Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/385B9DB4CCBB11EFA71F9577762E951A.roa
File: 385B9DB4CCBB11EFA71F9577762E951A.roa (raw, json)
Hash identifier: Tkq+H377PJg6k8pse5ig3OESowJ73Px5CLqJCvAWEz8=
Subject key identifier: 2D:5F:3F:6A:DD:FB:18:5D:96:BE:E3:FE:DE:30:79:34:0E:CD:18:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/385B9DB4CCBB11EFA71F9577762E951A.roa
Signing time: Tue 07 Jan 2025 05:49:55 +0000
ROA not before: Tue 07 Jan 2025 05:49:51 +0000
ROA not after: Mon 13 Dec 2027 05:49:51 +0000
asID: 17561
IP address blocks: 156.233.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64014 (0xfa0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 05:49:51 2025 GMT
Not After : Dec 13 05:49:51 2027 GMT
Subject: CN=677cc083-e5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:5b:f8:3e:07:85:5f:0e:ac:df:74:24:3a:
5f:11:bd:5a:70:66:ae:cd:20:4b:2a:0d:b1:b8:27:
65:c2:38:ba:9e:8f:20:32:ad:08:73:51:78:d9:fa:
08:e7:89:79:04:1e:f8:3d:ec:d4:ed:65:d0:0f:e6:
74:be:02:21:97:21:d2:34:ee:0b:5f:b1:bc:19:ea:
dd:e5:62:e1:be:2d:b8:51:37:5a:75:81:1d:f5:4c:
7f:db:ed:14:4e:e3:c2:68:16:71:aa:30:0a:21:a6:
68:98:90:88:8b:27:48:ab:bf:fe:3c:db:51:84:30:
c4:c2:21:a3:cb:33:22:61:65:a1:c6:77:57:e3:6f:
17:57:e6:b7:45:a2:ee:9e:69:12:e0:5d:fa:21:ed:
d1:34:14:be:de:60:8f:14:fe:9a:87:26:4b:fa:73:
a5:74:8c:c0:3f:85:85:c7:cf:09:c4:15:23:66:3e:
15:c7:4b:24:ee:02:a8:22:36:9d:bc:af:13:d8:66:
4c:6d:ab:b4:c2:4c:43:a9:d0:62:ea:fa:9c:11:68:
e4:61:85:de:81:b9:a6:b9:5c:33:b6:3a:9b:6e:af:
60:03:29:c0:30:c1:8b:4e:e5:a3:f8:00:d5:5f:08:
da:e2:a8:40:ad:9f:9f:61:7c:96:b6:37:00:5c:42:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5F:3F:6A:DD:FB:18:5D:96:BE:E3:FE:DE:30:79:34:0E:CD:18:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/385B9DB4CCBB11EFA71F9577762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:08:9c:9f:ef:aa:a0:b0:47:88:1b:ba:f6:fa:e6:85:82:a4:
1e:08:df:63:f6:a1:6c:41:fa:3e:9d:ac:0c:35:32:29:28:67:
ce:28:f0:7f:81:cc:46:da:ce:cb:62:9a:0c:eb:e1:49:06:4d:
4a:cd:df:d0:67:38:48:92:08:2f:39:05:64:79:0b:80:31:94:
10:bc:49:a2:59:ba:1b:73:dc:e4:92:fc:8e:c2:42:ce:f8:21:
c8:57:c8:c5:9c:2b:ba:78:1f:8a:21:71:f1:45:c9:2e:12:c6:
8f:13:ca:5e:23:c6:e9:93:04:ef:4f:c9:e2:a1:41:b7:e7:17:
62:75:fa:47:8c:d2:ae:6b:54:d7:89:52:4b:63:40:d0:aa:a1:
20:5d:b5:0c:75:fa:7c:f0:08:eb:a1:99:8f:98:c1:d7:82:0e:
a9:33:46:1e:94:d7:96:96:96:00:40:be:f9:69:5d:d6:60:cb:
ed:ae:81:5f:36:f4:f1:e9:f6:fe:21:98:cc:4e:49:20:cd:dd:
95:58:97:58:ca:c5:88:47:65:fa:f2:c0:63:a7:37:a8:f1:4f:
31:1b:bc:48:17:e4:42:43:cf:04:75:b0:e6:c0:2a:cc:6d:1c:
cd:bb:d7:86:c8:87:71:80:67:c2:41:ba:e2:72:e2:36:bc:00:
a2:af:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:01 2025 by rpki-client