Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B1A492CD2F311EF8BC7EF77762E951A.roa
File: 3B1A492CD2F311EF8BC7EF77762E951A.roa (raw, json)
Hash identifier: dsFjv1dUh36gt5oCiROtblWmf9B7XglrI2O/4JNsqns=
Subject key identifier: 20:57:32:40:7B:A0:11:A2:BE:2A:8A:99:E5:7A:BD:4E:63:F5:5E:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01078F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B1A492CD2F311EF8BC7EF77762E951A.roa
Signing time: Wed 15 Jan 2025 03:45:58 +0000
ROA not before: Wed 15 Jan 2025 03:45:54 +0000
ROA not after: Sat 03 Jan 2026 03:45:54 +0000
asID: 984
IP address blocks: 156.247.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67471 (0x1078f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 03:45:54 2025 GMT
Not After : Jan 3 03:45:54 2026 GMT
Subject: CN=67872f76-13d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:08:18:77:b9:08:bc:d9:8a:a7:0b:77:e4:
14:a3:1a:c1:04:7a:98:ba:89:13:6a:52:f7:eb:70:
1c:22:f2:c1:be:33:a3:6c:c8:12:b8:2a:63:6c:60:
eb:46:7f:87:8c:e5:49:0b:4d:ab:7b:fc:4d:b4:32:
59:77:d2:ed:87:51:f4:93:fe:ff:31:a8:3f:fc:20:
d3:6f:8c:dc:fa:9a:c9:75:3e:14:5d:fa:8d:d1:87:
c0:ee:4a:c8:e5:df:5a:94:23:e8:31:5b:44:b8:16:
32:e0:c0:e1:7c:12:4f:6b:8c:de:10:45:b3:aa:17:
25:83:b5:08:23:d8:a1:d0:d9:a4:b0:bb:ee:0a:9d:
9f:9a:ff:ff:37:22:3b:62:9f:9e:c8:50:f4:ca:17:
6b:e4:dd:d4:e2:85:61:8c:d0:c4:16:e4:c5:a6:be:
ec:b2:00:d9:5f:1a:32:e2:ba:b7:dc:34:01:8e:1b:
12:04:a1:b3:06:5b:a1:66:23:7f:85:8f:b7:fc:83:
7a:88:7c:04:d4:da:e1:28:fa:d7:a9:22:3c:2b:ef:
35:8e:f6:c3:f6:e2:8a:f5:91:8a:db:38:ef:42:ee:
a4:59:27:0d:39:8e:23:00:0a:4e:97:84:65:ae:5d:
e5:35:bb:03:10:75:1a:5a:7b:e9:ae:67:f6:7b:55:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:57:32:40:7B:A0:11:A2:BE:2A:8A:99:E5:7A:BD:4E:63:F5:5E:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B1A492CD2F311EF8BC7EF77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.117.0/24
Signature Algorithm: sha256WithRSAEncryption
71:16:a3:25:60:6b:da:c8:87:1b:0c:77:59:99:ed:cc:b9:89:
fd:f9:c3:40:0f:87:62:9b:5a:28:c2:55:e7:fb:82:ff:74:55:
e6:d9:4f:b5:95:4f:ba:66:ef:e4:08:5b:31:e0:61:01:59:14:
21:b4:70:af:a1:99:58:94:d8:ed:99:35:c0:9e:64:85:b8:87:
1b:e1:cf:3e:40:78:b4:ac:a4:c6:94:2a:d1:b0:fd:16:1f:6a:
3f:45:37:09:52:69:b0:ab:80:ef:1f:94:4e:b0:34:97:f7:c5:
7a:87:43:89:92:1f:91:05:8e:17:56:86:87:da:2c:a0:86:14:
a1:f4:04:14:3c:bb:48:8f:93:17:c6:45:b8:e0:84:08:80:28:
fc:39:ee:01:2c:c8:e7:ce:bd:80:03:3b:59:df:57:87:c6:e6:
f0:30:e3:dd:70:e1:36:f3:3e:1c:a4:00:b8:05:e7:b0:bb:ca:
f1:c5:7c:bc:a7:c2:15:3a:53:62:2c:68:68:89:6a:65:20:8f:
66:22:0d:d5:2e:13:4a:00:b7:ed:1e:c6:2d:6b:34:9c:fe:db:
5b:0e:b7:c0:5d:e1:62:15:ec:70:4d:e8:5b:aa:e3:ab:e2:60:
c0:eb:4e:d8:44:46:db:35:4a:4c:71:aa:f3:65:b4:d2:1e:07:
81:95:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:28 2025 by rpki-client