Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3976A598C27C11EFA6E0EB5C762E951A.roa
File: 3976A598C27C11EFA6E0EB5C762E951A.roa (raw, json)
Hash identifier: vq4vCEL2LrY9Ha5QtYBWu1crDlH4R8k3eWy8+CWXivA=
Subject key identifier: 3F:D4:F0:3F:14:03:F9:40:A5:2E:14:CB:77:AA:C2:9A:BD:45:EB:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3976A598C27C11EFA6E0EB5C762E951A.roa
Signing time: Wed 25 Dec 2024 04:53:47 +0000
ROA not before: Wed 25 Dec 2024 04:53:43 +0000
ROA not after: Wed 10 Dec 2025 04:53:43 +0000
asID: 984
IP address blocks: 156.227.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59565 (0xe8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 04:53:43 2024 GMT
Not After : Dec 10 04:53:43 2025 GMT
Subject: CN=676b8fdb-70e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:91:8c:f3:c8:57:10:52:e2:17:be:6f:92:
34:ea:89:6a:bd:e3:17:20:25:97:07:a7:0e:2b:d4:
47:06:db:43:23:dd:09:e4:2a:6f:1e:a9:75:34:80:
68:2b:d0:3a:da:15:cc:05:4a:79:50:17:90:ae:57:
71:a2:16:9a:89:24:41:81:bc:17:66:05:b0:7c:ba:
47:10:2c:61:6d:07:ca:b0:f3:90:21:72:90:ce:a1:
b7:83:0c:fd:d3:f5:0b:40:ee:ce:a2:54:33:ad:cb:
92:fc:65:85:ec:88:45:08:78:08:00:48:65:72:d5:
72:ae:22:f7:92:1d:31:58:5d:8e:85:dd:7e:03:f8:
1f:9d:83:4a:e3:49:3e:50:81:c0:c2:6b:b5:f3:4a:
83:fb:fc:41:fd:71:53:7b:2b:38:00:d8:6f:82:2c:
32:78:ac:52:93:8c:12:3f:a2:57:4d:8e:3b:88:ea:
c4:f4:43:d5:56:66:45:ca:a7:e3:74:9a:a2:1b:0d:
fc:23:3e:a3:b6:b7:a2:f9:c6:e2:a4:a6:ea:76:e3:
45:1e:08:01:33:b9:a4:a3:72:88:90:ca:2f:91:2d:
02:17:77:32:97:1d:37:f6:9a:4e:ba:99:b5:32:9c:
a3:de:a0:0b:57:54:1d:83:47:d2:1d:3a:7a:07:26:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:F0:3F:14:03:F9:40:A5:2E:14:CB:77:AA:C2:9A:BD:45:EB:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3976A598C27C11EFA6E0EB5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.168.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e8:0c:97:1d:21:c5:a6:ab:ee:c0:86:eb:11:04:ed:13:1a:
7f:12:16:a0:3c:3f:81:ea:48:2f:d9:ce:cc:3a:3b:ef:d8:d9:
bc:f8:19:9a:e5:a6:45:65:a3:9f:e0:3c:7a:9e:23:ac:d1:8e:
9d:ce:27:33:59:d1:55:0b:3c:69:77:82:0f:26:fd:cf:2e:76:
84:b9:5a:7b:3b:a6:79:84:89:0a:f2:d5:65:f8:2e:4b:72:a0:
d9:0c:3c:af:eb:7e:28:92:26:60:6b:86:a2:c1:32:d8:84:f4:
6f:6e:58:d7:c9:09:ef:be:a6:9b:bb:15:d6:e0:be:5a:3d:c6:
4e:91:5a:f0:ab:b6:cf:00:65:94:ca:f5:08:91:b4:ef:da:36:
14:f8:a7:8f:18:dc:04:05:b1:f0:48:2a:7c:98:a8:44:51:fa:
45:b6:10:d2:fe:f7:ac:d9:f8:e6:c8:04:cd:21:9c:09:93:d7:
ae:7e:24:be:3d:75:64:4f:49:44:52:62:8d:c5:71:5e:3e:f0:
d6:20:64:5f:60:74:f9:2e:39:25:5a:6d:8e:d0:a7:2e:7e:9c:
60:61:e1:50:4a:a0:c6:f9:b1:c7:b7:8d:23:90:5f:17:4d:2d:
67:37:6b:1a:93:5d:e6:02:29:e5:7f:99:15:cf:07:ac:93:d9:
dc:72:c7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:29 2025 by rpki-client