Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D8C5F32C32211EF9BB45161762E951A.roa
File: 3D8C5F32C32211EF9BB45161762E951A.roa (raw, json)
Hash identifier: Vg9pMFGi630+KhSyBYoyCyi0/iYpuau8W2ZzBhIXc8c=
Subject key identifier: 16:8F:EB:40:1D:25:FF:7D:76:5F:AC:E9:E7:43:68:BA:DE:BC:FD:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D8C5F32C32211EF9BB45161762E951A.roa
Signing time: Thu 26 Dec 2024 00:42:10 +0000
ROA not before: Thu 26 Dec 2024 00:00:06 +0000
ROA not after: Wed 10 Dec 2025 00:00:06 +0000
asID: 984
IP address blocks: 156.228.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59951 (0xea2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:06 2024 GMT
Not After : Dec 10 00:00:06 2025 GMT
Subject: CN=676ca662-ed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:eb:6e:fe:d6:b3:1b:58:2b:ce:3c:3e:92:
57:fb:84:ce:84:5b:1d:f3:82:4e:a3:02:3b:4a:20:
d8:84:fe:3a:6d:75:55:7c:5e:86:e8:a4:cd:4a:eb:
e3:08:ee:01:5b:19:25:0c:c0:4d:ba:68:ea:68:b1:
4c:c5:92:33:d0:82:9a:02:ec:f3:00:59:eb:ad:17:
e1:8a:37:20:f0:e2:99:e1:ad:ba:89:44:1a:bf:0b:
ec:17:7d:f8:9a:f3:3c:2e:1e:63:7e:5d:6d:0e:e2:
c4:6a:7c:3f:bc:42:03:a0:85:4a:8e:a2:2e:fc:01:
2c:69:e5:16:0c:6c:cd:34:50:8e:40:17:dc:1b:fe:
d9:e3:2b:bd:39:3f:10:fd:dc:a9:48:e9:a6:08:c9:
79:a7:82:2e:c6:a4:a2:7d:36:9c:d5:26:e4:db:68:
fc:f9:59:bf:60:4a:9d:bd:d3:e5:bb:b0:cc:cb:fd:
cc:8f:fe:42:d0:8f:ab:52:31:4d:45:83:5e:a1:80:
cf:0b:7d:84:82:d2:66:f1:42:14:87:d4:24:e1:12:
0c:85:24:51:f7:09:08:fa:3e:86:d7:1d:2e:e0:28:
f5:3d:8e:b5:71:c4:09:03:db:30:1c:29:9e:c0:e2:
c0:57:eb:72:4a:af:6a:3e:8b:54:28:d9:35:92:ac:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8F:EB:40:1D:25:FF:7D:76:5F:AC:E9:E7:43:68:BA:DE:BC:FD:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D8C5F32C32211EF9BB45161762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.232.0/24
Signature Algorithm: sha256WithRSAEncryption
20:76:59:de:7b:ce:b3:14:6a:9f:6a:63:e8:ee:33:31:a4:9e:
7f:f4:9e:22:88:f8:af:de:35:e0:bf:54:27:84:d7:6b:94:ca:
97:7d:66:52:48:78:2b:0f:dc:1e:35:72:2d:88:55:84:01:fd:
f0:35:dc:72:7f:ec:08:ed:92:d9:b6:93:30:a0:a2:a2:de:f5:
8b:1d:b8:6f:6b:fa:7c:48:d6:9a:e5:b0:3c:bb:82:89:c4:7f:
c1:4b:94:97:e7:5a:06:25:d5:e7:b2:58:10:a2:34:d9:8f:e6:
fe:36:07:1f:8d:6b:69:c8:3d:28:ed:21:21:aa:6f:22:90:3d:
72:1a:40:50:e1:12:7e:48:41:dd:e4:e1:33:a7:4e:f0:af:9c:
b2:3d:1e:24:0b:f3:c5:db:ed:87:29:76:2b:c0:52:b5:4a:a7:
b3:99:60:43:ee:1b:cb:df:ae:69:35:09:52:fb:ba:b4:41:72:
ae:0a:33:fb:32:68:e9:d4:5e:15:c2:c1:f7:38:55:01:ab:a8:
e0:54:9f:26:66:e4:b4:99:e7:12:3b:57:1a:31:df:e8:74:42:
67:05:a0:00:c1:bc:85:ce:6f:c6:80:43:67:29:09:76:84:38:
2b:3a:fe:7b:90:3d:80:c7:c2:b2:cf:c0:8f:50:c8:4e:ed:a1:
27:29:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:15 2025 by rpki-client