Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3740092CDAA11EFBBBA4972762E951A.roa
File: A3740092CDAA11EFBBBA4972762E951A.roa (raw, json)
Hash identifier: nhaCFC5Ymhc+y9ZMNbC/6Pon8LBxHu7FX9pBnO3HB/E=
Subject key identifier: BD:BC:C3:F5:D8:D9:6B:1C:D5:95:6C:00:8F:98:3E:92:51:54:0A:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01014D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3740092CDAA11EFBBBA4972762E951A.roa
Signing time: Wed 08 Jan 2025 10:23:44 +0000
ROA not before: Wed 08 Jan 2025 10:23:40 +0000
ROA not after: Sat 13 Dec 2025 10:23:40 +0000
asID: 984
IP address blocks: 156.255.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65869 (0x1014d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:23:40 2025 GMT
Not After : Dec 13 10:23:40 2025 GMT
Subject: CN=677e5230-b823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:b7:bf:48:cc:e2:99:3b:64:25:13:c2:c5:
c6:f1:73:71:f1:96:01:5c:b3:dd:4a:84:89:e1:0f:
4a:c0:f7:70:e8:47:c4:78:a7:81:1b:74:22:e2:42:
76:97:89:10:14:4d:a4:f1:29:cd:3c:b4:c8:47:4c:
b5:4c:a3:8c:45:4d:01:59:5e:1b:5d:50:e2:10:65:
60:01:9e:89:1b:b0:5d:3d:38:9a:4f:50:39:6c:1d:
e3:f1:be:e4:71:7c:57:77:b5:88:b4:aa:ce:44:a7:
19:95:b3:23:f8:09:72:c2:9e:d2:45:f1:8f:5f:b0:
24:20:3f:0e:90:68:23:71:3a:d4:5e:c6:49:5c:8d:
7b:11:72:cb:23:48:d8:43:f1:2e:35:36:c3:8e:75:
33:5f:0b:4a:f6:04:03:be:89:6b:0b:dc:8f:05:57:
a0:3b:ee:02:8c:19:f1:a1:33:db:1f:33:2d:38:a6:
df:e6:17:2f:58:29:a0:98:7a:18:21:7f:fa:18:82:
f3:9d:0f:0b:93:c1:28:8b:62:99:88:5a:65:ac:c1:
e5:8b:20:e5:4b:6f:5f:30:c5:b9:c8:60:0a:6b:09:
a3:58:32:7a:26:7c:10:f4:3c:e8:87:19:eb:a2:79:
e4:e1:e3:02:f7:e8:b5:fd:97:df:20:a4:df:73:ef:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BC:C3:F5:D8:D9:6B:1C:D5:95:6C:00:8F:98:3E:92:51:54:0A:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3740092CDAA11EFBBBA4972762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.41.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8b:4c:f8:8f:24:d7:ce:8c:89:41:d3:af:a0:9a:68:5f:40:
0e:2b:77:23:3a:c5:88:4a:76:a4:86:52:8c:7b:27:38:73:d9:
d4:b6:f4:6a:8a:06:f0:7c:8f:b8:4d:65:01:6e:d5:e6:75:e8:
a7:58:7e:d8:f6:2a:1e:ef:b5:2f:fc:4f:6f:f2:01:e7:82:64:
ca:cc:39:a1:f8:7e:1d:8a:7d:b3:11:5d:fb:b0:6c:cc:6b:cd:
7d:ae:31:86:0f:53:c5:61:c2:b3:86:e0:52:90:10:9f:08:d1:
fe:29:9e:85:1f:2f:df:25:9b:37:5c:3f:e4:42:7d:1a:82:07:
e5:eb:e9:55:35:82:86:df:68:c2:0b:86:18:7c:e1:4c:f4:fa:
ad:1b:de:9b:7a:e4:20:3c:54:96:36:ae:1a:7e:a4:a8:d3:d6:
5b:c7:8f:b1:b0:2b:fe:60:70:dd:05:43:2e:26:0f:31:66:4d:
72:1a:94:f5:bb:95:36:9d:80:9d:49:15:98:ca:75:eb:03:ad:
f3:ac:a5:ba:0f:a0:04:68:01:6a:9d:06:77:b0:9f:73:89:a0:
14:a1:71:13:37:64:6d:17:a3:2d:08:83:7b:25:a1:f9:11:fc:
5d:eb:71:fb:fe:89:69:27:05:74:af:2f:88:c6:13:f0:d9:6a:
8d:52:a7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:21 2025 by rpki-client