Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6129490ACF2011EF8F538B44762E951A.roa
File: 6129490ACF2011EF8F538B44762E951A.roa (raw, json)
Hash identifier: vV776HB3cQOrfvxIbucfPCsVB18YwJHPntzS/M44o38=
Subject key identifier: 9B:0A:4F:36:66:12:DC:F8:60:6E:DE:76:17:04:87:CC:64:42:31:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6129490ACF2011EF8F538B44762E951A.roa
Signing time: Fri 10 Jan 2025 06:59:05 +0000
ROA not before: Fri 10 Jan 2025 06:59:01 +0000
ROA not after: Fri 14 Feb 2025 06:59:01 +0000
asID: 174
IP address blocks: 45.197.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66789 (0x104e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 06:59:01 2025 GMT
Not After : Feb 14 06:59:01 2025 GMT
Subject: CN=6780c539-25c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:8d:5b:34:2b:ea:ed:2d:04:58:d4:bb:c1:
3c:32:07:1d:ac:c8:b1:e5:ae:49:e5:e1:51:8e:32:
9b:87:84:4d:1a:d1:66:a0:38:cf:2a:40:56:dd:6b:
ff:00:7d:9b:ed:75:c4:9d:bd:2b:7e:be:26:1f:8d:
b5:a8:d3:3a:b3:5b:a0:bc:31:a5:fc:8d:37:29:62:
83:43:08:76:bb:f1:e1:46:9c:91:62:89:b2:a4:bb:
9b:d6:50:90:8e:6d:a2:be:aa:68:d3:ba:ad:c8:f5:
76:6f:65:c0:fa:60:91:ae:8d:2d:21:e1:0a:57:92:
af:9e:72:0c:3c:76:6c:78:81:36:56:96:23:a5:b2:
35:95:53:bd:e4:04:7e:bc:ad:e1:55:12:a5:a7:b5:
48:68:1b:c0:6a:1d:01:75:eb:80:90:17:8a:59:97:
d9:0b:26:9d:77:4c:c3:77:49:e5:a5:05:43:b1:ce:
8c:d5:34:b5:d7:af:13:6a:07:76:92:c6:36:aa:a3:
25:5b:7a:71:2f:14:a2:dd:1c:1d:61:a0:48:5f:71:
3e:b9:4a:70:10:15:42:ba:d4:e4:70:98:83:b3:a3:
fb:49:32:73:6c:3d:11:e0:85:7a:4c:ec:c6:8d:de:
ff:a1:0f:68:26:a9:ab:0e:a8:83:84:3c:35:b8:5f:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:4F:36:66:12:DC:F8:60:6E:DE:76:17:04:87:CC:64:42:31:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6129490ACF2011EF8F538B44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:a1:4b:d4:a2:6a:e1:8b:d5:e5:b0:25:1b:33:49:3a:ce:d2:
46:9f:92:65:8d:36:d6:aa:12:be:9e:e7:d2:41:94:f2:33:7e:
7d:e7:07:9c:97:00:75:2d:b9:82:f2:30:39:11:a8:f8:14:d3:
35:e2:bc:c1:90:99:a0:4b:a6:c7:7c:1a:9a:6e:f0:ac:ab:22:
e6:e1:bb:e9:3e:78:21:ae:6b:55:f6:af:82:fb:81:ae:74:78:
95:de:cf:b8:e9:83:ac:09:05:3b:d6:8e:b7:d5:bd:e1:c8:f2:
1c:4b:d6:63:89:f8:aa:8b:9e:30:ec:e6:54:1a:3f:9d:23:22:
97:b1:4b:19:a0:a5:38:4b:80:46:56:bf:35:93:18:49:ac:55:
91:ce:d3:5a:b6:8c:62:ff:6b:08:04:31:59:74:d2:96:fb:c5:
35:47:98:82:61:a5:3d:75:52:35:9a:90:9f:15:6f:ca:15:32:
fb:38:cf:94:e9:cc:56:35:59:5e:07:98:23:b2:19:88:dd:58:
39:97:82:f3:00:56:2c:c3:ae:98:22:15:59:16:fa:de:cc:27:
5d:42:86:f5:b0:86:45:9d:4a:f3:84:0e:99:28:22:1f:e0:a4:
b2:a8:e7:c7:41:cf:bb:cc:ad:86:9d:50:66:0f:1d:93:7c:dc:
20:2f:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:03 2025 by rpki-client