Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D63BAEACCC411EF9E518CAE762E951A.roa
File: 3D63BAEACCC411EF9E518CAE762E951A.roa (raw, json)
Hash identifier: HIeNa2tmRd/xNorEoj5DO3hsesfA1E8uqG+nqlCZUd8=
Subject key identifier: E6:A3:98:3D:AD:29:93:32:10:25:07:54:00:B3:94:DB:08:6B:93:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D63BAEACCC411EF9E518CAE762E951A.roa
Signing time: Tue 07 Jan 2025 06:54:29 +0000
ROA not before: Tue 07 Jan 2025 06:54:25 +0000
ROA not after: Sat 13 Dec 2025 06:54:25 +0000
asID: 984
IP address blocks: 156.233.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64072 (0xfa48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 06:54:25 2025 GMT
Not After : Dec 13 06:54:25 2025 GMT
Subject: CN=677ccfa5-d441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:3e:2f:a6:99:9c:21:05:cb:17:c7:87:d9:
8a:a1:24:6c:20:51:aa:ea:39:5f:95:37:8e:8a:60:
fa:39:96:e7:18:63:5e:55:8c:6b:7f:b2:cf:03:86:
3f:df:76:bf:c9:30:e4:3d:4a:02:1d:13:3e:67:a2:
42:14:a9:3b:ca:d3:58:15:bd:b0:33:33:2c:62:ef:
b1:89:ef:60:27:7f:9b:14:c8:ee:07:24:70:20:76:
31:91:fb:a2:aa:bc:c5:db:f9:48:8e:f4:6f:f7:e9:
d7:c5:c0:66:82:99:88:59:d6:90:5a:a3:29:4b:85:
cb:ae:47:c6:1b:8d:a7:26:54:b9:cb:bd:a4:4f:fd:
b6:85:ab:43:63:0b:5e:d6:c0:37:e0:42:fd:9e:1c:
86:5d:5e:5b:ae:3f:a0:8a:c4:5d:bc:c1:0c:d2:f8:
c0:da:c4:be:05:4a:fa:a7:4b:74:0a:d5:36:4c:5a:
bc:78:55:94:f7:15:41:1b:52:9d:b6:0b:74:d9:18:
1b:66:49:cd:1b:d7:9c:fa:b5:3b:65:b6:49:66:90:
4b:b8:05:f1:42:d5:66:93:88:55:ae:c4:3c:0d:7d:
53:49:ec:15:1e:00:5c:11:6b:e7:d7:32:c8:c9:e3:
36:b6:bf:1c:95:eb:47:26:ea:7a:34:6c:46:09:e3:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:98:3D:AD:29:93:32:10:25:07:54:00:B3:94:DB:08:6B:93:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D63BAEACCC411EF9E518CAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.56.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9e:6f:6c:da:43:18:03:7a:8d:85:b2:ed:70:02:5f:fe:3b:
fe:dd:8a:4e:2f:65:7c:c5:42:c9:14:8b:49:29:72:2b:4c:6a:
7f:2e:86:e6:4f:b7:33:03:22:c5:01:3e:2f:d6:8d:c4:63:c7:
6b:79:86:f8:60:ed:8c:b1:3b:29:f2:d2:23:61:2e:29:38:fa:
6f:7f:48:df:07:d0:a0:1d:f2:6e:fd:93:27:13:ea:49:ce:6c:
6d:bc:1b:db:42:7e:6c:4e:d1:36:af:7b:1b:38:a7:da:ef:89:
8b:f7:51:69:ab:19:82:65:ac:27:60:8e:9a:89:22:00:83:46:
e2:2d:63:01:4f:b9:ca:1d:a8:7b:4a:06:77:be:ee:50:8d:5b:
3b:6b:2e:45:4e:b5:9a:f1:40:01:58:36:67:23:cc:68:a4:eb:
a4:22:87:81:f4:ad:d4:4a:27:f3:a0:3a:01:c6:52:8e:7e:cf:
68:f0:42:77:b8:6e:a5:8e:aa:9d:1f:7b:eb:66:26:30:84:33:
af:a2:e6:3d:af:1a:c5:2b:22:ef:6b:72:c1:f1:52:84:66:33:
e3:ca:68:36:b3:23:26:ba:e4:4b:d0:08:13:bd:d5:5c:36:52:
e7:90:8c:11:21:d0:73:15:c5:de:fb:2d:03:b6:74:49:88:d0:
a7:e9:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:54 2025 by rpki-client