Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4298AA70CD3211EF974FFD64762E951A.roa
File: 4298AA70CD3211EF974FFD64762E951A.roa (raw, json)
Hash identifier: T+J5lP4vHK7lvAJo0lL7y9NFzkWICjrIdkvIVjsfhnE=
Subject key identifier: 14:C7:10:A0:73:1B:6E:CB:72:80:DE:D3:C7:9B:A1:80:3F:F7:73:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4298AA70CD3211EF974FFD64762E951A.roa
Signing time: Tue 07 Jan 2025 20:02:02 +0000
ROA not before: Tue 07 Jan 2025 20:01:58 +0000
ROA not after: Mon 13 Dec 2027 20:01:58 +0000
asID: 17561
IP address blocks: 156.243.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65019 (0xfdfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 20:01:58 2025 GMT
Not After : Dec 13 20:01:58 2027 GMT
Subject: CN=677d883a-20ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:50:c9:b0:05:dc:f4:0b:1d:0f:8c:1c:bd:
e2:45:a9:07:e0:03:d5:4a:c3:0f:ab:f9:72:8d:ce:
80:48:23:52:d0:eb:b3:f5:83:c9:46:7a:02:3d:63:
5f:19:32:b9:cc:aa:17:6b:d2:fe:e4:98:3d:fd:75:
c4:82:20:42:2e:ee:bb:6f:91:4e:21:7f:cd:f2:d8:
a6:0b:5e:23:cd:f6:e8:43:62:8d:e7:93:a5:20:85:
d7:9f:25:5d:3e:57:dd:81:92:9b:f2:81:d2:0c:f0:
88:f1:fe:50:a6:74:52:69:10:22:c8:35:c4:54:29:
64:3f:7d:a1:e4:71:51:15:26:cd:15:bc:bc:21:3c:
4b:b3:8f:46:5d:83:ce:e6:a6:68:36:6b:df:45:f2:
f2:2d:53:ee:3d:08:2a:1a:6a:6d:55:7c:04:fe:59:
53:1e:ad:16:16:8d:68:78:37:3c:41:0b:1a:24:26:
ce:9a:cb:ac:a4:97:7c:db:c6:a7:e1:da:6c:ec:1a:
50:87:a4:0d:18:f3:c7:c7:a3:49:33:86:3a:f4:94:
86:52:91:99:a5:c6:7a:39:7f:c8:59:9c:f4:20:5a:
e0:c6:65:a2:3a:17:8c:48:60:b9:1b:fa:c2:4d:b2:
c0:ea:64:4a:22:21:0d:79:06:14:15:22:f0:55:e4:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:10:A0:73:1B:6E:CB:72:80:DE:D3:C7:9B:A1:80:3F:F7:73:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4298AA70CD3211EF974FFD64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c1:c7:89:41:8c:b5:44:1c:4f:56:e8:35:61:30:7b:b5:79:
bc:d0:1b:d7:d7:48:3a:03:c9:c8:9a:11:f5:23:2c:86:f8:92:
63:2f:62:30:30:c2:f7:24:b6:fd:68:e5:48:76:3e:a8:02:f4:
62:19:fd:ee:cd:ba:34:9b:dc:6c:9d:69:3a:a8:d5:a7:83:17:
93:ca:07:2c:b2:b4:c6:ba:99:61:be:1d:bd:3c:3d:d5:bd:53:
22:ad:ce:06:2a:23:6d:97:1c:f3:b4:5b:15:99:6a:7c:93:7e:
b8:fa:ba:8a:3a:96:9f:72:ba:97:d2:e9:11:b1:89:04:8a:a4:
e1:9a:19:cb:48:29:1f:a9:1d:1a:9e:f9:8f:63:5c:7d:16:fa:
04:95:ea:17:fe:b5:87:d2:f5:e3:ff:66:ce:f0:4a:1c:46:fe:
7f:ca:95:de:df:28:96:54:48:84:3f:6f:a1:d9:b0:85:43:b0:
52:a5:73:91:79:ac:7f:82:ee:0e:42:cb:0c:21:2f:15:52:b4:
75:fb:6f:1c:c2:a6:82:3e:4f:1c:62:6a:d6:cd:90:c0:34:6e:
bc:da:fd:b5:16:09:82:b0:89:8f:f4:46:86:aa:af:39:db:a8:
80:36:7d:5b:09:dd:d6:86:5e:d7:09:b7:c1:65:8a:51:5c:39:
74:cf:6e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:45 2025 by rpki-client