Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3999ADECDA911EFB8DFFE6D762E951A.roa
File: E3999ADECDA911EFB8DFFE6D762E951A.roa (raw, json)
Hash identifier: a9Nl2ryhgcMy+KuvgSExuJXXpyZHQcK8pYsArIDc0yo=
Subject key identifier: BA:CE:F7:87:BA:4E:1F:1A:D1:DF:0F:83:57:0D:9A:A4:0F:6B:E0:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010147
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3999ADECDA911EFB8DFFE6D762E951A.roa
Signing time: Wed 08 Jan 2025 10:18:23 +0000
ROA not before: Wed 08 Jan 2025 10:18:19 +0000
ROA not after: Mon 13 Dec 2027 10:18:19 +0000
asID: 17561
IP address blocks: 156.255.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65863 (0x10147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:18:19 2025 GMT
Not After : Dec 13 10:18:19 2027 GMT
Subject: CN=677e50ee-c772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:23:f4:fe:eb:fe:cc:7d:61:42:ab:b2:bb:
8d:81:09:41:c0:92:da:69:3c:ee:42:bf:e2:16:39:
bc:61:68:02:11:eb:a7:77:21:bf:35:9f:0e:3b:2e:
8d:a9:f4:52:63:4a:d8:85:d7:e7:c0:75:bd:8a:aa:
05:c1:ab:05:a0:09:13:38:d7:18:cf:ae:2d:3c:68:
2e:47:ce:a9:58:93:c2:df:26:09:bb:b3:7a:cf:0d:
f2:e6:d2:38:21:2b:5e:fa:8e:88:99:88:58:42:ed:
32:e5:b2:b3:eb:a4:13:a7:45:f4:ed:1c:4a:90:9f:
1d:21:1c:41:8d:03:5f:c2:95:57:ae:6d:5f:5c:73:
1b:d6:20:c7:36:3f:4e:64:d6:66:86:52:be:4d:e3:
4e:80:19:17:17:1f:4e:43:be:76:eb:26:e2:56:ba:
e9:4d:c8:59:43:c6:fc:a2:4b:ff:8c:38:c2:c9:94:
6a:bc:79:46:04:7a:b3:b8:d1:58:c5:d5:e6:fc:c7:
de:99:ac:e4:49:a3:9a:3c:3a:85:e6:b3:d7:2c:33:
2d:83:b3:a8:72:e3:e6:02:b8:6e:4d:de:a2:ec:67:
a3:6c:98:80:71:58:bd:11:77:ba:e3:b3:f9:4e:89:
6e:6b:53:d4:63:3c:3a:7a:22:ea:53:d7:80:fb:c4:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CE:F7:87:BA:4E:1F:1A:D1:DF:0F:83:57:0D:9A:A4:0F:6B:E0:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3999ADECDA911EFB8DFFE6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.38.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6b:78:ab:f7:73:d3:0b:2a:09:40:4a:14:94:76:51:a9:0b:
10:56:2f:14:0e:d6:c6:a9:44:7b:6e:75:25:b0:b3:fb:d7:33:
c7:02:98:b6:52:3a:71:7c:d2:11:00:4b:86:fb:65:35:76:7f:
7b:a9:f0:c0:8e:3a:dc:61:b2:38:b2:da:3e:5a:2a:35:2e:01:
1e:3b:33:8d:3d:97:18:7b:f7:f5:fc:ab:7a:0d:3a:7b:b4:0c:
f3:d9:2a:3a:2e:3e:83:7e:dd:26:c5:92:ed:c5:c3:ce:16:4f:
56:c9:ea:48:0a:bb:82:b3:1f:9c:85:e4:32:af:c4:ae:39:3b:
c5:fc:cb:0f:74:5f:4d:85:91:03:7d:68:d8:d1:8d:8e:b8:29:
8c:a6:01:b6:6f:f4:67:81:c2:d4:1e:55:f3:39:1a:97:a7:f2:
9f:52:97:8f:73:2c:40:e1:8f:92:db:57:c0:3e:b0:a0:f6:ad:
57:99:88:7b:3a:52:66:28:ad:b0:49:78:54:20:e2:3b:6b:5e:
21:75:08:36:92:9d:d5:03:7d:99:e1:c0:38:05:e7:28:22:a6:
ea:39:f4:79:4a:c3:51:59:c3:d1:b6:c7:c7:a9:54:95:50:09:
65:30:35:bc:93:6d:a7:09:d3:12:80:08:29:62:27:65:85:49:
16:9a:11:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:28 2025 by rpki-client