: Fri 17 Jan 2025 09:41:23 +0000
ROA not before: Fri 17 Jan 2025 09:41:19 +0000
ROA not after: Sun 14 Dec 2025 09:41:19 +0000
asID: 4134
IP address blocks: 156.242.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67941 (0x10965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 09:41:19 2025 GMT
Not After : Dec 14 09:41:19 2025 GMT
Subject: CN=678a25c3-3ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:1b:7f:32:12:5a:94:ef:f0:06:d6:13:97:
73:3e:70:65:0f:35:75:50:e2:a1:79:16:9b:9e:99:
dd:51:a2:d2:7e:b8:6b:4c:53:91:e8:d5:ea:cb:1a:
fc:2a:e0:e8:37:69:ed:6a:13:de:c7:f9:62:50:91:
ed:20:d7:8b:bb:d6:6a:a4:ac:91:e9:38:69:2e:fa:
d8:70:87:04:7e:dc:36:d4:f1:35:94:5e:32:ec:ae:
52:23:75:3a:37:da:f2:bb:a9:2f:a8:ea:db:8e:ba:
b0:db:70:16:6e:0b:c0:e1:96:bb:50:53:2d:96:05:
aa:00:d3:10:37:bd:f1:5c:f6:4d:12:2f:93:b0:9b:
1e:f7:0e:83:f0:18:33:bc:cf:3a:e7:f2:31:98:4a:
d1:2e:2b:fe:3b:ff:56:c8:c8:76:1d:95:bc:81:55:
55:51:72:17:96:1c:aa:a9:a5:a6:59:34:06:ad:2d:
87:0e:7b:ce:0d:60:25:cf:40:fc:ce:b4:1c:31:ec:
7c:f4:a8:4f:79:45:b1:df:fa:18:0b:b5:28:e9:92:
78:a0:42:e0:80:c8:e5:31:49:e0:81:dc:7d:6e:0d:
5c:a6:1e:d5:9f:09:83:b8:ee:5f:6c:05:fd:23:2d:
f6:8e:c9:22:f0:bb:c2:28:e6:6f:c0:a8:61:dc:98:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B9:3B:57:F4:F2:3F:77:6B:CC:44:20:6C:59:E1:D0:A7:4A:F3:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/369836DCD4B711EF9CE77653762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.5.0/24
Signature Algorithm: sha256WithRSAEncryption
63:70:7f:76:90:f4:8b:86:2f:ba:55:49:b4:65:7c:c0:cf:ab:
f1:19:c6:c7:b1:94:ab:93:5a:bc:26:df:9e:35:1e:0e:af:b3:
99:a0:e3:74:6c:0c:9f:8a:a0:30:96:4f:bf:3a:54:39:61:a1:
89:8c:a8:20:f3:b0:cc:1c:89:1f:19:e4:0b:6c:bb:a6:3e:64:
54:2f:70:b3:d0:44:d7:83:9a:9d:01:d5:4e:ed:2b:c3:04:56:
02:9f:87:e3:47:6c:9e:c8:ec:94:05:c2:58:aa:51:67:1c:6f:
8f:fa:67:55:c1:e5:13:b8:42:f6:37:30:9f:ff:a0:b1:17:2d:
87:3c:0b:3c:ef:74:b6:fb:2b:b0:20:53:11:7e:20:fb:a4:01:
61:23:cc:21:11:26:b4:ab:a5:28:ed:ca:3e:21:0a:7f:af:a4:
99:f5:55:70:ef:b2:6e:b4:c9:a1:b3:0c:ab:c0:5c:42:44:66:
fe:ee:ce:ee:e4:75:e2:7d:84:46:db:1d:8e:20:7d:0e:58:ee:
56:a8:db:12:77:70:db:e7:e8:60:4b:94:2e:a8:28:07:2c:aa:
4d:ba:da:2d:1c:20:dd:fe:44:8d:9b:09:1f:f1:f4:51:49:e3:
e3:38:17:31:25:d7:4e:ae:fd:28:07:57:a8:26:34:92:75:92:
4d:52:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:28 2025 by rpki-client