Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D56E3E9CC99411EFADA1BF7E762E951A.roa
File: D56E3E9CC99411EFADA1BF7E762E951A.roa (raw, json)
Hash identifier: 3cFbr3y/KWA70VIUiYqYOY08AtieO8fH5qc3RLvkcFo=
Subject key identifier: 9F:09:14:F6:69:55:56:C9:43:D1:B5:74:A9:8F:C3:23:25:AC:F4:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F607
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D56E3E9CC99411EFADA1BF7E762E951A.roa
Signing time: Fri 03 Jan 2025 05:37:34 +0000
ROA not before: Fri 03 Jan 2025 05:37:31 +0000
ROA not after: Sat 13 Dec 2025 05:37:31 +0000
asID: 984
IP address blocks: 156.233.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62983 (0xf607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 05:37:31 2025 GMT
Not After : Dec 13 05:37:31 2025 GMT
Subject: CN=6777779e-0918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:d3:79:5b:ec:ed:ff:ba:1e:a8:47:14:74:
92:96:9b:bd:c7:ac:20:d0:dd:3b:41:0f:11:ce:3f:
99:9a:ce:93:2f:28:75:f7:ba:f8:31:71:23:50:58:
50:17:f1:48:64:8b:c9:cc:40:82:4c:c8:cb:fc:49:
a6:20:70:0f:cf:f9:e2:52:36:6b:99:74:13:3e:d6:
d6:a9:96:72:ee:b1:d8:4d:dd:0b:35:52:85:bf:35:
b7:ab:ab:50:5b:a5:cf:22:db:1f:54:a4:3b:9e:b2:
42:09:f0:13:f2:9f:f5:c1:88:0c:e6:90:7b:e1:90:
67:62:c4:79:83:09:af:63:04:53:c3:0e:7c:a9:11:
29:9a:12:88:ce:2e:05:b9:07:75:c5:fd:12:a9:5e:
00:3f:02:87:e4:8f:74:00:cf:77:fd:f2:95:b6:e5:
74:dd:c3:60:20:a3:10:3f:dc:87:ac:fa:5f:48:5e:
8e:6f:bf:00:fa:77:18:16:69:c6:ac:ed:cd:db:12:
45:7e:7b:91:b6:3d:1e:c9:ae:00:e2:7f:48:36:08:
ab:b6:83:9f:0f:8b:d5:a1:46:86:57:37:88:8a:59:
04:24:cb:39:0c:6f:75:ea:75:3c:04:16:ad:a0:96:
43:b9:28:64:33:49:b1:64:77:0a:23:2e:9e:53:e2:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:09:14:F6:69:55:56:C9:43:D1:B5:74:A9:8F:C3:23:25:AC:F4:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D56E3E9CC99411EFADA1BF7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.136.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:70:23:b6:69:6e:7d:32:6a:05:78:8d:70:ff:69:78:6b:b4:
19:df:75:d1:02:43:32:e2:4d:74:a7:d3:84:8c:8a:54:1b:96:
74:34:89:93:c2:82:2b:57:56:7d:a7:b9:95:53:37:e0:2a:be:
81:13:d7:fc:cd:f4:bd:e6:5f:70:2e:7e:f0:31:69:15:2e:e2:
d5:a4:a8:d2:e5:76:d6:ec:55:ab:30:53:dc:aa:9a:46:c0:19:
bd:d7:72:e2:14:71:4a:3f:3f:c0:98:15:c3:9f:ef:76:92:4d:
4e:f9:08:02:8b:9a:61:82:7b:8a:9f:30:9c:06:16:4a:99:b9:
d3:ab:49:d4:86:ab:55:84:8b:aa:dc:c9:e4:d4:49:46:66:6a:
74:cb:9a:79:ff:b0:df:d7:95:b8:8b:dd:00:ea:c3:e6:1a:4b:
d7:51:5e:37:b1:27:4e:33:4d:48:c7:be:f0:b1:b2:87:85:69:
ee:8a:9f:0d:44:43:d7:98:76:4a:4d:2d:9e:a6:7c:9b:c6:30:
e1:ba:11:82:43:27:59:38:a7:b6:24:4a:a1:ac:64:2d:c4:17:
00:81:5f:cb:5e:32:47:b8:9b:30:35:47:64:1b:81:af:ff:ba:
47:c7:e1:9a:ab:6d:5b:69:6f:21:72:23:22:e8:ba:41:9b:23:
7e:c3:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:57 2025 by rpki-client