Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B3FD570CDCA11EF9D401CBC762E951A.roa
File: 9B3FD570CDCA11EF9D401CBC762E951A.roa (raw, json)
Hash identifier: wZQ8FCLegRjycBoE1M6hMkOPUd7IEHA6R1m2jgEC3o8=
Subject key identifier: 63:D4:D1:D4:A1:B9:7D:41:57:00:50:10:FE:B9:A9:6C:0B:7B:40:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B3FD570CDCA11EF9D401CBC762E951A.roa
Signing time: Wed 08 Jan 2025 14:12:34 +0000
ROA not before: Wed 08 Jan 2025 14:12:31 +0000
ROA not after: Tue 16 Dec 2025 14:12:31 +0000
asID: 984
IP address blocks: 156.249.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66000 (0x101d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:12:31 2025 GMT
Not After : Dec 16 14:12:31 2025 GMT
Subject: CN=677e87d2-0f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:fa:bf:ea:d1:4c:0e:b3:df:a2:d4:9a:93:
38:72:81:01:41:17:96:16:f7:98:30:ee:4f:e1:d6:
a1:d2:cb:c0:46:c2:63:23:4d:65:37:33:8d:50:8c:
11:c1:c2:de:58:b3:c7:80:c1:10:c4:68:c5:59:a3:
a4:ed:5f:af:eb:17:14:80:9f:e5:61:40:e2:fd:a8:
0a:7e:31:37:5a:35:ef:be:8b:3a:b9:81:12:f3:f8:
1f:45:ca:b3:d1:88:6f:08:7e:32:a0:93:31:e8:5d:
2f:1c:e5:4f:87:36:5f:0f:c7:12:c7:86:3e:1e:a4:
63:64:a1:c8:bd:61:2f:8a:be:ee:e9:bb:3d:6a:64:
78:ec:bb:23:74:9e:a3:f2:9b:5f:8d:f5:a8:66:cc:
90:b7:4d:09:6c:00:92:3c:09:03:40:5b:82:96:cf:
ba:c3:10:84:a3:bd:8f:1f:d0:ff:31:6e:c1:2d:af:
67:9d:ab:95:9d:1c:e6:08:03:7a:a1:8d:44:b7:f5:
79:18:62:8e:dc:c7:61:2a:1e:c3:b9:59:14:ed:1c:
1a:de:cf:a4:ac:0e:50:35:9d:e7:6a:31:36:18:a6:
99:0e:06:d2:5e:bc:d6:e2:da:79:ef:99:59:58:f6:
6c:ba:4a:66:21:e3:ff:ee:dd:1f:6f:c6:e8:bc:b6:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D4:D1:D4:A1:B9:7D:41:57:00:50:10:FE:B9:A9:6C:0B:7B:40:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B3FD570CDCA11EF9D401CBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.68.0/24
Signature Algorithm: sha256WithRSAEncryption
87:df:39:66:76:eb:ce:72:25:ea:f5:a1:e5:74:8d:37:41:7c:
33:f9:d5:d3:0e:2a:49:79:27:d5:d4:01:ea:dc:d6:b3:47:51:
78:67:f3:28:0d:9a:1a:c6:64:58:fe:df:e6:66:64:c8:05:d3:
d5:29:49:12:27:43:c1:4f:5e:0d:3a:50:09:74:2c:7b:93:c3:
4f:76:c0:49:83:b9:95:d0:85:c1:d9:bc:ac:e8:00:af:67:08:
99:13:9d:4c:f3:93:64:77:3d:d3:f0:83:71:8f:fa:73:a3:96:
e9:89:e2:8e:2d:72:33:1e:62:a6:39:45:63:72:cf:0f:8c:35:
19:47:9b:76:14:7c:ca:c6:14:16:69:71:3d:82:da:74:27:16:
d8:92:df:b3:cb:4f:f0:81:1f:35:fb:2b:01:6b:c6:d9:ab:7d:
61:d0:bd:82:4e:d7:b7:50:77:08:83:72:46:07:e0:dc:7e:ba:
a5:60:5b:08:47:31:3a:54:6d:57:2d:0d:e3:5c:69:48:84:9e:
b0:83:82:be:85:34:21:1e:8c:77:5d:ac:af:84:92:0e:bd:71:
53:8c:5e:30:75:12:50:ed:b2:10:17:46:aa:d1:75:ab:82:e9:
dc:0e:70:d1:03:5d:b1:8e:fd:74:5c:da:8f:df:54:1d:f9:0d:
dd:79:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:42 2025 by rpki-client