Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D2CB406D2EA11EF8215FFB7762E951A.roa
File: 3D2CB406D2EA11EF8215FFB7762E951A.roa (raw, json)
Hash identifier: bBjrzap/bpoZ5rboEOdirjC7b4LkptRXlJzzJTb/LvE=
Subject key identifier: BA:80:D6:EB:3F:F4:61:1E:06:72:AC:BC:FA:E7:60:BE:2C:4A:2D:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010751
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D2CB406D2EA11EF8215FFB7762E951A.roa
Signing time: Wed 15 Jan 2025 02:41:36 +0000
ROA not before: Wed 15 Jan 2025 02:41:33 +0000
ROA not after: Sat 03 Jan 2026 02:41:33 +0000
asID: 984
IP address blocks: 156.229.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67409 (0x10751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 02:41:33 2025 GMT
Not After : Jan 3 02:41:33 2026 GMT
Subject: CN=67872060-6a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:a0:ad:40:05:b8:bc:c6:eb:19:53:bf:56:
c5:ed:75:a0:27:b4:a8:a3:6c:b2:05:59:0f:f3:7a:
5e:93:62:6a:f5:42:b2:10:53:e9:0b:60:86:ba:ea:
0f:61:30:5b:b8:60:06:3c:d6:67:06:b0:70:75:aa:
ac:af:1c:92:c7:d1:be:7b:5a:8d:df:6e:39:5f:c0:
2e:db:01:7a:08:47:6f:e9:9f:11:9a:39:2b:c4:0a:
d9:3d:76:b4:8b:a9:b1:d2:4c:d4:54:19:69:26:8a:
da:39:3e:8c:ea:e7:9c:c5:c0:89:42:9b:dc:b8:9f:
d4:b0:db:08:a9:f7:fe:14:fb:45:3e:32:f9:7d:78:
b6:4c:ea:b3:24:a9:95:ec:4e:cd:9f:4f:49:93:fc:
59:f4:e2:eb:1b:71:b1:0d:a5:0f:2b:72:af:a0:15:
78:59:d5:0b:44:0a:3a:ef:61:84:a0:1e:c9:c7:2b:
08:1f:9c:8a:5b:43:f4:18:f4:53:e1:21:0d:b0:ee:
51:d4:40:da:ce:85:ce:55:86:51:cb:03:65:49:b5:
6c:b1:59:12:6b:8b:d5:19:a8:08:fe:d2:12:ab:b5:
41:08:08:b0:0e:32:31:3f:f7:ba:90:fc:9f:f6:74:
b9:4f:cf:33:29:49:a2:01:41:51:e2:5c:26:27:e8:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:80:D6:EB:3F:F4:61:1E:06:72:AC:BC:FA:E7:60:BE:2C:4A:2D:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D2CB406D2EA11EF8215FFB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:fe:03:a8:0c:c0:6c:72:92:3d:f7:86:31:6c:5b:4a:05:e5:
97:26:b2:55:ec:05:6b:6f:f2:4b:ed:29:a3:65:28:41:a5:f7:
8a:92:0d:ad:ad:58:99:18:f0:c0:73:c9:f9:09:de:f3:95:24:
73:3a:3b:38:86:47:ee:ec:e4:89:56:7a:14:a4:20:e3:ed:d0:
df:c3:9d:ed:8f:2f:ee:00:c6:01:5f:8d:1a:8d:c8:77:9c:e1:
36:75:e7:1a:ac:9a:05:19:2d:32:6b:85:04:90:68:1c:7a:3f:
0c:6e:96:44:ca:69:f9:ea:12:b5:48:58:bb:cc:c4:27:8c:b9:
41:93:c2:e1:70:44:9e:c7:63:85:c6:5d:f5:80:bf:aa:9e:85:
9e:e6:8e:28:da:93:c2:bb:f9:f7:b8:be:a9:f0:22:5a:1d:b3:
eb:49:d2:a7:b1:68:cc:71:40:6a:94:4a:6b:24:96:cc:f9:22:
29:64:24:04:1a:7b:dc:d5:c9:b7:da:76:43:e4:29:3f:79:ef:
9f:cc:f6:dd:d7:cf:1c:b9:d6:48:80:b3:45:0d:e9:eb:21:48:
cd:47:37:a5:4f:75:cb:1e:28:6e:35:df:a1:d1:6f:20:07:ae:
dd:0c:8e:b2:c7:97:2d:25:f2:2f:53:dd:c8:c6:90:e5:03:11:
21:09:e4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:13 2025 by rpki-client