Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43849AF6C94611EFBA0D5F77762E951A.roa
File: 43849AF6C94611EFBA0D5F77762E951A.roa (raw, json)
Hash identifier: P0XG/lY1ApM5jdhKqEmR+W/VUcJLWfenvR5tK3e4TuI=
Subject key identifier: 91:53:C7:33:ED:AE:E6:F9:59:52:23:BE:C6:93:2D:8E:F0:FA:CE:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F360
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43849AF6C94611EFBA0D5F77762E951A.roa
Signing time: Thu 02 Jan 2025 20:15:09 +0000
ROA not before: Thu 02 Jan 2025 20:15:05 +0000
ROA not after: Mon 13 Dec 2027 20:15:05 +0000
asID: 17561
IP address blocks: 156.225.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62304 (0xf360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:15:05 2025 GMT
Not After : Dec 13 20:15:05 2027 GMT
Subject: CN=6776f3cd-17bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:f4:6b:76:0b:15:03:67:72:b2:3c:a9:79:
a9:0d:ef:af:9b:73:3a:c4:19:be:65:e6:93:bb:13:
d2:d4:4d:ce:f7:f8:68:f9:ed:be:29:8e:17:4d:9e:
ff:e2:6a:85:a1:3e:7b:85:d4:88:4f:ae:0f:2b:f0:
4b:cf:a9:42:75:59:57:18:c1:67:00:11:70:a8:a2:
32:61:ba:38:90:8d:e7:7c:0a:56:54:45:f3:ad:5b:
57:b7:e5:cb:cf:b2:7d:7d:ea:bc:12:5e:71:51:23:
21:ec:87:b0:05:49:80:dd:a2:a3:74:cf:f4:15:b8:
6b:f0:ac:98:03:15:a3:0e:18:8d:b5:74:7a:0d:7f:
f3:bc:a3:6e:be:c3:f1:28:2e:d6:05:0f:2c:24:8f:
12:ba:6b:7d:bf:bc:bd:3c:2a:af:3b:82:d3:66:b7:
ed:85:01:4d:8f:3d:85:93:32:5f:a6:01:d7:62:8e:
3e:f7:09:1e:94:24:8e:28:b5:04:bf:c5:6c:b9:91:
59:d8:00:aa:b3:53:5e:ee:6b:16:4a:60:90:3c:5b:
9e:d4:8a:82:8c:bc:c4:d8:8f:ad:e5:c9:e8:0d:23:
19:e9:6b:bc:ad:01:ca:21:80:2d:b8:1f:db:df:65:
63:10:c1:28:ce:09:bb:d8:fa:9c:a9:29:76:5e:18:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:C7:33:ED:AE:E6:F9:59:52:23:BE:C6:93:2D:8E:F0:FA:CE:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43849AF6C94611EFBA0D5F77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.43.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e4:76:b6:aa:a7:44:bc:8c:24:64:fc:ca:87:c6:da:d2:1d:
7f:ff:e0:2c:7a:d2:13:e5:95:22:34:7a:ac:f5:fb:e8:da:2f:
bc:60:a1:bb:5a:3b:f6:d8:24:4b:ed:2d:e8:ea:da:fb:e1:b8:
47:e4:dd:81:90:1a:c1:6e:1f:51:5b:fb:dc:76:c9:64:a0:d4:
af:f7:3b:f1:cf:dc:7b:3a:3a:44:de:e4:4e:03:95:28:77:65:
07:a7:3b:ed:1d:d4:0e:50:2e:a1:e4:95:9a:3f:e5:6d:b1:10:
30:b9:f6:4e:ae:a6:6e:63:d2:16:d4:32:f1:98:ed:81:e9:50:
49:b4:31:81:cc:fa:eb:a1:ac:d5:07:a8:86:31:b9:30:31:6a:
d4:05:72:d0:6a:d8:19:a9:86:3b:ff:38:4c:3b:4e:b6:da:48:
e9:f0:fa:0f:37:9d:6b:8a:f3:13:dd:61:e0:d1:7a:85:21:74:
1b:28:0f:d4:b8:b3:69:95:82:d3:1c:d4:a3:c4:0d:ea:ff:b5:
d0:03:40:49:e1:56:9a:e7:37:81:0c:66:3a:93:87:92:f9:02:
92:3e:4f:08:63:69:aa:0c:99:bf:b5:6f:6f:32:4f:ca:4b:a9:
b1:bd:38:96:6e:fa:88:bc:29:37:7e:b3:5b:dd:fa:7a:15:38:
70:05:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:37 2025 by rpki-client