Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BF807FCC96C11EF8D371F65762E951A.roa
File: 3BF807FCC96C11EF8D371F65762E951A.roa (raw, json)
Hash identifier: KbBUYQl3r5oacXtc5xPUPN3YJueSmT/oQ22LnxCbfDQ=
Subject key identifier: 48:23:2C:26:59:86:12:FD:E6:30:8D:DA:E3:19:1B:0A:8F:84:86:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F486
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BF807FCC96C11EF8D371F65762E951A.roa
Signing time: Fri 03 Jan 2025 00:46:57 +0000
ROA not before: Fri 03 Jan 2025 00:00:53 +0000
ROA not after: Mon 13 Dec 2027 00:00:53 +0000
asID: 17561
IP address blocks: 156.226.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62598 (0xf486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 00:00:53 2025 GMT
Not After : Dec 13 00:00:53 2027 GMT
Subject: CN=67773381-c980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:d0:c0:fc:72:84:b6:77:16:09:c1:3c:e9:
ce:a7:d1:13:e4:9a:e3:63:a4:ec:44:d8:f6:2a:9b:
89:9e:48:b6:9f:cf:0c:5c:b0:01:b7:88:57:16:22:
6e:b9:bc:fd:c2:7f:7a:52:68:f8:2e:d5:8b:fb:c3:
84:41:fa:ef:64:80:57:73:81:e9:23:c8:8a:21:c7:
fc:7c:bf:55:a9:35:bc:01:c3:c5:61:85:7e:4d:95:
e9:97:3d:d3:7a:ec:b9:38:1c:61:3a:c2:46:fb:61:
a8:1e:3b:00:5e:e0:f8:c8:ff:50:90:3c:94:3b:65:
42:31:73:14:0a:3c:fd:11:c5:9a:20:c5:e1:c2:7d:
d9:4a:26:8d:6a:4d:7d:7b:9c:4c:e7:e6:2b:e4:b2:
64:4a:ef:42:94:31:ca:8a:44:9d:09:23:a2:c7:a9:
c1:cf:c0:7c:a3:57:34:bd:cf:0d:bd:28:e5:6f:9a:
5b:d1:f1:3e:c5:56:ff:c6:d4:a5:3e:f1:2a:b4:2a:
ab:38:99:c1:b9:94:07:c5:c6:02:7f:db:5c:ce:83:
ce:5c:02:99:d0:38:0f:e5:6e:85:12:f2:64:e6:ce:
08:96:ff:ce:ef:3d:41:dc:0c:87:ee:d1:ca:b0:1c:
2d:48:de:60:a7:d2:f2:25:95:4c:1c:3f:b7:58:f1:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:23:2C:26:59:86:12:FD:E6:30:8D:DA:E3:19:1B:0A:8F:84:86:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BF807FCC96C11EF8D371F65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:5c:19:4d:25:ec:39:e6:69:11:b7:b9:31:48:fc:b8:44:6a:
cc:9f:85:1b:1c:a0:87:fc:07:4a:80:26:41:20:e7:e6:7c:f7:
7a:1f:22:12:d3:87:2e:f7:af:73:0a:20:7f:aa:74:64:17:66:
67:c0:b4:7a:66:74:30:d0:9c:e9:9a:63:ce:a5:bf:9b:27:7d:
86:68:3c:4e:cc:8a:c3:7b:19:bb:81:0f:db:20:5f:4c:e4:12:
38:da:e1:f8:d2:92:9b:af:38:68:15:5b:e9:33:b3:02:38:37:
a5:ff:9d:c1:7b:aa:73:73:1a:a5:91:f0:29:31:19:a2:47:1c:
e1:7a:b5:0f:37:ff:94:b8:41:64:ac:78:c6:68:03:86:4b:92:
e7:9d:c9:a3:c8:d3:7e:a5:4e:db:bf:3a:05:c2:ba:bb:9e:68:
5f:69:74:38:a9:7d:48:2f:be:48:22:12:59:d9:99:4a:08:64:
80:2a:30:28:99:e2:91:ce:6c:b8:77:b7:4d:05:02:d7:bd:3c:
a8:f5:92:8d:42:9c:ad:d9:19:9b:5f:10:88:c3:a8:5e:38:14:
1a:2a:e0:3a:7c:26:6e:6b:a3:25:4a:b3:5a:a8:19:15:70:0f:
00:40:81:ee:d2:06:d6:f8:7d:62:04:62:0d:2f:e7:d1:1f:24:
8f:28:9c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:10 2025 by rpki-client