Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F37E396D2F911EF9B8D1FA1762E951A.roa
File: 9F37E396D2F911EF9B8D1FA1762E951A.roa (raw, json)
Hash identifier: LhuJMZCKloUkFGwHcScx21hXncb8BdD5/Vc+97hd3Hk=
Subject key identifier: C4:2E:17:AF:40:AF:3B:4E:EA:30:80:BE:87:FD:7C:EA:BF:0A:40:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0107BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F37E396D2F911EF9B8D1FA1762E951A.roa
Signing time: Wed 15 Jan 2025 04:31:43 +0000
ROA not before: Wed 15 Jan 2025 04:31:39 +0000
ROA not after: Mon 03 Jan 2028 04:31:39 +0000
asID: 17561
IP address blocks: 156.254.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67515 (0x107bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 04:31:39 2025 GMT
Not After : Jan 3 04:31:39 2028 GMT
Subject: CN=67873a2f-388a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:cd:7c:d4:0a:e5:74:ad:5b:b3:90:76:c7:
4a:3c:85:fe:46:a4:69:0f:b3:60:c9:9c:0f:1d:3b:
00:cf:23:83:49:31:a7:a8:83:1d:9c:0d:6c:ac:b0:
73:c3:1c:63:8f:c6:e2:51:1b:c4:9a:28:e7:cd:b8:
c1:7d:3e:95:32:c6:ea:e6:30:f6:ae:b8:f6:69:69:
e5:5e:aa:bb:e8:fa:c3:0e:77:56:97:6f:00:16:59:
57:83:0b:85:4b:f7:a0:2f:8f:bb:4e:33:23:3e:9a:
66:55:08:c4:07:d1:ef:c1:4d:9b:7b:77:02:bf:c1:
f1:51:f8:4c:44:af:16:ad:b7:74:52:c3:2d:8a:7e:
96:4c:37:bc:73:47:47:a4:42:8c:35:c2:c3:f5:72:
25:fa:c7:95:97:fb:a8:a5:f8:4b:8e:42:76:b0:eb:
d0:aa:d8:49:59:ac:0f:91:05:6b:7a:98:2d:5c:95:
cd:d3:3c:b7:28:6a:c7:9d:4d:80:6b:48:7d:56:a9:
0b:93:51:40:30:36:2c:3a:49:cf:9a:d7:a6:a5:46:
eb:ab:69:a8:8b:28:e9:4f:37:7f:58:68:2b:34:f7:
19:33:1e:cf:29:e9:e8:52:d4:3d:77:26:0b:9c:ec:
72:9c:8a:11:c6:bb:c0:ce:9f:98:29:c0:2e:40:da:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2E:17:AF:40:AF:3B:4E:EA:30:80:BE:87:FD:7C:EA:BF:0A:40:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F37E396D2F911EF9B8D1FA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:45:a8:71:06:63:8d:dc:15:02:58:a4:12:7b:e4:68:e1:76:
af:cf:08:a5:c4:4e:a2:1e:0f:a5:3b:75:a1:bf:ef:6e:b6:25:
0e:6b:54:a2:37:3d:cc:db:fb:74:3c:81:78:90:37:85:17:ac:
5c:0d:ac:01:a7:dc:25:fa:95:73:88:9d:fc:dd:d3:f4:53:30:
e6:11:b3:26:8f:4b:c9:1a:75:2f:55:62:8d:19:88:50:bf:02:
36:98:b4:a8:cf:f4:f5:7c:c2:eb:a5:58:7c:db:2a:16:63:2d:
e3:59:7e:e7:0c:08:76:3f:26:43:cf:66:b8:39:3c:e7:ef:d7:
d9:31:ca:e4:27:03:5c:44:50:3a:e6:00:57:76:3b:59:d6:d7:
12:6b:91:79:4a:34:35:f8:e7:c6:03:99:b8:94:37:7f:1f:8a:
1b:5e:b5:94:e5:d5:77:23:3e:b8:33:2c:c2:2f:8b:8d:ea:23:
ed:7a:9a:81:07:04:a4:0d:3c:66:3b:87:d8:ed:a5:e9:24:cb:
1d:43:ae:fa:a9:4a:19:a7:51:fd:e6:ff:48:01:f0:52:83:31:
5e:54:31:b9:e1:e4:e5:52:55:f9:c5:bc:77:98:47:68:ad:60:
92:71:2f:b8:35:83:e9:bf:87:4b:12:c9:c8:12:c1:4e:52:0b:
80:10:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:18 2025 by rpki-client