Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D0AEC80C98B11EF8AA82642762E951A.roa
File: 3D0AEC80C98B11EF8AA82642762E951A.roa (raw, json)
Hash identifier: PE6dPDI+BCxlz99+Zu8vInue/rf1rsAQyvcK1Smyo2w=
Subject key identifier: 3F:65:42:0D:C5:3C:7A:61:2F:32:13:34:25:36:9B:2A:3E:53:AF:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D0AEC80C98B11EF8AA82642762E951A.roa
Signing time: Fri 03 Jan 2025 04:28:53 +0000
ROA not before: Fri 03 Jan 2025 04:28:50 +0000
ROA not after: Sat 13 Dec 2025 04:28:50 +0000
asID: 984
IP address blocks: 156.233.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62895 (0xf5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 04:28:50 2025 GMT
Not After : Dec 13 04:28:50 2025 GMT
Subject: CN=67776785-1827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:e2:04:c5:2b:87:5f:e4:bf:6b:1c:75:ca:
06:97:2a:1d:18:73:82:cf:cb:63:95:a6:10:ef:5b:
b0:24:d2:52:aa:42:a4:5d:44:e2:9a:61:b1:a9:e2:
2d:f3:9f:af:7b:b5:55:85:59:66:88:06:e5:29:f6:
6c:a2:24:b2:3b:12:ed:68:c7:8a:63:fb:e7:d8:a5:
1b:c4:cc:43:af:61:2a:3b:7d:f5:c8:1b:80:47:64:
08:3f:41:94:3f:0a:34:c6:b6:de:30:08:a6:ab:d2:
46:67:51:57:97:c3:16:43:0e:b0:58:e1:01:a8:03:
03:49:a3:b1:cf:68:c5:4f:d7:0c:43:c3:6a:0c:0c:
6d:cc:b9:8c:d3:65:d5:37:88:68:a6:29:73:df:6c:
60:ad:cf:44:37:22:8d:32:5b:11:ba:cb:ba:1c:ac:
26:9a:25:ec:a3:d6:4f:a8:1c:bd:00:46:6a:f9:b6:
a6:3f:5b:0a:4d:27:f7:18:58:b6:c4:85:56:43:53:
68:d6:a5:36:30:62:57:f9:e2:4f:4d:65:70:1f:04:
1d:81:77:cf:d4:ed:c0:3b:68:d0:7b:7e:62:3b:3e:
94:4c:09:41:ae:0d:8c:89:07:2c:f8:42:21:19:e0:
17:8e:0d:1d:9f:e4:1d:9a:6b:e5:01:41:3e:67:cc:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:65:42:0D:C5:3C:7A:61:2F:32:13:34:25:36:9B:2A:3E:53:AF:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D0AEC80C98B11EF8AA82642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3e:44:67:77:f9:16:81:f6:01:a8:98:f3:d6:23:68:c3:0a:
ef:17:11:16:e1:11:89:f7:0f:a0:e0:36:59:89:f6:24:79:bb:
0b:e1:9f:6e:d2:f3:01:01:da:c9:58:84:5d:84:02:df:10:8c:
8e:4d:0b:fd:4d:e4:91:66:0f:61:85:37:73:81:ce:ac:26:00:
84:23:fa:2e:7d:93:c7:c1:cf:50:72:8a:69:17:ce:07:32:df:
dd:12:13:f6:66:b7:34:07:51:f1:b7:c7:13:7d:6f:06:07:f5:
c8:91:b7:55:77:34:e6:65:55:dc:8e:d4:0b:f5:4a:a6:ad:e2:
e7:f4:76:3e:47:18:1b:f1:ac:4d:da:a9:63:f6:24:fa:4a:64:
10:54:b7:d9:7e:ef:20:85:1e:b0:fb:3e:ac:8e:da:29:c1:fe:
f4:a2:6d:16:16:6c:db:3c:a8:78:03:2a:a8:51:c1:23:7f:06:
9d:28:fb:18:cc:8c:1c:da:dc:64:40:8a:82:dc:0d:52:e1:fd:
44:f9:95:d6:39:00:93:e6:e1:4c:b4:75:ca:a6:07:56:b5:d0:
16:88:c8:cf:73:24:59:0d:81:52:18:db:69:e1:a1:8c:b7:ad:
9d:1a:30:9b:ac:90:e7:df:71:29:e2:f5:80:2a:fc:ae:58:18:
83:8a:58:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:00 2025 by rpki-client