Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C10217B8C98911EF89041DB8762E951A.roa
File: C10217B8C98911EF89041DB8762E951A.roa (raw, json)
Hash identifier: oK8fP9sdt8SEFUFNUZvdwqxOAlcK4zzGhjPh2hhmKCY=
Subject key identifier: 7E:30:7B:DD:A0:1D:2B:57:6F:E3:52:E0:22:06:46:55:7B:77:4F:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C10217B8C98911EF89041DB8762E951A.roa
Signing time: Fri 03 Jan 2025 04:18:16 +0000
ROA not before: Fri 03 Jan 2025 04:18:12 +0000
ROA not after: Sat 13 Dec 2025 04:18:12 +0000
asID: 984
IP address blocks: 156.233.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62881 (0xf5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 04:18:12 2025 GMT
Not After : Dec 13 04:18:12 2025 GMT
Subject: CN=67776508-e883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:67:30:18:ad:bb:0e:2d:e4:12:c9:db:fd:
ff:96:8b:01:12:c0:68:35:fd:c8:ba:b9:f2:1f:ae:
6d:dc:6f:cf:4e:82:bb:32:50:ea:c2:49:0f:a1:42:
89:52:aa:e4:6d:79:8b:4c:fe:a7:56:1a:ca:f8:41:
89:a3:d2:6c:a8:85:50:c2:4a:7b:13:74:f6:24:17:
a1:f9:4c:91:45:45:db:62:da:03:d9:cc:b7:44:b6:
f2:59:b7:f5:2b:8b:2a:3c:94:60:19:1b:50:34:51:
b5:99:ba:6a:76:0f:43:3d:42:3e:3d:61:74:ed:2e:
12:b7:c8:35:89:dc:ea:db:80:16:eb:14:30:23:81:
42:f1:91:a5:fa:d5:0e:58:fb:f0:7d:dd:2a:e3:55:
00:e4:b0:0a:5c:45:a3:c4:86:49:37:c4:6b:c2:0f:
12:b9:77:f2:33:34:fd:fc:82:81:8a:ce:a5:c2:29:
79:53:36:c8:34:a5:6c:9e:bc:cd:33:f1:47:cf:6b:
3f:74:7b:75:20:85:c6:5d:c6:39:59:79:64:9c:5c:
55:23:e6:aa:d7:d1:16:c4:0d:37:d9:44:24:2e:8e:
db:77:c5:c7:33:6b:53:36:ee:32:39:7f:31:e3:4a:
2c:dd:a3:ee:64:eb:89:fe:85:2c:94:04:9c:c8:21:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:30:7B:DD:A0:1D:2B:57:6F:E3:52:E0:22:06:46:55:7B:77:4F:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C10217B8C98911EF89041DB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.35.0/24
Signature Algorithm: sha256WithRSAEncryption
26:37:f3:b4:cd:41:06:60:23:e2:a4:a1:6b:60:04:98:3d:6a:
4c:be:22:d8:b8:58:0e:e1:27:82:69:db:ea:01:0d:3c:1c:da:
28:51:82:d5:42:b6:1a:47:9e:80:a9:a3:c5:0d:d9:1d:e5:2e:
b2:2b:6a:73:bc:5b:14:e4:9d:46:d8:d1:a5:13:1e:26:34:c2:
b2:8b:55:79:d1:9a:49:ad:97:0f:34:14:77:a1:9b:ed:4c:f9:
0e:f9:12:43:9e:47:59:bd:a9:01:fe:f4:26:6f:1b:e0:9b:d1:
4d:14:3e:bb:99:61:2c:9c:4b:58:0b:bb:2c:de:d4:61:e9:91:
cf:f5:32:bd:78:a3:9e:c2:d5:85:15:09:ee:f8:21:37:e2:fd:
c0:88:6a:98:ec:73:b1:66:9a:1e:4f:ff:9a:dd:77:e7:65:29:
c6:b1:a4:4d:95:e9:e2:36:71:59:7c:57:9c:d0:b5:e7:35:b9:
bd:d6:cf:87:bf:11:de:d0:cf:d8:23:1d:16:07:6f:44:94:83:
dc:cd:0e:d5:0d:09:af:39:7f:7d:06:11:8f:7b:f8:d8:93:5d:
11:a1:4b:30:39:d0:61:d7:d3:7c:93:52:f9:1c:c4:46:7f:0e:
f5:99:c2:4d:10:91:61:54:2a:5d:2b:b7:c7:2c:64:65:3c:a7:
30:12:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:51 2025 by rpki-client