Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02006BCCD24811EF8F6E6BB4762E951A.roa
File: 02006BCCD24811EF8F6E6BB4762E951A.roa (raw, json)
Hash identifier: V5uRP5sFktGXWu2HI8XMSf9SxTvGdWY8udRJZTI78qQ=
Subject key identifier: 48:94:02:2F:9C:7A:87:76:CE:DB:99:FA:F3:8D:50:17:94:12:D1:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02006BCCD24811EF8F6E6BB4762E951A.roa
Signing time: Tue 14 Jan 2025 07:20:19 +0000
ROA not before: Tue 14 Jan 2025 07:20:15 +0000
ROA not after: Tue 18 Feb 2025 07:20:15 +0000
asID: 214413
IP address blocks: 156.226.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67296 (0x106e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 07:20:15 2025 GMT
Not After : Feb 18 07:20:15 2025 GMT
Subject: CN=67861032-ee51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a2:a8:86:67:95:31:40:c2:3c:58:0b:83:9b:
9a:f2:7b:b0:09:59:af:bb:e4:9d:6b:a4:68:15:3c:
05:98:d7:20:92:74:4c:ec:bb:55:39:55:32:6b:46:
82:06:e6:37:b5:4a:7f:66:dc:b3:3c:ac:89:f5:3b:
6a:49:45:51:fb:e2:e7:7c:e5:10:79:5d:29:45:ac:
1d:85:a5:13:c8:7c:87:2d:d3:ff:8c:01:68:d8:a3:
a9:65:85:1e:3e:2a:5b:fa:22:a3:f0:e7:a7:d2:fe:
70:ff:bb:82:d6:ee:94:5b:b2:5e:71:2a:8b:3f:40:
6f:e4:d4:fd:dc:b5:a4:9c:40:55:e6:3c:5c:fa:2e:
80:91:5d:c4:e2:cb:8b:f9:79:22:2c:c7:33:fd:9b:
10:23:9c:49:fd:cf:92:3c:4e:94:c2:30:5e:c3:28:
c7:c0:2a:10:75:90:f7:a1:df:cd:85:9a:a7:88:76:
e6:51:3c:a1:00:6c:a4:94:ae:b2:cf:48:98:e4:6a:
9f:47:d8:82:c0:20:6a:09:09:0a:84:5f:17:ec:42:
62:e1:19:f8:dd:c5:74:68:77:c4:e5:0f:03:ed:71:
05:8e:0d:50:ee:41:1a:5a:b4:0a:dc:86:c5:e0:54:
7f:d3:22:84:11:60:f0:6d:66:58:dc:a5:60:43:47:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:94:02:2F:9C:7A:87:76:CE:DB:99:FA:F3:8D:50:17:94:12:D1:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02006BCCD24811EF8F6E6BB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2b:7c:04:e5:a4:86:38:33:72:c4:44:84:48:73:24:97:04:
29:5b:a7:23:80:22:51:f6:09:33:81:f6:3f:9d:26:22:db:1c:
c4:e9:51:f8:5f:e4:40:d8:c7:8f:58:92:64:0e:4d:5d:44:03:
bc:43:05:2c:e1:c8:44:f3:3b:dc:db:b7:b3:b4:dc:87:0f:63:
d1:ad:07:ca:1b:95:52:39:33:a9:27:12:32:f5:13:52:49:db:
d1:73:4b:16:5e:aa:8f:d3:68:91:11:8b:f8:3a:ec:a3:d9:3c:
bb:d0:7d:83:ba:b8:25:4d:0c:c1:f9:ee:5b:93:2d:19:a2:8a:
f7:96:25:e6:cb:df:14:98:ba:1c:28:00:06:7a:b3:96:db:1d:
19:b8:bf:16:b2:73:45:d2:1b:cb:97:04:85:d4:cd:ce:a3:a7:
51:6a:dd:38:51:08:cb:92:78:d6:70:26:32:9c:6a:92:29:d4:
1c:e7:b4:c3:0c:27:7b:19:d3:50:79:e3:00:21:6b:bc:7b:f3:
cc:18:ad:57:50:92:2f:29:b6:70:6c:ad:f2:ea:46:2d:b0:c8:
45:09:28:d6:91:7f:3a:37:80:52:47:1d:56:70:2c:3e:b5:73:
fe:d0:7c:a9:01:f6:c6:d7:8c:29:26:95:c6:86:e4:2b:81:12:
de:1c:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:20 2025 by rpki-client