Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98DA0D78CCD511EFBB08D09D762E951A.roa
File: 98DA0D78CCD511EFBB08D09D762E951A.roa (raw, json)
Hash identifier: Qb7TefkOcfqCYFNVIz0qq4cnMXQxGHeGFNf9QeMAruw=
Subject key identifier: 3B:F0:82:1C:19:7F:C4:6D:55:1A:B4:2E:C2:8C:03:8B:E8:67:99:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FAFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98DA0D78CCD511EFBB08D09D762E951A.roa
Signing time: Tue 07 Jan 2025 08:58:44 +0000
ROA not before: Tue 07 Jan 2025 08:58:40 +0000
ROA not after: Sat 13 Dec 2025 08:58:40 +0000
asID: 984
IP address blocks: 156.233.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64252 (0xfafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 08:58:40 2025 GMT
Not After : Dec 13 08:58:40 2025 GMT
Subject: CN=677cecc3-8a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:c8:76:08:f9:6b:e2:9a:71:cb:ee:59:8e:
be:7f:90:78:4d:f7:75:64:7c:de:52:dd:28:c0:37:
52:35:b3:1a:14:6b:4e:12:f9:0d:db:6d:77:ea:7c:
2c:fc:da:f6:7d:7a:25:15:a6:f6:2d:dd:b3:29:a8:
62:1e:4d:03:cd:51:f9:c8:17:62:95:ea:1a:88:97:
7e:94:ba:ab:83:04:b0:c2:51:d9:3c:7f:78:1e:f6:
e0:0c:32:6e:3a:39:53:be:77:df:11:25:8c:e8:b7:
7c:7e:61:04:81:30:51:97:73:14:02:92:d4:f5:e4:
99:5b:96:69:1c:44:25:33:b3:52:5b:37:6d:10:6a:
4f:f0:b4:1b:54:29:6b:60:c7:bb:a0:a0:f3:47:7c:
8b:29:f1:15:83:48:ba:56:8a:29:4e:9f:42:a3:92:
98:46:03:57:99:2c:f2:c0:75:7f:18:2a:26:6e:54:
5d:64:cd:8c:c0:08:54:3e:1d:e1:41:df:8b:08:ff:
80:a5:b0:5c:35:cb:10:f9:66:8a:18:85:31:ac:d5:
b0:4d:18:1d:04:5f:31:e1:6a:e5:a0:c9:c6:40:0a:
53:8d:aa:9f:cf:b1:9b:07:9c:41:c9:5f:59:8f:ad:
72:90:a7:3a:f0:d2:92:f5:ea:c0:5d:6a:94:52:0b:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F0:82:1C:19:7F:C4:6D:55:1A:B4:2E:C2:8C:03:8B:E8:67:99:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98DA0D78CCD511EFBB08D09D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.173.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e4:4a:fd:66:64:6b:1a:4e:85:d1:77:35:a2:70:19:49:87:
61:81:6a:53:2f:93:c7:ce:61:f8:b6:8c:c5:1e:19:41:f7:1f:
c5:22:43:ff:19:ca:cf:6a:f1:3e:a1:8b:f2:c7:e5:86:45:44:
14:ae:04:2e:50:e6:e0:f3:bf:16:85:81:fa:31:28:37:54:0a:
77:bc:36:67:4e:06:8e:3c:99:b3:e1:5e:2a:9e:5f:96:31:25:
38:8c:52:ec:9d:ac:3e:8c:1c:49:88:1f:ad:4c:f3:f4:b3:6f:
b3:dc:d4:14:9b:53:f5:d1:f6:6f:79:17:c6:42:f6:9c:c5:33:
8b:1c:26:ff:04:89:02:5d:2e:1e:0b:cf:82:a7:f7:13:02:90:
dd:3a:66:da:ba:6d:51:cb:fb:8d:6a:1c:d2:ca:2c:72:15:cf:
a8:75:88:69:e1:42:14:13:66:fe:f5:b9:7a:05:23:68:5e:e4:
4b:44:df:1e:6f:a3:fb:72:de:13:90:f7:87:51:68:3b:ee:a5:
35:b5:0b:7a:66:d6:10:94:56:9e:db:a7:d1:94:e2:e5:48:6d:
65:d7:8f:7e:34:a0:80:1a:e4:92:20:bd:70:63:0d:1e:09:29:
d9:ba:b2:83:76:a7:f8:84:b9:cd:32:1d:74:5e:c5:44:01:99:
96:f5:fe:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:14 2025 by rpki-client