Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3F61AEECD6E11EF9F6CD577762E951A.roa
File: C3F61AEECD6E11EF9F6CD577762E951A.roa (raw, json)
Hash identifier: 2fb8amZ15yZZC47hXnwRgPjCF3Okoktj5Zq07E2g6RU=
Subject key identifier: 15:6B:A9:BF:B7:96:D5:21:3E:CF:CB:12:B7:50:84:3A:96:39:F0:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF79
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3F61AEECD6E11EF9F6CD577762E951A.roa
Signing time: Wed 08 Jan 2025 03:15:09 +0000
ROA not before: Wed 08 Jan 2025 03:15:05 +0000
ROA not after: Sat 13 Dec 2025 03:15:05 +0000
asID: 984
IP address blocks: 156.248.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65401 (0xff79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:15:05 2025 GMT
Not After : Dec 13 03:15:05 2025 GMT
Subject: CN=677dedbd-2d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:d2:46:18:58:48:77:13:de:36:72:55:92:
99:f4:ec:f8:5e:44:5e:91:6a:28:ad:e1:88:77:34:
c8:f9:ad:4c:c0:aa:25:37:d4:70:0b:f5:f6:a0:69:
08:82:87:ba:52:32:14:5f:3a:3e:8c:ba:49:51:8e:
cd:f6:2e:b3:2e:ab:0b:37:d8:9c:b7:26:37:67:a2:
eb:ed:5b:16:8b:16:0e:60:eb:56:5c:19:c1:f2:5b:
09:52:5c:ec:e8:e1:bf:16:1a:96:ef:55:df:5b:e1:
b1:eb:d0:61:7d:72:0a:cd:ba:b9:81:01:13:08:66:
12:42:bb:4a:68:41:f4:b2:72:eb:fa:51:3c:3c:78:
43:aa:7d:b3:1a:93:91:c7:a1:eb:e3:a3:c6:0e:52:
7d:82:80:8b:16:cf:63:24:96:5e:c6:4a:08:a1:28:
0b:55:c7:1b:5a:82:b3:de:05:20:45:2e:28:75:cc:
85:03:11:66:b3:a8:a0:8d:e4:97:ce:ea:b0:3d:9e:
1a:9b:bc:30:b3:7b:7c:0b:56:12:36:59:38:cb:7d:
bb:3b:00:bf:72:9c:55:a5:73:c7:ba:1e:ed:57:08:
4a:34:4b:32:6e:a6:a1:75:23:81:3d:bf:08:6b:f3:
3c:6a:95:e6:e8:bd:97:67:ca:23:b4:6e:2a:75:a1:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:A9:BF:B7:96:D5:21:3E:CF:CB:12:B7:50:84:3A:96:39:F0:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3F61AEECD6E11EF9F6CD577762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.22.0/24
Signature Algorithm: sha256WithRSAEncryption
63:09:c6:01:9c:15:e7:18:88:eb:07:85:23:93:0b:d0:7f:ab:
5c:17:6d:02:6d:8d:f4:48:3c:18:f4:8d:14:18:29:c0:92:a1:
c0:07:e6:71:e9:91:96:1b:a6:ad:4c:b7:d0:b4:cd:66:8c:84:
a3:59:83:17:c1:33:6f:70:a0:ec:07:42:62:fa:a3:71:04:f7:
6e:64:c7:b0:7c:9c:c2:d4:98:78:f2:f6:20:1b:ac:26:22:70:
c0:ab:0c:d3:97:d1:56:30:39:8a:8f:b7:cd:09:66:5e:4e:2f:
c9:7c:65:af:14:5a:d1:71:fe:38:04:b1:b1:17:8d:fb:23:b3:
48:7e:a3:b2:29:79:65:b6:8e:70:5d:bc:33:c2:c9:e5:cb:7a:
be:c3:25:d5:21:1f:a2:94:44:d8:f8:f7:bf:f8:97:a2:3d:94:
1d:f9:2c:11:96:b2:7a:20:6b:25:bf:20:e2:dc:9d:4b:d4:30:
b4:9a:f7:56:ce:ea:f9:aa:ee:5c:d5:e1:48:a5:14:8c:f8:64:
6c:ed:cc:5d:49:c9:e4:33:44:22:39:aa:66:fe:7a:26:8f:b8:
b2:86:be:89:9e:a8:c3:6d:24:08:16:ea:d4:23:e2:07:80:da:
1b:2b:15:d4:27:a7:9f:ca:e0:cf:d8:99:7d:75:91:0e:91:e3:
cd:6e:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:13 2025 by rpki-client