Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D05C962CD5F11EFB8099183762E951A.roa
File: 3D05C962CD5F11EFB8099183762E951A.roa (raw, json)
Hash identifier: 6XfbxU/PdmfK5QeFBibQ9Sn+b40tJP43gOXujJ09asU=
Subject key identifier: 86:41:24:3A:1C:E2:B2:C3:D9:74:42:A5:51:2A:6F:EE:73:89:BE:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D05C962CD5F11EFB8099183762E951A.roa
Signing time: Wed 08 Jan 2025 01:24:00 +0000
ROA not before: Wed 08 Jan 2025 01:23:57 +0000
ROA not after: Sat 13 Dec 2025 01:23:57 +0000
asID: 984
IP address blocks: 156.247.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65317 (0xff25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 01:23:57 2025 GMT
Not After : Dec 13 01:23:57 2025 GMT
Subject: CN=677dd3b0-b86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:8b:4d:0f:8e:ae:d0:07:9b:d6:44:73:23:
03:3b:3b:bf:d1:b4:79:57:0a:eb:40:9f:97:09:62:
3b:61:c4:c4:6b:a6:51:52:e7:40:fd:57:31:9f:24:
34:b0:9f:08:3a:1d:11:25:42:4a:0a:c7:77:31:65:
cd:12:9b:50:ee:db:99:1d:f0:ca:1e:bb:1f:35:ca:
be:99:fd:7d:d8:98:52:9f:1a:14:e3:1a:b2:dd:06:
b1:06:d4:a6:2d:bd:f9:39:8e:a7:f3:3d:a1:6a:9e:
38:83:e1:fd:c2:49:24:9c:33:6a:c3:e2:04:18:00:
c9:37:ba:97:46:f8:4c:52:cc:d6:e5:b3:f0:16:ce:
f0:1b:30:20:0e:c4:a0:d4:69:9a:fc:bb:09:f6:bb:
f9:f0:a3:9f:84:4d:37:e9:97:0e:29:c2:77:69:bc:
33:c7:76:29:df:fb:f1:88:06:fa:f2:fc:e6:6b:5f:
2b:39:32:8a:02:17:35:a7:6b:90:a1:2c:1f:e5:3c:
a8:d0:ba:f9:65:63:ac:11:30:ae:de:7c:4b:b9:6e:
88:fc:69:00:84:5f:ce:76:4d:31:fd:71:97:fb:14:
01:f5:64:67:8f:43:fb:6b:51:0d:d2:8a:bb:69:64:
4e:ad:57:89:47:e0:8e:b4:1d:4f:75:31:9c:7f:c1:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:41:24:3A:1C:E2:B2:C3:D9:74:42:A5:51:2A:6F:EE:73:89:BE:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D05C962CD5F11EFB8099183762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.90.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:50:a4:c2:46:77:89:f1:fe:17:b9:48:43:1a:28:7e:5f:ab:
9d:9f:82:d0:21:b0:78:8e:52:47:2b:eb:10:19:14:af:3d:68:
f2:9f:ec:4e:47:1e:27:b3:88:2e:d4:da:83:af:74:01:5b:7a:
8c:09:c2:53:84:0f:39:ff:e8:5d:58:1a:81:81:c1:40:43:fa:
ff:75:7b:f7:91:6f:50:65:d9:73:31:1f:c3:00:3e:30:43:3d:
7b:65:93:ac:01:9e:a3:09:f5:8a:5e:0e:be:43:a9:1a:6c:7e:
ba:cd:c7:89:f5:27:1b:32:27:df:69:b2:ec:9e:72:66:a4:72:
8c:02:06:63:c2:7f:b5:79:7a:e6:46:2b:8f:f0:1c:67:66:68:
7b:f3:1b:36:ab:38:85:1f:48:46:56:09:71:85:42:4e:7f:d1:
90:5f:3e:b1:d1:55:49:82:7b:c7:61:4c:79:ae:fe:db:cf:68:
da:60:64:5f:2d:1a:80:58:85:82:21:7d:ee:2a:5b:b9:71:1c:
b4:80:34:9b:63:ab:71:21:16:75:02:f4:4b:9b:0f:a6:27:70:
d2:e6:c6:0c:63:4f:58:d0:7e:7b:2c:99:07:5c:f4:34:28:b2:
83:02:60:fb:8f:5d:20:ab:31:02:7d:d2:4f:4d:65:a6:85:ca:
38:9a:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:57 2025 by rpki-client