Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C71C540CD0611EF9D3C7A50762E951A.roa
File: 3C71C540CD0611EF9D3C7A50762E951A.roa (raw, json)
Hash identifier: 7UTGl73tiQCczWOSo398EDUmOe0+1fpJvgsWnVauEC8=
Subject key identifier: 49:67:AF:AD:95:EC:DF:53:17:FC:58:7F:10:DC:28:FD:C9:72:F8:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C71C540CD0611EF9D3C7A50762E951A.roa
Signing time: Tue 07 Jan 2025 14:46:54 +0000
ROA not before: Tue 07 Jan 2025 14:46:50 +0000
ROA not after: Mon 13 Dec 2027 14:46:50 +0000
asID: 17561
IP address blocks: 156.239.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64667 (0xfc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:46:50 2025 GMT
Not After : Dec 13 14:46:50 2027 GMT
Subject: CN=677d3e5e-6645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:6c:fa:13:44:91:d4:a8:32:16:a6:c4:58:
dd:97:c7:5e:f3:3a:5f:c6:a6:8e:bb:4b:cb:b2:b3:
e6:0a:27:c6:03:68:59:0f:f2:cc:9d:65:a2:9c:2c:
2b:14:e8:8f:d9:7d:94:48:dc:45:df:cb:c1:4f:a5:
bd:04:03:4b:84:b2:da:07:66:1b:df:79:ef:0a:8d:
6e:6b:e6:8b:37:08:98:42:65:a5:b7:a4:8a:e3:d1:
92:0f:3e:15:0b:2a:15:b8:36:c2:43:f3:05:4c:52:
a3:9b:a7:68:17:d4:08:10:ca:17:11:ad:a7:88:af:
d0:02:50:b2:c7:50:01:50:6d:dc:a3:ce:7b:bb:db:
09:5b:5e:e0:e9:06:a3:a3:31:8d:fc:14:b7:31:1c:
2d:10:0e:25:6c:08:aa:e0:de:6a:db:ce:cd:11:b4:
ba:0f:77:ff:30:1d:d6:b4:ad:e1:58:5d:4c:32:bd:
67:48:72:1f:31:1d:26:04:81:28:e5:c7:37:3c:9e:
a1:2e:21:da:01:b6:76:53:1e:b6:e2:22:9d:86:dd:
40:35:51:07:73:21:d8:64:e4:2f:af:83:00:77:b3:
85:6d:d3:75:5a:e5:84:05:a6:7e:e1:ea:b7:1b:ce:
b6:18:ac:31:5f:e6:a0:30:f5:ff:93:52:06:a4:ee:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:67:AF:AD:95:EC:DF:53:17:FC:58:7F:10:DC:28:FD:C9:72:F8:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C71C540CD0611EF9D3C7A50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f5:83:62:96:c8:fc:1c:66:d0:d2:1d:62:9f:c9:5f:f4:49:
bc:01:ba:fb:34:f5:93:0f:d9:9d:f2:3d:fc:d4:97:aa:1a:33:
7e:a6:98:68:2e:e5:71:80:4e:e0:6a:89:58:a6:69:38:29:19:
87:62:c2:03:64:61:b8:ab:ba:9e:22:7d:e0:df:0f:54:e3:ce:
6b:88:28:60:4c:7b:6b:b1:71:1d:ec:86:94:16:41:94:12:3b:
70:6a:33:62:cf:ec:33:7b:0f:28:99:bb:04:95:f9:52:e4:20:
fb:d3:c5:80:d6:f6:8a:cf:19:19:5c:7f:de:fa:a4:0f:93:30:
48:c6:f6:f2:40:ac:f0:85:23:08:e2:d5:1a:3b:a0:62:35:e0:
18:d8:1d:79:0b:3a:e8:19:0d:78:c1:5e:24:64:69:17:00:25:
7a:a9:38:ad:f5:b6:38:00:ee:b1:83:64:24:14:f7:27:b2:c4:
57:8d:8a:bf:62:18:0b:14:d5:61:50:ed:97:b8:45:27:92:42:
b6:ed:3c:29:9c:53:3e:a1:9d:50:da:9d:f9:dc:85:f1:f5:5e:
8e:fe:e6:57:07:1d:40:11:c9:90:53:e4:42:38:bb:55:b2:a9:
91:e2:99:86:94:d2:ca:c9:d8:98:79:9a:4f:b2:e6:4b:54:21:
4d:de:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:57 2025 by rpki-client