Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60A247B8F35911EF8A09009B762E951A.roa
File: 60A247B8F35911EF8A09009B762E951A.roa (raw, json)
Hash identifier: jXxHUpBBJadWWqK8zPqU36qRx6Ghsqq9gPw9HO5wCqw=
Subject key identifier: 89:4A:1A:4D:88:EE:AD:D2:79:80:72:76:A9:A5:4E:64:F7:B8:EF:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60A247B8F35911EF8A09009B762E951A.roa
Signing time: Tue 25 Feb 2025 09:17:47 +0000
ROA not before: Tue 25 Feb 2025 09:17:43 +0000
ROA not after: Sat 19 Feb 2028 09:17:43 +0000
asID: 17561
IP address blocks: 156.249.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77316 (0x12e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 09:17:43 2025 GMT
Not After : Feb 19 09:17:43 2028 GMT
Subject: CN=67bd8abb-f4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:c9:8c:9f:f8:01:70:aa:97:4d:d3:c6:8f:
f9:1d:8c:22:f7:c2:5e:be:b7:d9:87:9b:68:18:10:
ee:ae:c0:c9:0b:97:83:c5:60:d6:f9:6e:80:86:17:
68:b7:ac:50:41:f4:f1:4d:3e:3a:12:7f:a8:38:c6:
e4:f7:d7:02:d4:d1:4a:46:43:0e:c5:29:35:62:6e:
60:fa:f6:e7:89:2f:0e:ac:99:e7:e2:2f:44:a4:f4:
d2:43:44:d8:17:59:6a:5e:a4:6a:1e:57:b0:6f:14:
9a:26:d6:4c:1c:7c:26:c7:78:5c:02:7b:83:e2:6f:
45:be:bf:a5:25:9f:a6:87:d1:5c:c7:95:e6:c1:9d:
9a:73:02:69:ed:2c:fb:82:7b:8f:3b:7f:6e:41:6e:
7b:1f:bd:e4:68:85:2d:27:d6:48:be:09:5b:8a:20:
aa:6c:e5:42:7e:57:b5:78:f2:48:34:43:45:c6:0e:
ca:dd:9b:f5:84:67:eb:d7:f2:cc:03:94:c5:9b:7a:
50:82:29:06:8a:05:52:38:bd:ac:d2:e9:e0:df:2e:
88:29:59:89:ed:cd:3c:26:c2:99:95:2a:b0:57:5a:
05:9f:5e:ef:2d:9e:65:4c:45:30:5f:f7:32:bf:e0:
9a:f6:53:ba:47:95:1c:32:13:9b:02:8d:0a:9b:fd:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:1A:4D:88:EE:AD:D2:79:80:72:76:A9:A5:4E:64:F7:B8:EF:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60A247B8F35911EF8A09009B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:eb:32:65:65:20:b4:59:93:02:3a:9b:7a:dd:b1:ca:87:bb:
ec:64:dc:00:72:d7:04:fa:2c:ed:81:dc:67:43:75:18:b3:50:
af:16:5b:a9:24:45:bf:43:32:a2:3f:51:f1:9e:f4:98:9f:44:
64:d7:d0:b9:92:22:5c:85:66:e4:c4:ee:9b:5a:05:3d:95:cc:
6c:80:98:14:56:8a:b2:18:7f:3e:97:35:01:92:3a:5a:21:8e:
10:6c:12:72:c0:fe:be:cf:8c:49:bd:00:c4:13:7e:5f:1f:c6:
3b:1d:7e:1a:f1:e7:40:02:93:19:be:6d:36:66:77:55:08:31:
47:b0:62:cf:1f:42:a3:ea:9d:92:73:1f:a2:9a:b6:e7:7d:bc:
1b:56:d2:84:ee:9b:08:bd:a0:3d:96:b9:63:98:c6:59:0d:e8:
ed:dc:ea:47:2e:4a:8f:9c:3f:9e:98:35:55:de:88:d8:9f:b0:
c9:c3:13:3c:b9:b2:67:17:48:db:63:37:f6:07:d5:4f:13:c9:
10:49:37:39:66:b3:73:c4:86:1e:13:95:0a:c6:8b:78:a7:08:
a7:5d:c5:23:40:50:7c:58:e0:36:af:99:17:80:07:67:1b:44:
92:9b:c4:f1:b0:6f:74:c9:8e:f9:0b:06:03:89:54:02:72:a1:
67:95:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:04 2025 by rpki-client