Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF344C38CD3211EFB0320C69762E951A.roa
File: BF344C38CD3211EFB0320C69762E951A.roa (raw, json)
Hash identifier: kLD8xvL0uAQjxHp6fFsG9xumRdOLaE/TF3BFGTpwwPk=
Subject key identifier: 3C:6C:01:D3:21:D1:D4:85:8D:31:A1:B9:0F:52:2F:B3:0D:90:98:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF344C38CD3211EFB0320C69762E951A.roa
Signing time: Tue 07 Jan 2025 20:05:31 +0000
ROA not before: Tue 07 Jan 2025 20:05:27 +0000
ROA not after: Mon 13 Dec 2027 20:05:27 +0000
asID: 17561
IP address blocks: 156.243.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65023 (0xfdff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 20:05:27 2025 GMT
Not After : Dec 13 20:05:27 2027 GMT
Subject: CN=677d890b-ba8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:bb:da:4c:bd:16:c4:86:b4:46:b1:46:92:
a9:94:0f:9f:00:79:d7:37:2c:aa:b7:c0:8c:7d:5f:
36:eb:1c:aa:24:e3:ee:b7:4f:9c:26:04:dd:b0:35:
5e:a0:5d:87:ca:24:23:87:6c:a3:05:4c:84:9c:c2:
0c:0d:2f:3d:93:5e:4b:14:66:da:73:02:7a:0d:49:
cc:05:91:c8:b9:fd:43:5e:91:41:14:a3:75:a1:e0:
74:05:c4:c3:92:5b:09:3a:d8:8c:af:32:71:ec:37:
03:28:1c:aa:07:6a:70:69:e7:b3:98:47:fe:7a:09:
22:05:5a:cd:48:30:f8:e6:93:28:91:25:ef:5c:af:
bf:d3:19:c9:e9:3c:0e:08:6a:97:ce:17:5e:a3:4d:
cb:88:cb:4d:32:56:70:93:49:dc:cf:8d:0c:78:58:
63:c6:98:61:7c:d7:b3:ec:38:23:b6:14:1a:1b:0e:
76:ce:e9:ee:53:96:41:9f:18:e1:72:45:a2:9b:03:
be:ac:21:ec:2c:dd:a4:7d:97:9a:ad:a1:3b:36:7c:
ee:78:0b:03:e9:a0:cd:93:9b:80:bb:7c:36:50:f9:
74:5a:6b:fa:ba:b9:ed:6b:32:ac:7e:23:98:09:49:
e3:3e:61:c5:ae:bf:cf:e9:ab:66:80:4e:d6:34:46:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6C:01:D3:21:D1:D4:85:8D:31:A1:B9:0F:52:2F:B3:0D:90:98:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF344C38CD3211EFB0320C69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.40.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2b:00:61:18:3d:a6:ad:f7:ae:f7:e6:a3:cc:90:4d:9f:a3:
c9:0d:76:11:da:4b:e8:4a:9f:cb:63:6c:86:52:07:84:c0:bc:
d2:21:8f:6f:a4:b3:fa:2f:7c:3e:18:85:69:71:da:ab:84:0c:
d2:05:0f:e6:f4:3a:0d:71:56:a2:4b:f0:7d:ac:22:b9:03:ae:
34:41:b8:13:f1:08:a7:46:8a:ac:1c:ad:fe:03:8b:27:88:5e:
32:1d:9a:34:d6:71:86:2a:7e:a5:57:2a:17:22:02:5c:2b:03:
2a:c9:a7:41:99:9e:35:62:f3:93:e2:78:b7:27:e3:61:db:cc:
11:c9:dc:51:59:cc:f7:d6:df:1c:2c:4b:8d:5e:76:bb:0c:9a:
88:39:df:07:7d:6e:47:c4:eb:7d:a8:3e:11:bd:ac:f8:ba:e4:
d8:0f:f7:1c:31:8d:59:43:0c:84:71:7d:f2:16:a3:a0:a3:d9:
ee:00:2d:2d:bd:13:00:91:92:8b:f4:a4:96:5a:f7:bc:e8:71:
d9:e1:90:53:a5:1c:4b:cb:21:91:55:69:fe:57:7e:a3:a1:cd:
6d:c0:05:16:5a:56:95:4a:ac:74:e6:c8:2a:a8:d5:cf:78:62:
8d:f4:5d:5e:06:ce:13:8e:dd:fb:9a:8b:9e:46:34:a4:e5:44:
4b:45:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:34 2025 by rpki-client