Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FF4C978C05511EFBAB274A6762E951A.roa
File: 3FF4C978C05511EFBAB274A6762E951A.roa (raw, json)
Hash identifier: PkEgqpfobuq2Lnsr3bOx9J+h1EmI9ZWMFnSUHXh/NrQ=
Subject key identifier: F8:BC:7C:14:6A:CF:36:C2:A5:8C:29:80:A4:DA:6A:F7:B7:66:3B:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FF4C978C05511EFBAB274A6762E951A.roa
Signing time: Sun 22 Dec 2024 11:09:45 +0000
ROA not before: Sun 22 Dec 2024 11:09:40 +0000
ROA not after: Fri 26 Dec 2025 11:09:40 +0000
asID: 212552
IP address blocks: 156.236.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59355 (0xe7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 22 11:09:40 2024 GMT
Not After : Dec 26 11:09:40 2025 GMT
Subject: CN=6767f379-e7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:6d:83:09:20:42:98:0a:50:7b:29:5e:cf:
69:56:14:a1:8f:92:fe:ae:08:26:a0:6a:e6:17:f3:
35:8b:ca:74:8f:62:5d:75:4b:f3:58:e0:24:44:c9:
88:62:79:e7:f1:8a:6e:de:f8:85:4a:55:96:2c:57:
14:68:bc:5c:05:b6:33:b1:56:dd:25:c7:5a:e2:94:
55:78:1f:fd:b6:e5:6c:67:3d:aa:a0:33:73:94:f0:
b1:03:ef:71:c5:d2:68:c2:cd:4b:ec:88:ed:38:f5:
33:c7:0d:91:a7:a0:3e:a2:dd:b8:1c:51:34:62:b7:
1b:bc:28:4f:bf:65:41:b2:3c:cb:6a:c4:10:02:7c:
0b:96:fb:13:9e:4e:90:16:e3:b3:10:f7:3e:0a:53:
b3:9b:f5:a3:f5:48:69:f6:77:e6:28:d4:ac:ce:fa:
73:7b:a5:cb:1b:2a:98:81:61:a6:c2:fa:1b:eb:28:
aa:e3:60:bb:ba:6c:ef:93:a7:bb:d2:02:56:8a:ea:
0f:ee:08:d0:7f:71:47:fe:a1:ff:5d:e4:c2:30:27:
c9:75:90:76:2f:e8:ce:51:90:b4:63:34:fc:79:31:
7e:3b:02:97:f9:bb:7b:02:95:43:bb:db:1a:52:67:
58:6c:f6:a7:ea:c3:f2:f5:f3:a5:f9:7d:a4:76:6a:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BC:7C:14:6A:CF:36:C2:A5:8C:29:80:A4:DA:6A:F7:B7:66:3B:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FF4C978C05511EFBAB274A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:77:40:55:4b:2e:a4:4c:d0:bc:05:d6:f0:4e:36:f4:8b:b2:
bc:fd:50:7b:b8:92:38:b4:6f:96:39:e9:d9:8b:98:d3:56:b5:
34:13:cd:00:5e:9c:1d:48:3e:9b:bd:68:cc:33:98:c3:c0:02:
49:7f:d2:3a:c5:50:88:00:0c:31:95:db:6f:48:86:dd:ee:b9:
b6:3c:b5:b3:d1:91:5a:f3:d7:8d:0b:35:d8:04:66:26:9a:69:
f4:a5:df:07:74:09:73:b0:fa:2d:bf:30:b9:cd:9b:5c:a3:4b:
02:9e:e9:43:a4:ba:4b:36:be:15:d6:8a:be:ca:8a:50:fc:a9:
33:75:09:0f:38:6b:44:9e:c7:94:85:b9:ce:bd:ce:21:34:8d:
3a:37:2d:a1:d2:da:2a:ea:05:3c:f9:23:3a:52:4d:69:f5:02:
55:45:f1:f0:76:dc:ae:74:71:3b:5a:a7:50:b9:be:38:26:17:
93:c0:ad:6d:1f:9c:c1:86:24:65:51:89:c3:a3:c8:a0:f2:80:
92:8a:75:f8:c3:9e:78:14:57:33:16:91:33:e9:61:a3:79:4b:
12:a2:b8:ac:eb:90:26:d9:33:de:3a:6d:9b:52:5a:38:05:f2:
75:b4:9a:85:61:f4:ee:9f:1a:52:1e:6d:dd:01:25:07:fc:2a:
1e:e9:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:06 2025 by rpki-client