Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382F46B0CD5B11EFBB49E267762E951A.roa
File: 382F46B0CD5B11EFBB49E267762E951A.roa (raw, json)
Hash identifier: AeUCjZFUSO+zRcsX9RQ03GF84+IwKq/l4R0XYYLWK/o=
Subject key identifier: 8E:A9:43:19:19:6D:32:CF:9A:E3:60:4B:4E:D5:F3:C9:10:C6:54:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382F46B0CD5B11EFBB49E267762E951A.roa
Signing time: Wed 08 Jan 2025 00:55:14 +0000
ROA not before: Wed 08 Jan 2025 00:00:10 +0000
ROA not after: Sat 13 Dec 2025 00:00:10 +0000
asID: 984
IP address blocks: 156.247.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65291 (0xff0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 00:00:10 2025 GMT
Not After : Dec 13 00:00:10 2025 GMT
Subject: CN=677dccf2-a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:3d:13:82:37:60:b4:b4:6d:e2:ba:c5:e6:
78:54:03:ed:e3:f4:41:79:47:8a:e7:86:6f:a5:dd:
81:3f:98:f1:cd:4b:27:7a:62:22:e2:a5:96:5e:bf:
ff:9c:7d:55:e3:87:e1:81:18:fa:88:7d:2f:bb:1a:
d1:da:e8:21:df:e2:d5:bb:b0:c6:32:91:af:ea:42:
66:a7:f4:da:12:b0:e6:15:b0:c5:b4:ee:9e:b4:a7:
15:8b:70:7e:04:f6:ae:3e:1f:8b:74:63:81:88:05:
b8:09:22:6f:40:1d:7d:ef:a6:af:c4:9d:af:26:89:
14:53:a0:3e:43:2a:1a:f6:d2:15:0c:2a:63:78:97:
3e:c4:d3:e1:0b:81:41:b4:d8:62:30:08:48:45:a6:
14:31:ca:7f:17:15:de:df:fe:01:a0:7c:14:39:fb:
cb:43:8e:d9:3f:14:a0:ad:4f:bf:5b:79:ed:24:59:
30:0c:1c:fa:4e:37:90:80:92:4d:47:e7:20:08:4d:
b2:35:1d:58:12:de:de:b4:d1:db:c8:f9:f4:10:24:
06:13:96:df:d2:f4:9c:76:4e:93:39:d3:0f:08:c3:
59:61:ad:22:90:f6:a6:f6:a2:c3:b7:7b:84:f0:35:
04:9e:34:47:d0:cd:34:51:85:33:10:ca:c2:c4:13:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A9:43:19:19:6D:32:CF:9A:E3:60:4B:4E:D5:F3:C9:10:C6:54:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382F46B0CD5B11EFBB49E267762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bf:a2:a3:94:15:cc:d7:7f:53:d9:b6:98:d3:ad:1a:82:f9:
5a:64:1e:7d:04:bd:7c:30:1b:38:8c:bf:07:4b:b1:3a:e6:62:
e0:4a:36:04:91:f8:b6:e1:95:28:ef:bc:65:9f:c3:3d:c9:82:
e0:4b:eb:a4:65:b4:95:35:58:ec:f3:f1:58:57:b7:a7:c7:29:
a5:7b:b2:c1:98:77:91:48:b1:39:cc:8d:08:cb:32:fb:cc:f7:
8e:b9:55:52:c5:43:80:d1:91:88:98:62:fd:d7:21:08:4c:5d:
5d:36:69:3a:4e:be:99:80:92:b0:9f:81:ba:2c:01:d2:d0:41:
98:54:f6:35:a9:cb:10:65:af:f2:31:7b:77:e4:99:02:00:b0:
f2:94:fc:8a:a5:ca:02:56:7b:51:6a:e4:4a:9c:05:2e:e9:c5:
73:48:d2:4b:4b:89:7f:b4:32:6e:bb:b7:c0:e7:7b:d9:ed:94:
b8:fc:1f:19:6f:e7:95:dd:84:39:c7:e4:54:12:d9:fb:92:8c:
a9:3e:83:f2:6b:20:1a:da:a1:65:f3:4b:a1:45:8a:1f:45:17:
e1:2a:c6:32:b5:a3:11:5c:d4:fb:12:90:1a:3c:cf:42:67:67:
ff:01:b3:07:0f:44:4c:ef:55:74:88:18:e6:94:e3:b4:64:ff:
19:39:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:24 2025 by rpki-client