Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C332118C95B11EFAEDC6C7B762E951A.roa
File: 3C332118C95B11EFAEDC6C7B762E951A.roa (raw, json)
Hash identifier: LTEvbMA2cKNwzqZyJHtkSrrvrXus0oClJMI4Wsjca5Q=
Subject key identifier: 6C:3E:EB:F1:5A:56:6F:C8:A2:BB:FA:73:DA:7C:D5:B1:85:52:72:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F428
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C332118C95B11EFAEDC6C7B762E951A.roa
Signing time: Thu 02 Jan 2025 22:45:16 +0000
ROA not before: Thu 02 Jan 2025 22:45:12 +0000
ROA not after: Mon 13 Dec 2027 22:45:12 +0000
asID: 17561
IP address blocks: 156.226.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62504 (0xf428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 22:45:12 2025 GMT
Not After : Dec 13 22:45:12 2027 GMT
Subject: CN=677716fc-1aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:d9:52:57:cf:d2:d7:ea:2a:6c:38:1d:a1:
1d:fc:33:d2:39:58:3c:36:ff:6c:86:35:53:68:56:
a0:a3:c5:94:e3:89:be:98:1d:6d:2f:59:ef:67:3d:
aa:85:20:99:23:04:c2:4e:6c:c4:4c:f1:4e:bf:2e:
d3:83:25:4c:06:de:4f:aa:77:7b:fb:2a:ba:aa:65:
18:62:4c:7a:be:ca:9c:da:26:b0:91:3e:e9:b8:6c:
f4:c4:7f:1e:b6:1a:0f:f3:de:8c:f8:90:a9:c1:36:
f9:8c:d6:9f:a6:a3:b9:2e:2d:d0:8f:7e:a4:b2:ae:
fb:3b:91:8c:61:f1:09:a8:2e:98:19:86:75:23:67:
73:0f:d5:fa:29:c3:23:31:01:73:72:a2:69:62:03:
41:2f:02:2d:07:e0:af:e1:0b:c7:8f:c1:a2:db:60:
dd:ab:4e:48:47:b2:1a:34:bc:8a:66:54:b3:57:e9:
f0:b9:e5:37:46:b2:72:ed:d3:8a:c7:79:79:90:3b:
0b:6f:66:ad:05:36:cc:c8:3a:eb:50:cb:a1:ba:02:
bf:f8:f7:d1:f5:e3:42:6c:7d:df:c9:99:9f:de:b3:
ee:2d:e9:61:29:3f:9e:ee:fe:00:b2:23:60:67:da:
e0:ac:ec:40:30:e2:37:e2:69:6f:18:89:cf:22:ee:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3E:EB:F1:5A:56:6F:C8:A2:BB:FA:73:DA:7C:D5:B1:85:52:72:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C332118C95B11EFAEDC6C7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.197.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:89:dd:0d:90:49:8d:dd:31:aa:86:fb:a7:85:56:38:88:df:
1f:7a:22:46:87:22:78:06:78:ea:b7:50:b1:86:c6:49:87:bf:
97:de:4c:3c:63:77:8a:da:d6:3d:65:0a:09:e9:f8:d9:d6:0a:
a9:55:a5:1a:0f:6a:6d:87:5b:3a:1d:2d:32:24:27:5b:ca:aa:
bf:20:6f:34:90:09:b6:84:1a:b2:85:b2:73:6e:dc:77:d0:71:
b4:42:eb:c1:65:f2:3a:8e:e6:1e:f1:47:3a:10:44:3a:d4:a4:
28:1d:ac:33:5d:69:ad:85:ba:a9:fd:17:ea:b9:b2:11:48:2d:
00:18:6b:90:c2:82:54:b7:06:2c:0c:66:24:fa:a1:8b:ff:16:
4d:ac:a8:0b:24:0f:b2:4a:38:4b:52:88:d6:f5:5b:35:f5:5e:
69:40:49:22:e6:87:21:54:de:80:6c:3e:35:a0:3d:49:f2:15:
dd:65:50:e7:c5:b1:56:ab:86:7b:11:32:64:f8:0f:92:fe:73:
f0:34:1c:96:0d:92:1a:2e:72:d0:d2:44:70:18:23:45:d5:a7:
c3:e7:c7:8f:cb:8a:d9:0f:16:8b:42:75:a7:eb:0a:c8:77:e5:
54:8f:02:be:75:de:df:91:6f:d8:5a:fb:8a:78:6b:c7:3f:88:
5b:62:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:38 2025 by rpki-client