Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38F9E0ECCD4611EF8F61DF63762E951A.roa
File: 38F9E0ECCD4611EF8F61DF63762E951A.roa (raw, json)
Hash identifier: 0JcyqxHVQY+lIz87WIJrV3ZUfE/XqLb6rTmwxYAz5Jo=
Subject key identifier: 4E:E5:46:AF:54:62:4B:2D:A0:51:5A:EB:80:F7:79:88:17:B3:37:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38F9E0ECCD4611EF8F61DF63762E951A.roa
Signing time: Tue 07 Jan 2025 22:24:56 +0000
ROA not before: Tue 07 Jan 2025 22:24:52 +0000
ROA not after: Sat 13 Dec 2025 22:24:52 +0000
asID: 984
IP address blocks: 156.243.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65177 (0xfe99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 22:24:52 2025 GMT
Not After : Dec 13 22:24:52 2025 GMT
Subject: CN=677da9b8-555a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:e5:36:aa:f8:ff:17:b2:95:fa:9c:ea:25:
2e:a2:ca:0e:38:7e:b0:a8:e7:5c:ba:a7:70:a7:f1:
59:a4:ab:14:ba:a1:cb:03:58:42:64:8c:72:1e:49:
c5:66:aa:ae:db:29:8c:46:ad:ec:f0:50:da:60:01:
df:61:f0:f0:ff:2b:73:94:86:f9:ba:a4:a8:46:b5:
d3:67:6a:8b:91:b0:69:c5:61:38:24:78:08:40:dc:
ff:59:4d:70:cc:54:d8:ad:4e:92:e0:f3:bd:c2:48:
0b:12:5c:31:a1:25:6a:ae:0d:58:d3:c9:f0:b1:3c:
56:81:de:5c:12:18:a9:7d:6c:7b:05:85:51:6c:74:
b0:28:51:ee:9c:e5:14:c4:af:5e:f8:89:b5:fb:14:
50:09:7f:30:21:a1:ec:9b:e1:d9:b9:a2:c5:d6:8d:
73:4e:cb:d4:fa:da:a2:0e:0c:ff:a7:74:e8:05:55:
8f:92:7b:fa:09:88:e9:a6:c6:b0:9a:07:98:1f:b4:
c8:1f:03:fa:41:a6:f7:9d:4b:4c:f9:40:ba:30:68:
86:6f:81:0b:72:92:6b:cb:bd:6a:f1:e0:2f:ba:29:
71:2f:1c:50:f1:b5:4d:b2:dd:c2:ee:8a:62:17:d9:
bb:35:48:ac:5c:e4:6e:6e:04:2b:32:53:2d:e7:11:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:46:AF:54:62:4B:2D:A0:51:5A:EB:80:F7:79:88:17:B3:37:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38F9E0ECCD4611EF8F61DF63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.120.0/24
Signature Algorithm: sha256WithRSAEncryption
63:76:3e:8c:7f:1f:3f:78:d1:bf:82:db:ab:d4:ee:b7:95:e6:
c9:2c:d5:b4:c3:d1:00:b1:06:b5:78:5c:36:83:dd:cc:ae:bb:
3e:7f:c3:ee:00:ab:3b:55:02:19:ba:72:4a:42:14:2c:34:5e:
a9:8d:c2:fb:c6:ab:1a:97:8e:fc:6b:af:69:ac:6a:2f:ce:5b:
89:7e:c1:38:71:b2:9d:74:f2:ee:14:ab:84:ba:76:62:a4:0d:
5a:10:fe:94:00:7d:16:ef:65:8e:ea:34:7d:b2:91:d9:d5:cb:
1b:d7:ae:10:af:37:e1:39:dc:e9:58:8d:40:dd:42:6f:56:e5:
87:9e:b7:14:63:78:e0:e5:fa:0b:1f:e4:60:e8:fa:2c:3f:76:
4b:c7:e9:3f:60:55:dd:fa:86:88:a8:a7:1d:9c:3b:8b:09:a3:
3e:c5:47:23:6a:e8:2a:8b:af:3c:ca:66:6b:eb:bc:6c:17:01:
cc:78:55:97:bc:96:1f:84:e3:e8:9e:00:41:8c:e7:1e:4a:98:
e9:bf:7a:1d:24:fa:7d:e1:71:81:aa:23:5d:be:dd:a8:d7:3e:
19:a4:68:59:ea:22:e5:80:95:ca:48:40:52:24:e3:45:3c:05:
67:e4:99:6f:57:bd:66:67:ae:59:9c:e0:91:b8:a0:c0:87:94:
3f:d3:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:16 2025 by rpki-client