Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAB6594C98011EF9DC6057A762E951A.roa
File: 3DAB6594C98011EF9DC6057A762E951A.roa (raw, json)
Hash identifier: Tk6ic9CjfDwZ1LVd0/LPjkeie+lsaedbP17bs6SyCLc=
Subject key identifier: AB:52:E2:05:54:4E:28:4D:2F:06:FF:1E:69:E7:A7:5D:96:76:F8:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F547
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAB6594C98011EF9DC6057A762E951A.roa
Signing time: Fri 03 Jan 2025 03:10:10 +0000
ROA not before: Fri 03 Jan 2025 03:10:06 +0000
ROA not after: Sat 13 Dec 2025 03:10:06 +0000
asID: 984
IP address blocks: 156.229.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62791 (0xf547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 03:10:06 2025 GMT
Not After : Dec 13 03:10:06 2025 GMT
Subject: CN=67775512-5d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:4b:be:70:c9:1b:8c:3d:c1:1f:ef:fd:fd:
63:81:99:7f:b3:5e:b7:6d:16:bf:71:1f:84:05:eb:
0d:24:41:36:cc:82:59:ff:cf:9c:d3:2e:65:d3:3c:
92:d4:e8:80:d1:39:0d:e0:3b:66:28:1f:09:15:a1:
69:86:d5:d1:5b:ec:bb:56:a7:4d:e9:aa:34:c6:96:
4c:83:23:eb:b2:93:1f:d2:37:0c:b2:6e:cb:90:46:
06:5e:fb:d9:c9:9b:09:b7:69:db:46:53:1c:ac:45:
1b:3f:b0:d2:59:7e:9d:04:3a:80:21:5f:85:2f:b4:
60:59:d7:ff:6b:2a:d2:84:ac:06:87:62:21:2e:12:
ab:96:d0:7c:23:fd:a7:93:1b:5c:79:41:36:be:39:
b0:6b:0e:43:f0:0f:a8:84:7b:5f:24:76:21:f0:b2:
3e:8f:0e:98:ef:b4:e7:3b:94:90:88:06:de:65:e0:
78:b3:65:c1:a7:5e:1c:e5:c1:6d:bc:68:86:ad:ce:
ad:31:e3:b6:4b:23:c0:30:b4:8a:c5:bb:3f:d0:23:
4f:f9:4d:1d:fa:4f:f5:35:f0:fb:0d:72:b5:15:e7:
76:d2:de:6a:64:cf:e3:e5:d5:b6:12:25:42:0d:d2:
98:b7:83:2c:09:78:dc:6d:c7:06:e7:9f:0f:61:db:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:52:E2:05:54:4E:28:4D:2F:06:FF:1E:69:E7:A7:5D:96:76:F8:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAB6594C98011EF9DC6057A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.242.0/24
Signature Algorithm: sha256WithRSAEncryption
44:28:02:99:ff:18:96:56:a3:4c:c5:cf:06:0a:29:2a:2b:59:
57:da:c4:51:d9:c8:34:ee:ad:b7:02:8a:26:19:dd:ed:99:5b:
4f:a7:b4:2a:6b:64:97:f4:c9:ee:5c:09:aa:18:d0:3d:40:85:
2c:c1:c5:32:1f:d2:b9:4b:44:a3:5c:11:bf:a3:d9:cb:d0:7b:
ee:a1:6f:19:12:1e:cf:0d:f7:5e:41:1f:fe:28:e5:35:b2:66:
3e:2b:4d:5a:16:fb:c2:99:65:42:5f:16:b9:dc:d0:19:40:6d:
26:28:d2:f9:ab:16:e7:66:18:e5:ad:9a:bc:a0:e2:5c:eb:79:
97:46:d2:4d:dc:0e:a2:48:54:ae:ba:75:4b:f7:03:ed:40:2a:
e8:fb:3f:f1:3d:72:98:da:37:31:fa:fe:f5:f0:ba:df:6b:bc:
1b:7f:93:7a:17:0d:4d:aa:57:c1:46:87:7e:6c:45:46:c2:d4:
75:98:8f:32:54:0a:4b:cf:b3:e5:e4:fd:e5:43:50:51:78:07:
fa:48:c6:51:9d:94:1a:7e:4a:d9:7f:fe:52:a9:f6:64:b2:31:
b4:f5:a7:49:bc:62:30:e9:c1:99:6c:06:03:cd:44:c8:41:c5:
fa:da:24:e3:ea:8a:bf:2b:8d:a3:15:81:c2:d2:1c:2c:a6:3f:
e1:d7:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:10 2025 by rpki-client