Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41FA2D14C94F11EF92F35AAE762E951A.roa
File: 41FA2D14C94F11EF92F35AAE762E951A.roa (raw, json)
Hash identifier: MtsEOEfmYS2CwBQZFOXy/M32T7tzvuFgXoDCs9JaUcg=
Subject key identifier: 9C:54:8B:CB:1F:71:27:CE:87:1D:D4:9B:C8:7F:E0:08:C8:8D:8F:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41FA2D14C94F11EF92F35AAE762E951A.roa
Signing time: Thu 02 Jan 2025 21:19:32 +0000
ROA not before: Thu 02 Jan 2025 21:19:28 +0000
ROA not after: Mon 13 Dec 2027 21:19:28 +0000
asID: 17561
IP address blocks: 156.225.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62390 (0xf3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 21:19:28 2025 GMT
Not After : Dec 13 21:19:28 2027 GMT
Subject: CN=677702e4-664d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:f8:2f:87:12:5f:46:93:69:4a:11:28:bd:
a2:0b:86:a0:38:a8:23:14:16:9c:7c:31:60:b9:ec:
08:96:59:1b:16:01:01:8c:c7:89:32:af:20:6a:93:
a2:a9:3f:62:ae:9f:79:1b:ba:c9:4d:f2:01:9b:0a:
66:44:e2:d2:66:75:f6:fd:c4:9d:a3:16:b0:1b:ca:
45:a6:a5:65:07:46:9b:7a:59:4d:64:82:e1:2d:32:
33:99:37:3a:7a:f1:69:4d:40:8e:6d:a8:9e:91:e9:
7d:dc:b5:01:3b:61:84:02:5d:4e:d3:e0:a7:66:43:
52:5d:42:b2:8f:6c:69:84:05:42:e0:db:46:f3:40:
5f:d5:c3:67:78:18:42:4c:c1:88:70:ad:57:e0:33:
ed:1b:cb:c3:db:85:08:95:03:c6:59:65:c6:2f:f0:
61:95:03:b7:63:ed:d8:7b:14:e0:1d:f6:72:9f:aa:
58:09:ef:29:8f:66:bb:4d:24:71:ad:47:2d:61:c4:
63:92:4e:b8:7f:f0:f7:9c:4b:32:5e:d6:16:55:53:
cc:e8:bb:cc:9e:4f:4e:2b:96:d4:12:aa:93:2e:26:
93:fd:b3:28:0c:e4:39:23:1a:1e:2f:8e:b5:4b:d8:
4a:b4:78:74:17:1f:21:79:fe:5f:72:25:df:a9:d0:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:54:8B:CB:1F:71:27:CE:87:1D:D4:9B:C8:7F:E0:08:C8:8D:8F:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41FA2D14C94F11EF92F35AAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:79:bc:44:bf:ec:de:3c:2e:db:33:fa:c1:66:f3:1a:3c:f9:
5b:b8:5e:4a:39:c9:d5:8b:fd:12:e5:40:50:32:9b:52:12:00:
f2:2d:73:2f:90:7d:ff:9c:51:fe:23:74:68:90:87:8b:c7:bb:
64:c7:bf:91:fb:5c:cb:24:7a:3b:75:74:7b:a9:e1:ee:50:7b:
55:3e:f7:77:61:a3:2a:56:1d:ba:6f:cf:7f:d3:b4:9c:49:d0:
94:d5:ab:27:c4:60:a3:26:be:39:41:2a:37:84:20:f3:5c:82:
7c:de:95:68:f2:bb:b7:61:db:fb:c1:67:50:72:bb:79:35:de:
81:07:b0:2a:41:fe:b9:52:67:9f:85:0d:fa:99:1d:db:2e:21:
05:39:73:90:78:f6:57:24:72:24:d4:7b:e3:fd:39:39:e9:2c:
bb:94:4a:4b:74:68:be:71:cb:74:53:e2:08:f1:17:6a:27:75:
da:f0:e6:39:10:d8:9c:2f:29:dc:a5:75:6f:69:19:e4:0c:48:
84:f8:f2:ac:d7:7f:32:32:55:d1:16:83:41:42:88:6d:43:ce:
01:ff:65:62:56:7c:be:77:da:40:43:df:f5:06:46:97:bc:ad:
2c:eb:ac:f5:49:93:d6:74:bb:0f:22:53:1f:f1:fd:8d:5c:31:
89:5e:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:12 2025 by rpki-client