Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638440ACCDA811EFAB806A65762E951A.roa
File: 638440ACCDA811EFAB806A65762E951A.roa (raw, json)
Hash identifier: wJaNnDdbUaaMTjsnLV+U/bfqdxhcmjfLXXthAuouTjs=
Subject key identifier: 27:68:64:CF:E8:53:53:3A:9F:36:5B:6F:56:FB:54:37:64:73:02:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01013B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638440ACCDA811EFAB806A65762E951A.roa
Signing time: Wed 08 Jan 2025 10:07:38 +0000
ROA not before: Wed 08 Jan 2025 10:07:34 +0000
ROA not after: Sat 13 Dec 2025 10:07:34 +0000
asID: 984
IP address blocks: 156.255.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65851 (0x1013b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:07:34 2025 GMT
Not After : Dec 13 10:07:34 2025 GMT
Subject: CN=677e4e6a-e1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:38:16:c0:4b:82:5e:66:85:91:02:df:11:
f3:67:ca:40:e9:71:21:24:eb:fb:a1:7b:7a:56:f3:
a2:0f:cc:e9:bd:96:4e:9a:b0:9c:59:d2:78:6d:a0:
b5:0c:26:d9:3a:97:6d:9c:26:a6:a3:9c:84:2f:56:
d9:24:03:d8:1e:7a:b6:4f:6e:ea:30:6f:87:7b:05:
aa:b4:16:74:18:da:2a:5c:30:1a:8f:f5:59:c8:df:
02:93:eb:d5:e7:cb:4e:b3:fe:8f:00:af:15:ca:c4:
46:82:a2:7f:f5:31:56:be:bb:56:f3:dd:f2:0c:ae:
23:1c:7a:3a:42:1c:3c:a4:d8:a3:69:6c:04:63:31:
c5:a6:28:af:41:1d:b5:56:36:4d:f1:3b:6c:a5:23:
eb:2f:26:af:25:a5:e6:5f:ab:d4:77:2e:d7:6e:3d:
de:3d:be:f8:08:89:b7:4e:fb:69:e9:34:fe:22:71:
b8:a0:ea:c7:f0:10:84:b8:e6:66:e0:4d:1f:52:83:
55:b2:60:03:9a:d6:89:80:6a:70:69:a0:32:b4:14:
2e:61:83:42:d0:ce:53:b0:75:95:5b:83:e2:2e:4f:
45:92:65:72:80:8d:3d:0c:3d:60:b1:bb:ce:ac:a7:
08:91:6d:48:d2:b4:46:3f:21:72:4e:40:2a:1d:ae:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:68:64:CF:E8:53:53:3A:9F:36:5B:6F:56:FB:54:37:64:73:02:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638440ACCDA811EFAB806A65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b8:fb:56:96:4e:5e:35:f0:a4:d1:a4:ac:1e:23:a0:7e:91:
0e:71:5a:be:47:3a:72:57:66:e5:38:93:ca:69:bb:0e:d9:3b:
0d:a2:bc:e6:c8:53:de:5a:5e:a2:87:d6:7e:17:ef:bf:2c:38:
e6:9f:55:56:20:31:c4:13:ed:c0:3e:9b:17:5f:39:43:ec:1a:
30:82:ab:53:93:30:74:01:60:a0:23:02:86:f2:38:be:b2:fb:
d5:51:d3:68:bf:d2:81:3d:aa:aa:1a:79:a9:50:83:d1:10:ca:
3e:de:d1:ce:0f:9b:a3:97:71:81:38:0d:4d:42:40:55:3d:71:
57:de:50:12:0d:b7:a1:da:80:2b:cb:e9:68:90:9e:3c:bc:56:
7f:ed:ae:cc:0f:c7:0f:00:57:99:90:b0:97:53:2a:af:96:ad:
28:cb:8b:a8:ee:17:8f:e6:3d:d3:19:ff:70:d9:74:3e:11:aa:
75:a7:a9:a2:c5:ed:1e:27:15:2c:d4:2a:37:1c:97:b8:12:0d:
a3:68:da:e4:52:48:24:4a:aa:e7:aa:8d:cf:06:4c:07:2a:d3:
87:6d:1e:56:cc:52:06:b0:f2:4c:79:da:72:ed:df:fe:58:2d:
5d:8e:3e:2b:ac:f8:fc:fe:20:88:e4:51:66:48:fe:3f:c5:9b:
ae:56:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:33 2025 by rpki-client