Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1B55476CCFE11EFAEB048A1762E951A.roa
File: D1B55476CCFE11EFAEB048A1762E951A.roa (raw, json)
Hash identifier: axihoSO+KBGZxyi0GnEQ9lzoDTmeSWufJASCNjSl/D4=
Subject key identifier: 3D:33:1C:57:D5:37:DE:1F:55:F5:A0:8D:15:4A:B8:55:95:A2:3F:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1B55476CCFE11EFAEB048A1762E951A.roa
Signing time: Tue 07 Jan 2025 13:53:48 +0000
ROA not before: Tue 07 Jan 2025 13:53:44 +0000
ROA not after: Sat 13 Dec 2025 13:53:44 +0000
asID: 984
IP address blocks: 156.238.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64607 (0xfc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 13:53:44 2025 GMT
Not After : Dec 13 13:53:44 2025 GMT
Subject: CN=677d31ec-df85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:24:80:f4:f7:50:70:53:20:1c:98:bc:09:23:
1a:a9:4a:da:98:e4:e7:d5:35:b0:71:41:73:23:3e:
1b:a5:64:b5:b7:0c:ae:bc:a5:db:74:a0:0a:ab:fc:
e4:2d:44:33:13:63:c4:75:bd:cc:f8:b1:8a:d7:d1:
a2:49:0b:43:bb:24:88:b4:36:3b:e6:68:c3:b2:ed:
b3:08:f3:53:aa:98:f2:99:6e:f3:8b:50:c3:9e:3c:
00:3f:ea:45:e0:8f:44:e9:98:71:a9:c4:ff:66:be:
47:85:63:9b:f0:26:52:8c:a4:28:52:43:93:e6:b2:
15:fa:31:b5:72:77:48:23:f4:0b:98:fa:f3:3b:04:
23:23:68:81:4c:20:86:db:5f:1a:f5:3b:10:6d:4b:
19:90:8b:82:1c:4a:c5:dd:a5:16:f9:b7:1d:f8:03:
b7:c5:1f:31:cd:e8:cf:55:fa:4c:cb:72:1f:72:34:
bf:e9:80:45:b4:2c:dd:d6:cf:db:52:58:9d:12:4f:
2d:29:1f:52:a1:4c:25:67:0a:f2:63:85:fb:1c:4d:
78:58:47:d2:f7:13:44:d8:50:cb:f3:37:fb:39:50:
cf:43:92:b8:da:28:b5:38:f1:92:ec:6f:62:1d:6f:
9e:d1:f8:e3:12:7c:29:8f:19:84:61:3e:70:5d:7f:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:1C:57:D5:37:DE:1F:55:F5:A0:8D:15:4A:B8:55:95:A2:3F:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1B55476CCFE11EFAEB048A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.104.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c7:08:36:03:6f:65:0c:10:fa:7c:9a:f5:d7:9d:d7:27:88:
57:dc:3e:98:22:76:fa:2f:1e:cd:b2:27:d1:70:eb:da:87:5a:
93:34:a6:a7:d7:38:29:1c:e6:15:86:17:a3:5d:6c:e8:56:b5:
65:26:67:a1:66:68:e8:34:5f:66:80:55:5f:5a:03:23:22:55:
e8:00:8b:35:d7:87:7d:2a:bd:8c:ab:02:11:df:20:f8:79:f4:
35:bc:b1:c3:48:0a:97:f4:4a:48:69:7c:16:e1:08:07:2f:80:
74:1a:09:32:ee:7a:c5:ed:3e:90:34:e2:be:80:ce:ac:99:29:
ed:9d:ea:e2:8d:34:d1:ee:9d:6b:4a:c3:12:22:76:ab:6b:68:
da:27:24:78:92:fd:13:a2:cd:5d:55:94:0a:98:16:8f:e5:a7:
12:6d:87:12:f0:73:1f:a3:e5:84:1a:22:af:56:d1:22:e2:b4:
e4:1c:59:de:4a:c5:ed:fc:41:dd:4f:2d:00:69:13:b2:1b:8c:
4b:05:b2:fc:61:ff:8d:66:ea:77:90:c6:52:e6:a0:88:78:a8:
38:26:06:11:bc:66:42:4a:71:86:0d:37:84:49:bd:54:b2:f5:
a8:34:cd:a8:84:61:1b:f9:c9:9f:92:52:c4:ba:81:77:e6:98:
2f:26:74:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:35:48 2025 by rpki-client