Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DB55D5CC33A11EF9454358E762E951A.roa
File: 3DB55D5CC33A11EF9454358E762E951A.roa (raw, json)
Hash identifier: E0AkDExusMMA/MpLlpvQ6tBoEjfBGQphLAbPgzm+euI=
Subject key identifier: 3E:04:F9:6A:B8:FE:1F:8C:4D:2C:4E:D2:8E:58:3D:5D:6F:CC:DF:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DB55D5CC33A11EF9454358E762E951A.roa
Signing time: Thu 26 Dec 2024 03:33:58 +0000
ROA not before: Thu 26 Dec 2024 03:33:55 +0000
ROA not after: Wed 10 Dec 2025 03:33:55 +0000
asID: 984
IP address blocks: 156.244.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60283 (0xeb7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:33:55 2024 GMT
Not After : Dec 10 03:33:55 2025 GMT
Subject: CN=676ccea6-ee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:6e:df:bb:e1:d4:f6:1b:ed:0f:57:ca:b4:
7e:1b:46:b2:bb:bd:7b:27:9b:42:56:2d:95:bf:0c:
8d:ef:2e:55:a9:98:9b:d9:54:f6:a9:d1:e3:61:4e:
aa:8f:e8:3f:46:8c:ba:0c:c9:9a:c7:fd:8a:c7:22:
c1:dd:d4:0c:f2:97:28:c4:7a:fc:92:b8:ed:28:1b:
c2:0f:4c:94:60:6c:16:fe:8b:fe:e1:f6:b0:22:37:
dd:f6:05:c1:e3:82:d9:19:f9:1f:40:06:b9:dd:7b:
10:e1:26:7a:10:ad:eb:d3:a9:d1:14:d0:a6:da:14:
5d:bd:6b:3d:f3:02:3c:64:91:3f:f5:23:07:3d:bf:
63:44:10:42:5f:61:f6:12:90:3c:bd:ee:d9:12:d4:
1a:a1:e1:96:54:c2:a9:98:ae:cd:59:88:b0:4a:0b:
94:6f:16:11:8e:eb:28:9c:46:75:37:19:a1:18:1a:
12:7b:a6:f3:b2:da:83:cf:cf:9c:34:16:c7:c6:15:
5c:56:16:40:e0:7e:e8:8e:58:55:a9:05:8e:55:8d:
5e:1f:2f:50:fc:cb:01:64:1d:f5:99:3f:c9:7d:bf:
c0:c2:79:b4:4d:8f:7e:c1:4c:88:63:e0:5d:a0:cc:
91:21:73:fd:ee:12:f0:e4:a9:e0:86:14:88:e5:d4:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:F9:6A:B8:FE:1F:8C:4D:2C:4E:D2:8E:58:3D:5D:6F:CC:DF:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DB55D5CC33A11EF9454358E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.185.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:dd:8e:6c:c1:b0:63:a1:48:37:48:45:4c:b1:73:2d:4f:1c:
33:a4:69:85:48:a1:3d:25:a4:bf:2d:ed:68:10:ea:76:54:e5:
79:e4:87:34:85:e5:d4:e0:c9:a5:7d:c3:46:04:67:1b:10:e6:
74:d7:df:10:59:af:0b:94:b3:99:96:a2:ab:5d:6e:62:c4:b7:
0c:aa:23:fc:3e:ca:0b:c3:bc:eb:1a:a8:5b:fd:90:bf:5b:ba:
a7:1b:a0:df:b7:d9:ba:9b:f4:f6:ec:96:bb:b1:b7:31:b6:68:
3f:e1:39:76:b6:1c:40:48:6a:86:21:8a:28:6f:4f:6b:48:fb:
59:cb:f3:08:09:79:3a:e8:c2:66:4e:23:61:31:3a:ee:58:34:
3c:d8:76:88:2a:35:37:92:5c:c4:aa:da:09:c0:28:3f:24:c4:
83:5a:87:5b:ee:6a:fd:67:10:1f:82:d1:66:cf:a7:0b:b3:c2:
b3:68:e7:29:d0:37:ff:17:9c:d0:7c:72:77:48:b0:94:d2:d6:
7b:8b:38:1f:72:9e:76:49:66:14:b5:48:20:3f:df:d7:d0:d8:
d2:32:59:57:16:d0:c5:89:ed:48:19:57:ea:9e:b3:73:10:83:
8b:3c:35:9d:a5:15:f2:b3:36:76:c8:09:37:4b:8d:27:06:ba:
e4:1f:61:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:12 2025 by rpki-client