Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FD9A344CDC811EFAD5A85AD762E951A.roa
File: 7FD9A344CDC811EFAD5A85AD762E951A.roa (raw, json)
Hash identifier: Y6HcX8J9zDI+Fc+O6zR4gHHT/gLUaqNYril4MEq3KF0=
Subject key identifier: 3F:9B:52:0F:1C:84:1F:C8:0D:D6:66:87:ED:FD:1C:7E:FF:CD:8F:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FD9A344CDC811EFAD5A85AD762E951A.roa
Signing time: Wed 08 Jan 2025 13:57:29 +0000
ROA not before: Wed 08 Jan 2025 13:57:25 +0000
ROA not after: Tue 23 Dec 2025 13:57:25 +0000
asID: 984
IP address blocks: 156.243.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65967 (0x101af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 13:57:25 2025 GMT
Not After : Dec 23 13:57:25 2025 GMT
Subject: CN=677e8449-8127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1c:0a:13:39:01:5f:ab:fd:42:d7:5d:2e:0b:
ce:74:02:8e:d4:05:e4:0c:f3:fb:32:8d:85:93:a7:
c1:c3:8f:a5:ad:2a:85:99:aa:22:2a:5d:80:7b:28:
71:b0:a8:91:65:21:f8:2b:74:b0:07:c1:17:39:b4:
64:ff:78:2c:06:bb:4d:7c:62:ca:58:76:50:9b:a1:
4a:bb:b8:64:95:6f:74:54:01:11:a2:09:84:37:ac:
3e:1a:da:6f:4d:1c:c0:42:b4:29:c6:ff:2e:d7:24:
75:a8:24:a4:be:9d:e4:95:ec:d7:ab:0b:6f:58:0e:
cc:55:0a:b7:59:b0:bc:e3:cd:aa:78:99:1d:64:91:
be:86:36:ee:85:e5:4a:0d:5b:69:88:02:db:23:26:
5a:73:4a:82:99:d2:b1:45:08:62:63:b3:3a:ce:bc:
2e:85:0e:83:56:bd:ff:06:18:77:e7:9d:5a:5b:de:
ee:8f:d2:d7:b2:ec:00:d1:5b:d9:0e:6d:15:53:22:
47:d5:55:48:d3:8f:f9:0c:45:30:40:a2:b8:88:da:
21:c9:f5:eb:e2:86:f1:e3:76:14:23:71:3a:d6:da:
61:25:36:fc:96:06:e1:13:00:62:13:82:68:85:61:
ba:53:4d:d6:f0:77:fa:f0:b7:af:48:6d:c1:c8:08:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:52:0F:1C:84:1F:C8:0D:D6:66:87:ED:FD:1C:7E:FF:CD:8F:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FD9A344CDC811EFAD5A85AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.220.0/24
Signature Algorithm: sha256WithRSAEncryption
63:4c:2f:4e:3d:b9:7a:d8:29:01:a5:9a:0e:2b:99:8a:f3:d4:
00:28:b1:2d:01:83:2e:7d:3d:9a:8b:d1:01:c8:13:59:70:aa:
a7:d5:e3:34:f3:ac:45:ca:cd:f8:47:93:f7:7b:82:fe:6c:67:
9d:aa:a1:f4:e8:e3:99:ae:fc:51:2b:b9:81:06:19:d4:c2:a4:
6e:6a:a6:55:a8:cb:a0:6f:da:f1:0d:b0:2e:eb:ec:87:20:3e:
3d:df:9c:99:c5:a2:ba:1b:4f:02:0e:0c:a7:8e:d0:36:31:80:
38:f4:b2:56:3c:38:4f:49:0a:78:41:92:79:9f:e8:e7:40:ef:
b3:c0:08:b7:6b:2d:69:e7:46:31:97:56:a0:78:5b:e2:9a:71:
9b:82:e7:32:74:62:c3:48:a3:da:87:bd:b0:90:7c:1a:59:f0:
84:fb:67:7d:fd:24:2a:13:2e:73:c3:95:a2:a9:b4:52:37:99:
a1:59:a9:f8:e6:de:aa:77:3a:94:a2:83:f0:22:cc:39:9e:91:
74:f7:10:ae:cd:7f:ad:35:1e:32:d5:22:95:16:57:5c:41:20:
19:04:45:eb:7d:ba:24:2b:8c:db:48:03:30:a9:d3:2d:13:cb:
43:e0:84:01:25:e3:ae:8d:15:56:92:f5:09:4a:9f:e0:ea:1a:
b3:36:33:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:41 2025 by rpki-client