Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/396A8740CE4311EF87C1EA46762E951A.roa
File: 396A8740CE4311EF87C1EA46762E951A.roa (raw, json)
Hash identifier: DmfDo2T1XBThlWTQW2thTzpA9W2Cutyv3Ifpj37OsSM=
Subject key identifier: A7:E5:C4:94:0E:FE:A3:98:79:81:F1:95:82:51:35:E5:16:74:CF:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010281
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/396A8740CE4311EF87C1EA46762E951A.roa
Signing time: Thu 09 Jan 2025 04:35:59 +0000
ROA not before: Thu 09 Jan 2025 04:35:54 +0000
ROA not after: Fri 09 Jan 2026 04:35:54 +0000
asID: 17561
IP address blocks: 156.245.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66177 (0x10281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 04:35:54 2025 GMT
Not After : Jan 9 04:35:54 2026 GMT
Subject: CN=677f522f-3a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:90:d0:59:98:38:3e:e4:bd:e0:03:23:e9:
20:dc:d4:ad:9f:e5:35:99:24:03:19:0a:72:ed:6b:
01:a9:f9:fe:e1:b2:89:27:a1:82:b7:5b:31:f0:3e:
73:13:03:bc:82:fa:0f:f9:30:77:34:11:c8:d1:da:
1f:ce:9a:c4:6a:78:08:2a:c0:c0:16:15:14:26:7e:
5f:47:53:29:97:c7:07:bf:47:c5:40:bd:72:a7:d2:
2b:23:8d:45:84:cc:3e:2e:e7:11:46:f6:a1:9e:ec:
ec:c5:a7:51:9a:81:ac:48:cd:ed:da:dd:a3:cc:b0:
de:0b:f6:06:27:bc:f9:e6:50:2c:89:8d:61:63:64:
ae:33:b4:e5:b9:c0:cb:2c:11:23:9e:0c:02:1c:59:
69:c8:13:4c:1f:a2:ba:e9:18:6a:f7:c4:8e:a3:76:
08:ea:ca:fa:ad:03:7b:23:19:6a:6f:0f:72:ec:43:
a2:d7:a2:ee:a1:59:0d:45:f0:5c:6d:ce:fd:fc:36:
35:c2:68:47:26:26:0b:a7:99:f9:42:50:6a:17:3b:
77:2b:3c:53:b8:1c:ba:a3:e8:3a:18:1d:93:4e:c3:
31:65:e0:35:d1:6b:32:e8:ec:5e:01:d0:67:03:8c:
52:10:02:a5:05:58:8e:6f:c1:14:29:d4:8a:45:c7:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E5:C4:94:0E:FE:A3:98:79:81:F1:95:82:51:35:E5:16:74:CF:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/396A8740CE4311EF87C1EA46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.116.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d5:cf:1c:01:8e:18:de:71:64:6c:55:56:67:6e:f4:56:05:
cd:98:6c:7e:db:6c:e5:6f:e2:0d:06:5d:d2:4b:b4:32:71:c4:
d3:2c:91:93:97:f3:9e:de:d3:49:23:62:2f:72:80:b9:c6:29:
da:b5:ed:d0:13:02:09:aa:87:26:2b:a5:5b:37:67:4e:3f:19:
ca:d0:9d:79:c6:03:55:5a:23:b3:18:1b:57:3b:04:9d:8d:77:
e4:21:ed:13:33:e3:bf:20:02:1e:a2:f3:9f:77:47:40:9a:ab:
aa:a7:39:1c:32:17:67:04:7f:95:b8:9f:9d:13:2f:c9:0a:fc:
a1:51:9b:a4:ee:a6:26:3c:92:3d:96:13:ef:4e:7d:7e:71:9e:
ac:9f:6e:4c:c8:0d:87:bd:c0:ec:a5:14:b6:3e:64:15:34:0b:
93:47:0b:9f:cf:60:60:28:65:fa:48:79:02:30:1a:ea:c5:b7:
be:64:e1:78:98:2f:c1:9f:b4:47:d3:09:2a:70:01:95:8c:36:
a0:b6:73:35:f6:ad:39:66:1e:4b:4f:a0:c9:d9:e8:00:e5:86:
56:f5:fe:57:0c:31:7e:a1:15:86:16:21:3d:94:6e:da:c0:b7:
30:01:bd:86:c9:51:1e:6d:4d:8c:ba:fe:2e:88:2a:03:93:b9:
3b:b4:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:37 2025 by rpki-client