Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/061D2D94CCCB11EFAA00935B762E951A.roa
File: 061D2D94CCCB11EFAA00935B762E951A.roa (raw, json)
Hash identifier: yggA4CB6yMUsIzO509CmTQ6Wzpf1jSxZeB0rMAjfP0o=
Subject key identifier: 82:15:2E:C0:5D:39:BA:D5:69:E3:01:84:B6:BB:37:26:34:F2:C6:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/061D2D94CCCB11EFAA00935B762E951A.roa
Signing time: Tue 07 Jan 2025 07:43:02 +0000
ROA not before: Tue 07 Jan 2025 07:42:59 +0000
ROA not after: Sat 13 Dec 2025 07:42:59 +0000
asID: 984
IP address blocks: 156.233.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64122 (0xfa7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 07:42:59 2025 GMT
Not After : Dec 13 07:42:59 2025 GMT
Subject: CN=677cdb06-a44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:f2:1c:73:af:cd:87:38:72:c7:c8:2b:37:
b7:1c:28:44:0c:33:04:7a:bb:10:b9:6b:fc:11:b9:
50:37:39:82:bf:99:a3:d2:ab:3b:a4:e6:64:31:38:
e1:76:f0:91:ff:70:a6:42:2a:04:e2:0a:27:df:c0:
ab:cd:96:df:51:da:05:00:4f:87:06:bb:e9:7f:e7:
10:1a:aa:a9:a1:95:4d:a3:64:e4:2c:14:ce:93:18:
3c:df:30:f5:fd:10:c7:8b:7d:16:fe:77:58:f8:6e:
bc:d6:a5:ce:de:04:a7:f4:5e:7b:5d:ae:d6:82:ff:
cf:90:18:df:92:a6:ad:44:46:91:92:cb:a5:e8:e3:
cd:e9:11:5d:6e:ce:4b:af:4f:45:b5:7f:aa:c8:f0:
c7:a6:6f:cb:91:77:dc:99:a1:5b:52:8f:bb:7f:25:
dc:c9:63:d6:ae:cb:0f:00:f9:04:5a:3d:4c:77:3d:
4c:70:90:2c:9b:c5:f9:ac:e2:ae:68:09:8b:83:25:
24:5b:f8:f0:d2:99:33:a2:33:de:78:f4:78:27:d3:
55:85:5c:35:b9:26:20:38:d3:3f:95:c5:36:3a:94:
7a:36:98:a6:b4:e6:3c:9e:8e:a3:9e:e7:57:1d:cd:
52:ef:33:d8:71:3d:4b:1f:9b:17:4b:85:c8:aa:d8:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:15:2E:C0:5D:39:BA:D5:69:E3:01:84:B6:BB:37:26:34:F2:C6:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/061D2D94CCCB11EFAA00935B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.112.0/24
Signature Algorithm: sha256WithRSAEncryption
71:87:e1:d3:bb:52:37:43:cc:e8:8a:29:2a:32:51:74:41:7a:
0d:10:38:ee:39:26:b5:af:91:c2:82:26:98:1b:aa:cc:f3:c6:
e1:48:28:4f:f7:ca:be:14:68:15:bc:27:43:d4:8b:55:8d:53:
70:5c:67:7b:c0:b8:34:c7:70:01:b5:39:26:95:e2:be:25:30:
8f:77:09:25:a3:af:fa:9a:c6:02:34:4a:8d:f3:b7:c5:d7:b8:
ad:1b:67:9d:f7:92:10:10:28:6e:ee:31:79:af:cd:06:be:c8:
cb:b6:ce:d9:7d:1b:37:d2:f7:59:68:e2:37:a1:cf:10:b0:3c:
24:97:69:df:e4:b8:bf:66:3e:a3:78:d4:b0:51:9a:9a:03:08:
d7:24:34:92:f2:6b:0d:ef:aa:bd:04:6d:e5:b9:8f:60:af:75:
84:c3:4f:08:c2:17:2f:46:3c:c7:7a:2a:ba:9c:00:67:0f:aa:
7c:d5:4f:9b:3c:ab:a2:ff:68:21:f2:48:88:8b:2b:df:b5:f3:
8e:96:38:fa:6c:51:62:1b:f1:1c:ef:2d:2a:2e:7d:35:50:4c:
11:47:84:f1:dd:95:12:ea:9f:02:30:18:81:16:70:1c:da:d2:
1e:f5:f4:3c:0a:13:9a:8d:f6:f1:f6:18:e8:62:6b:89:3a:68:
af:33:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:50 2025 by rpki-client