Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6011F176CFFB11EFB0D311B1762E951A.roa
File: 6011F176CFFB11EFB0D311B1762E951A.roa (raw, json)
Hash identifier: pzvBZnOXSyDXZ890uAJj7txWuh6Y/r4YEd8FniuHyZc=
Subject key identifier: 47:37:16:F9:5C:C1:E5:14:D6:C8:56:58:FF:43:65:13:01:FC:7C:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01058A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6011F176CFFB11EFB0D311B1762E951A.roa
Signing time: Sat 11 Jan 2025 09:06:43 +0000
ROA not before: Sat 11 Jan 2025 09:06:39 +0000
ROA not after: Thu 20 Feb 2025 09:06:39 +0000
asID: 141718
IP address blocks: 156.225.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66954 (0x1058a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 09:06:39 2025 GMT
Not After : Feb 20 09:06:39 2025 GMT
Subject: CN=678234a3-1f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:2e:8b:2d:f9:6e:52:8d:74:fa:f6:b9:61:
35:54:13:21:57:1e:53:b2:7b:34:6e:24:ef:fc:ba:
57:3b:fd:d4:c4:38:45:a0:bd:3a:1b:a0:49:23:f1:
02:6e:1b:08:09:09:1c:70:88:ec:50:e0:9b:c4:14:
43:78:97:c6:03:a8:da:61:6c:79:76:9f:7e:40:71:
9d:40:ee:b6:91:73:66:d7:08:0a:d3:4b:b4:91:98:
1b:1e:1b:08:71:09:2b:d2:e2:fb:59:61:bf:7e:78:
4f:33:cf:78:e8:05:e5:78:40:61:0d:fd:f8:5b:64:
17:07:59:d4:64:c9:37:b6:e2:a4:d6:3f:6c:47:7c:
2d:1b:30:1a:91:49:77:11:14:d8:77:a4:15:c0:74:
4e:da:33:00:4f:a9:dd:ed:b5:1d:88:e8:31:2c:53:
65:a4:bd:98:95:5f:96:67:78:ec:8b:e7:d0:f7:f4:
6e:88:ed:2f:2e:3d:40:63:60:87:78:a7:ac:8e:af:
06:11:b1:5d:df:3f:8f:7f:c7:e7:b5:b3:94:2a:97:
3e:24:71:e6:17:fd:0c:00:a3:ad:a8:71:09:f7:4f:
f4:a4:4b:a9:c9:51:10:b1:0e:6e:19:71:fe:7f:09:
ff:8f:82:70:37:a1:dc:95:a5:87:2b:cf:7c:dd:89:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:37:16:F9:5C:C1:E5:14:D6:C8:56:58:FF:43:65:13:01:FC:7C:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6011F176CFFB11EFB0D311B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0b:0d:c9:b4:c9:17:71:e2:66:3c:5b:a4:61:59:95:76:0f:
69:21:a7:89:02:29:b7:9d:59:e8:0a:2e:57:75:70:0f:6e:6f:
5c:37:45:e3:b4:18:c2:06:96:16:8b:ae:41:19:0d:ab:ec:89:
84:5f:01:1c:4c:db:73:aa:97:af:d3:60:cc:e9:0e:ff:78:2a:
f4:3d:ea:21:59:cb:26:37:7f:22:44:27:d8:f1:99:b3:c7:9c:
e6:4d:21:5b:22:6e:4b:a7:9b:6b:9a:5d:98:b3:a1:1a:c4:d6:
1c:f8:69:6c:d8:a3:60:59:77:3f:bf:4a:6a:01:b4:bf:61:e4:
47:39:65:ea:7f:5f:db:08:1e:99:a0:2d:38:45:1b:a4:ee:8b:
52:68:32:92:a3:77:19:24:47:26:bf:7a:1f:78:cb:a2:5b:10:
8b:c1:ae:d5:b6:9d:6a:e9:35:43:5e:59:16:12:34:3f:ee:6c:
ab:ec:e8:39:f4:d6:08:a6:a6:e8:81:76:74:f0:be:3e:b4:5f:
2e:2a:3a:9d:67:aa:b3:37:c3:bd:1e:34:06:f0:02:b8:b4:66:
76:e0:bd:18:81:bd:f9:a2:c4:16:24:fb:ce:3b:e2:28:40:d3:
86:3c:d4:ad:2e:3d:2d:13:29:77:ed:2e:70:4d:bb:18:1f:c9:
e9:cd:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:55 2025 by rpki-client