Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36F1D00ACCC111EF8C7D149D762E951A.roa
File: 36F1D00ACCC111EF8C7D149D762E951A.roa (raw, json)
Hash identifier: u/UopoXIEGZqkkpMPf90vvvI9l0fPpYUHPNUmHXqwHE=
Subject key identifier: FE:49:EC:85:4A:FD:51:15:30:13:BF:89:A9:C5:32:DA:85:4D:1E:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36F1D00ACCC111EF8C7D149D762E951A.roa
Signing time: Tue 07 Jan 2025 06:32:49 +0000
ROA not before: Tue 07 Jan 2025 06:32:46 +0000
ROA not after: Sat 13 Dec 2025 06:32:46 +0000
asID: 984
IP address blocks: 156.233.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64036 (0xfa24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 06:32:46 2025 GMT
Not After : Dec 13 06:32:46 2025 GMT
Subject: CN=677cca91-273b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:05:f3:7d:d4:35:1f:84:15:45:9b:8f:c4:
a1:db:ed:db:72:1f:a5:36:7c:34:8d:a5:d5:7d:02:
11:0f:18:7b:3f:a9:60:f0:35:43:af:05:0f:2f:a9:
3f:2d:29:22:4e:33:41:af:03:ae:a9:cf:9e:1c:7b:
33:0d:3f:d4:da:9b:42:ec:16:f5:2a:af:4e:3e:30:
63:1c:00:11:80:24:de:d9:97:53:ba:67:bf:33:ac:
ac:2b:d9:01:fa:df:74:4a:6f:fc:bb:7d:07:3c:4b:
c7:b9:06:73:29:37:ea:70:f8:9b:ca:fc:14:d3:b4:
e8:c0:9c:e6:34:7f:c9:5a:bf:ba:30:35:c8:bf:e9:
89:49:df:60:cb:16:30:de:35:fc:cf:31:54:26:16:
41:21:e8:87:d1:e4:38:f3:f3:ed:1f:71:e5:57:24:
22:17:0d:79:e4:14:eb:db:82:19:56:83:20:0b:c8:
82:5c:19:61:12:d8:56:27:c6:0a:4b:b7:51:0a:c3:
ba:34:14:e7:fd:f2:c9:15:0c:f0:98:70:4b:36:8d:
23:2a:0b:90:d0:de:12:9f:c6:05:e6:5e:14:ff:cd:
d4:3e:18:61:6d:95:fc:f2:d5:09:24:a4:8a:33:71:
92:f6:f2:78:f9:78:35:04:bb:ad:0d:f7:17:43:81:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:EC:85:4A:FD:51:15:30:13:BF:89:A9:C5:32:DA:85:4D:1E:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36F1D00ACCC111EF8C7D149D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:73:4e:2b:42:92:25:af:e7:02:c1:4e:a5:ce:c3:8e:07:e0:
f0:b6:02:ac:5e:c7:89:e0:6e:a1:d9:14:7a:b6:db:a8:fd:fa:
ea:58:0b:a5:bb:1e:bc:25:7a:d7:31:6c:6d:dc:ac:0e:0d:52:
71:ef:6f:84:eb:df:9d:e4:4e:fc:30:15:9a:46:a4:c4:69:07:
31:6d:78:41:7b:d3:80:f7:00:06:36:8f:a0:3e:e5:79:6f:48:
60:4e:51:39:54:a0:9a:52:cd:15:75:5f:ef:4f:59:f6:22:36:
66:de:14:66:08:dd:1c:d8:25:38:4b:4f:6c:b5:ca:89:ac:fb:
5d:6f:bb:ae:6f:50:7c:ac:49:0f:86:e1:08:5b:35:68:33:e9:
e3:64:01:0d:b2:6a:e5:1b:e1:11:92:08:e6:0f:05:2f:57:26:
07:7d:b7:bd:fc:53:79:03:99:da:c7:ed:b2:e7:1f:5d:63:7e:
15:b5:06:55:a5:76:92:6e:bb:6b:15:50:03:e8:0e:53:e0:18:
88:e6:1a:97:f2:69:a0:37:01:0c:78:0e:69:4e:06:ba:f2:08:
72:72:cf:a4:85:68:cd:f4:0c:74:22:79:2a:2e:b9:81:19:54:
bc:81:e7:f0:7d:2a:4b:64:10:62:df:20:3e:da:c8:61:ff:71:
13:80:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:59 2025 by rpki-client