Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8623C58C94411EFAF2DC06C762E951A.roa
File: C8623C58C94411EFAF2DC06C762E951A.roa (raw, json)
Hash identifier: NJ/gyFwAqgT/B3g027r48ecmQwtuoqP1fzbMddbmrbk=
Subject key identifier: 3F:D6:E9:9C:0B:53:4E:FB:99:7D:73:D1:AC:80:14:56:F8:29:04:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F352
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8623C58C94411EFAF2DC06C762E951A.roa
Signing time: Thu 02 Jan 2025 20:04:33 +0000
ROA not before: Thu 02 Jan 2025 20:04:29 +0000
ROA not after: Sat 13 Dec 2025 20:04:29 +0000
asID: 984
IP address blocks: 156.225.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62290 (0xf352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:04:29 2025 GMT
Not After : Dec 13 20:04:29 2025 GMT
Subject: CN=6776f151-beff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:bc:c0:96:4a:43:58:35:02:0d:ed:12:be:
5d:20:14:cd:6f:f7:af:04:20:2a:7b:be:94:0a:d4:
93:16:d6:c6:83:5a:6c:62:17:22:e2:11:da:03:de:
72:e1:31:0c:3f:0c:fe:64:83:ea:e3:42:a1:3a:de:
66:fd:66:29:ae:bf:e5:b7:fb:64:69:46:7c:6a:59:
81:76:00:26:3d:50:d1:3f:c6:8d:8f:cf:2c:8c:e2:
0b:b0:c0:c0:6e:2d:86:bc:6f:8b:40:31:c2:a9:df:
b7:0d:ed:e4:b7:d2:61:63:5b:d5:64:58:5a:e0:7d:
64:81:2a:c5:5c:d1:94:a9:25:70:c9:ce:33:43:c8:
fd:01:de:cf:71:e5:c1:16:61:57:1b:18:68:9a:a5:
bf:f5:76:4c:0d:04:4d:a7:d9:54:ce:1a:91:2b:c0:
99:8f:08:1d:70:d3:66:83:b3:de:4a:8d:59:63:47:
b5:be:74:9c:bc:39:df:bb:04:b5:4a:fc:57:10:ad:
94:27:f0:6d:1a:f1:97:28:97:d3:53:e3:00:1d:06:
46:b9:a6:0c:6a:84:16:e1:46:e5:47:a6:3f:97:09:
44:74:a2:cd:aa:69:6e:25:9f:ef:da:03:d8:b9:53:
d4:85:02:50:ae:b9:fc:88:c5:60:7b:91:f4:5d:41:
15:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D6:E9:9C:0B:53:4E:FB:99:7D:73:D1:AC:80:14:56:F8:29:04:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8623C58C94411EFAF2DC06C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.36.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a4:8f:c1:c9:5c:41:ed:44:4b:a2:c7:97:5b:ee:81:a9:59:
de:3d:6a:95:c8:a9:c1:00:dd:52:bc:ec:8e:df:b2:6c:2a:69:
e4:28:72:70:40:c1:60:5b:a4:ed:72:33:9a:0f:91:12:b1:97:
1e:35:f3:00:03:f6:c8:d2:be:7a:cf:5e:9c:8e:8f:74:30:fa:
f3:2c:a5:cc:23:b2:c1:36:00:93:c2:59:47:79:53:87:a5:cc:
3c:46:99:18:ae:1d:7b:8b:98:5e:1c:88:ff:0c:e4:59:09:53:
64:a3:ed:eb:d0:b5:03:fe:8b:28:a1:f4:c6:36:55:82:83:9b:
6a:8b:cd:ee:85:8d:5c:25:e4:95:f9:ca:4e:6c:7d:ef:31:24:
fd:b9:37:5f:2a:bb:0a:15:5b:81:a6:3f:bd:e7:96:00:52:0b:
4d:71:f5:94:25:49:01:60:7e:ba:e4:81:6c:65:9f:36:0a:e2:
16:8e:ae:05:5c:67:81:61:5e:88:44:f6:73:0b:b8:c6:14:f4:
77:6e:c7:3e:b4:a0:40:df:4d:92:57:38:ac:43:bd:53:25:16:
3f:79:3d:1b:6f:5f:00:96:c5:49:79:20:c9:14:77:1f:fc:a4:
84:32:5a:ff:16:34:c8:95:57:e8:cd:71:0c:67:3d:07:93:db:
99:20:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:36 2025 by rpki-client