Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DF00A46CD1D11EFA6631861762E951A.roa
File: 3DF00A46CD1D11EFA6631861762E951A.roa (raw, json)
Hash identifier: C3iU8GHAeUQBWJrRYYGty+p8L88R+LNHJtl6o8fyN3E=
Subject key identifier: 33:F5:53:F6:70:D0:57:DC:ED:39:AF:1D:CC:6A:F0:C4:CB:18:5F:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DF00A46CD1D11EFA6631861762E951A.roa
Signing time: Tue 07 Jan 2025 17:31:35 +0000
ROA not before: Tue 07 Jan 2025 17:31:31 +0000
ROA not after: Mon 13 Dec 2027 17:31:31 +0000
asID: 17561
IP address blocks: 156.241.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64853 (0xfd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 17:31:31 2025 GMT
Not After : Dec 13 17:31:31 2027 GMT
Subject: CN=677d64f7-5c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:2d:2b:23:c2:9f:44:b2:40:d4:5e:d2:61:
87:d1:79:ae:10:7d:c2:4c:74:0c:a6:8b:97:0f:3b:
f5:00:d9:8f:92:71:63:49:87:15:44:51:1d:25:d9:
99:60:83:27:21:c5:1f:f8:21:4b:82:26:20:25:fc:
c4:9a:2b:8a:6a:23:45:98:98:68:1d:c4:15:62:6d:
0b:06:fe:8e:18:5e:fa:6e:0c:84:8f:03:fa:93:b4:
57:3d:67:a9:f8:55:2a:e2:40:d4:5e:32:f3:6e:ba:
e8:4a:f8:d4:6f:6f:5c:e8:ce:32:88:6f:2e:e2:ad:
27:69:84:13:70:70:4d:bd:1f:c6:0c:24:54:18:2f:
cc:4e:b4:49:d9:57:f2:5e:bf:0b:1a:ca:b0:81:69:
5e:48:6c:bc:b6:77:ab:95:2c:99:b0:af:83:a7:37:
97:f5:6b:69:0d:63:ff:f7:4a:5f:85:71:00:71:79:
3b:e8:92:df:e3:c4:5b:6f:7e:43:30:c6:39:79:76:
d0:31:0b:67:32:d2:a6:eb:fd:be:df:db:c6:22:51:
6d:74:62:83:65:cf:71:5c:c4:5f:e2:db:d5:6e:41:
c8:70:1d:99:ac:6d:23:dd:35:e8:2f:9a:4f:6a:52:
b1:45:b3:df:1d:72:ea:7d:0e:b5:e0:7a:23:14:dd:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:53:F6:70:D0:57:DC:ED:39:AF:1D:CC:6A:F0:C4:CB:18:5F:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DF00A46CD1D11EFA6631861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.48.0/24
Signature Algorithm: sha256WithRSAEncryption
24:eb:22:5c:db:8e:7a:14:ae:88:e3:6f:63:67:61:ee:89:f2:
db:01:4a:08:f7:1d:d6:38:fa:ed:12:0a:f9:05:a8:fc:9f:8b:
57:2a:2f:4c:0f:dc:e7:5a:38:d6:72:20:b7:a7:c2:2c:26:3b:
53:6c:ab:26:f1:92:07:c5:b0:9d:40:6b:64:cb:36:71:85:d8:
db:23:c9:cb:c7:90:68:c3:6e:17:e9:66:15:c2:b4:b8:13:e7:
83:76:1b:6e:10:da:ea:4a:ad:a6:f9:fa:87:2f:67:87:d2:fc:
41:c3:3e:7d:4d:09:a5:de:83:a9:d3:40:29:c9:59:8b:56:b5:
26:0e:a5:7a:45:d8:1b:a6:0b:dd:3c:cb:c3:55:15:a6:50:d4:
4e:64:97:73:7d:af:0b:6e:d1:1f:de:10:84:0b:bb:f3:5a:cd:
92:5e:6c:96:1b:be:96:d1:94:0d:5a:fd:2b:db:b9:c0:ba:11:
4e:02:fe:be:4c:b3:5c:a3:60:fa:5a:10:ec:71:17:1a:95:95:
45:03:19:d9:0b:2f:67:a5:42:a1:bb:db:2c:b6:9a:d6:bf:48:
6d:25:af:ff:d2:80:5e:29:c5:50:7f:a7:4e:f4:9d:47:a2:f3:
fe:2d:94:51:c1:86:b5:96:f9:ea:73:2c:a9:10:b0:9e:2a:b2:
ab:d2:94:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:58 2025 by rpki-client