Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3855F4EECC8F11EFBD3D134C762E951A.roa
File: 3855F4EECC8F11EFBD3D134C762E951A.roa (raw, json)
Hash identifier: lNj1Rw+jRULuz/2+S6eN4hzAPVWo3PuMjpRjv6civ0I=
Subject key identifier: 98:11:E5:2C:8B:DD:63:61:FB:96:2D:36:D1:06:8F:92:16:A8:AA:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3855F4EECC8F11EFBD3D134C762E951A.roa
Signing time: Tue 07 Jan 2025 00:34:57 +0000
ROA not before: Tue 07 Jan 2025 00:00:53 +0000
ROA not after: Sat 13 Dec 2025 00:00:53 +0000
asID: 984
IP address blocks: 156.226.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63737 (0xf8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 00:00:53 2025 GMT
Not After : Dec 13 00:00:53 2025 GMT
Subject: CN=677c76b1-6360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:f2:bf:e4:8c:3c:e7:a3:d3:f8:7e:11:64:
bf:6d:e5:2b:72:81:36:06:bd:d2:90:b5:13:5e:2c:
89:65:69:69:36:2b:af:a3:cc:6b:d8:a9:49:6c:51:
30:fa:4a:02:44:13:3c:6f:a4:8a:93:59:a0:4e:17:
3f:60:d2:1a:ae:1c:fe:a0:30:5c:bf:3e:ee:bd:91:
74:4b:2a:02:d6:72:be:e8:3d:cb:9d:8d:e7:fa:c3:
c4:d7:7c:20:22:87:95:22:d0:71:c3:b9:e6:91:40:
5f:4d:d4:18:ea:2e:55:66:9e:66:a8:98:db:a9:38:
a1:dc:35:cb:e9:a9:05:01:36:0b:a9:fc:11:ea:99:
14:c1:cb:08:51:7c:98:f6:15:59:11:f0:a3:85:0c:
09:36:ac:11:54:d2:f1:7c:02:a4:dd:f8:a4:00:9d:
43:0e:90:fb:39:6e:13:07:35:47:90:4d:ae:fd:da:
04:28:f5:98:55:2d:57:d8:5e:45:45:5a:93:eb:8a:
c1:68:13:b6:27:80:d2:b3:d3:69:1c:62:6f:e7:a3:
62:ca:b1:d1:f4:7b:4b:b2:03:a0:c7:0e:d3:05:f3:
cf:e5:8c:4d:e7:71:30:66:07:5f:06:56:cd:6f:77:
56:03:8b:36:93:cb:37:0c:60:00:8b:4d:5d:88:3a:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:11:E5:2C:8B:DD:63:61:FB:96:2D:36:D1:06:8F:92:16:A8:AA:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3855F4EECC8F11EFBD3D134C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:98:6e:81:26:14:84:dc:33:7e:01:92:d9:0a:6f:b1:b3:03:
bb:87:b0:db:f8:df:09:80:5c:ba:7b:d8:0d:aa:70:8a:b7:a9:
67:7a:06:ac:5c:10:c4:b9:5a:88:17:75:f7:46:6b:18:64:bd:
4c:d0:35:0a:3b:f7:b1:a4:d3:39:d6:cf:a6:7b:24:93:f8:8e:
8a:77:d4:7f:54:45:f2:57:9e:69:9e:62:13:72:72:98:0b:de:
c2:4b:16:cd:69:c1:27:02:0d:05:9d:5d:74:12:59:a1:05:ba:
90:13:af:6d:87:9e:f7:47:76:40:91:d0:fc:56:bf:58:31:4a:
28:29:a5:7a:99:7b:07:24:5f:8c:c9:d5:5c:1d:88:40:32:d7:
36:c7:41:23:8f:92:a6:ed:02:6e:2a:ef:a3:8d:69:73:af:0d:
89:b3:a8:5a:b7:9b:31:e4:ea:4f:16:ff:04:f3:41:4f:7a:af:
83:89:cd:26:81:57:7e:80:90:ff:62:f0:d3:c7:20:57:1d:bc:
79:d9:dc:a7:6d:16:b4:06:1b:dd:e0:9f:d6:31:76:4e:55:8a:
a9:de:c9:70:44:3c:66:5c:9f:43:8f:71:37:0d:9a:22:e5:75:
cd:01:24:6f:60:a8:e8:4c:95:66:9f:73:f4:d4:6c:96:f2:54:
19:76:a4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:42 2025 by rpki-client