Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E8CC7D4E00311EFAB90E547762E951A.roa
File: 3E8CC7D4E00311EFAB90E547762E951A.roa (raw, json)
Hash identifier: XadNqGNJExst1r/dCNN9tO6dpCa1/iSly4WNpXeQ5Kk=
Subject key identifier: 4C:0F:0C:FE:BE:E6:F0:A9:3A:CF:A0:F1:76:65:65:AB:DC:4A:69:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011701
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E8CC7D4E00311EFAB90E547762E951A.roa
Signing time: Fri 31 Jan 2025 18:43:21 +0000
ROA not before: Fri 31 Jan 2025 18:43:17 +0000
ROA not after: Sun 11 Jan 2026 18:43:17 +0000
asID: 399077
IP address blocks: 156.248.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71425 (0x11701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 18:43:17 2025 GMT
Not After : Jan 11 18:43:17 2026 GMT
Subject: CN=679d19c9-2b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:99:9a:87:2f:74:62:02:f8:fd:58:5f:5f:
3f:97:ba:d5:ea:90:df:d5:3c:e2:a4:49:ae:90:6e:
49:8e:27:bf:d8:1b:fe:d0:cb:f6:a6:ae:67:b4:51:
bf:72:4a:09:e9:9e:ec:85:5e:31:5b:b7:d6:fb:71:
a3:6e:5c:1b:ea:5c:82:4f:29:78:59:ce:86:21:bc:
79:5e:6a:a9:e9:b5:01:73:2b:2d:84:6d:b0:aa:49:
a9:2e:bf:fd:b1:bf:c4:b3:85:f1:02:3e:d6:02:c9:
a0:5f:89:37:3c:a8:5e:1a:e9:28:91:8b:dc:e4:45:
c7:31:51:e2:7b:ce:7a:6b:a5:a6:ed:7b:98:45:b5:
14:c3:e0:2b:fc:72:bc:8d:73:da:06:38:85:d7:df:
41:96:4d:ba:9a:2b:62:3a:2a:11:05:38:86:65:29:
79:35:79:35:57:20:35:88:19:bd:0f:de:2a:94:00:
6f:9f:4e:4e:c9:3e:36:b9:c1:dd:78:47:3d:0c:23:
df:c2:90:b7:2a:0f:46:bd:f6:22:1b:ec:d6:18:d7:
6a:8e:ec:0a:8b:90:3a:3c:7c:ba:85:18:d1:1a:81:
01:c8:1e:52:b3:15:8b:62:58:64:03:33:93:aa:79:
f5:6c:53:f6:7f:96:3e:86:5f:db:5c:bb:ba:e8:36:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:0C:FE:BE:E6:F0:A9:3A:CF:A0:F1:76:65:65:AB:DC:4A:69:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E8CC7D4E00311EFAB90E547762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:57:46:86:f8:9e:4f:de:44:53:33:8b:ba:19:8f:6e:50:41:
2e:d3:ba:c7:9a:81:ba:38:18:e5:c0:aa:06:f6:28:55:04:ab:
d6:74:6d:b1:77:52:3a:44:b6:97:2f:4d:05:8c:90:03:77:4b:
61:6a:bf:67:27:9a:cc:78:6a:05:7c:65:bb:c8:87:a2:ea:30:
f2:40:e5:a0:8c:51:13:18:cd:33:d8:1a:89:44:4b:80:52:d3:
24:06:87:87:de:21:82:1e:45:44:a1:0f:c5:fa:c4:41:0d:87:
ab:7c:d6:4f:27:97:3f:fa:2b:6a:93:6c:1a:d5:52:f4:72:15:
88:d6:dc:34:e7:73:72:0c:96:15:93:4b:b0:40:c2:5e:30:c7:
4f:16:a8:a3:61:90:8c:4d:90:00:1a:c4:82:a2:ed:bb:4c:51:
8d:79:db:19:69:cb:cd:89:75:38:32:ce:84:f7:d4:d2:36:d7:
4c:7d:6a:c6:99:be:7f:f0:b6:b6:b4:5b:aa:b0:f4:29:2a:74:
8e:8f:c0:c2:55:0c:bf:ef:0c:23:70:f5:54:80:bd:1e:b4:c5:
90:bb:b5:4c:d6:ba:bf:b7:c8:ae:66:2f:1e:36:49:e1:8d:d8:
bf:77:1e:b8:8e:f7:fb:a5:66:c2:ae:dc:c9:ec:f1:07:21:36:
07:50:0c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:47 2025 by rpki-client