Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61B6A628CD4B11EF93EA6582762E951A.roa
File: 61B6A628CD4B11EF93EA6582762E951A.roa (raw, json)
Hash identifier: 9TwE8/bjrjwcC6THytHg+odb/4RWvrAOir94wFzRVmA=
Subject key identifier: 18:57:5A:F9:1B:D9:10:3B:2D:42:72:4B:F1:FE:12:22:36:BF:AB:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61B6A628CD4B11EF93EA6582762E951A.roa
Signing time: Tue 07 Jan 2025 23:01:52 +0000
ROA not before: Tue 07 Jan 2025 23:01:48 +0000
ROA not after: Mon 13 Dec 2027 23:01:48 +0000
asID: 17561
IP address blocks: 156.246.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65217 (0xfec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 23:01:48 2025 GMT
Not After : Dec 13 23:01:48 2027 GMT
Subject: CN=677db260-8f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:8d:8e:fa:5f:c8:f7:1b:90:28:9d:e7:65:
09:66:a5:76:72:06:22:73:af:a7:0e:88:bd:1a:1e:
87:3d:59:d6:85:18:7f:99:51:e2:e9:b6:cb:40:0c:
bb:d0:a0:a4:52:75:a8:eb:29:84:97:94:c7:b1:29:
0b:d8:38:c4:43:da:e2:18:18:5f:ce:f7:bb:35:bb:
7f:04:d0:32:08:67:d5:e0:d4:86:45:2d:5f:68:2d:
5c:a1:e5:3a:03:b5:be:b3:30:d5:03:c7:31:93:cb:
bd:b3:7f:4b:75:a7:37:39:d1:1f:ac:0f:a4:ff:2b:
29:03:a7:69:b9:58:6e:ee:ef:9c:13:7e:29:b5:03:
b8:2b:a9:fc:42:f8:74:5d:68:aa:41:51:4e:07:8c:
1f:e7:f2:77:a0:f6:2b:60:9b:c7:b1:c5:d2:3a:8f:
28:30:18:f2:4b:71:3c:7f:6b:79:ab:9b:bd:db:14:
cd:61:d2:19:2b:17:9a:71:83:38:da:79:22:95:0b:
f7:57:b9:87:fa:35:23:c2:83:69:13:c2:65:75:ff:
5e:71:32:16:6c:74:91:99:a5:9b:46:f5:14:17:d6:
63:65:db:58:97:fe:4d:67:28:fe:67:2c:b2:9c:53:
d4:01:2d:af:b0:1b:0e:99:f3:60:c0:a8:63:36:de:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:57:5A:F9:1B:D9:10:3B:2D:42:72:4B:F1:FE:12:22:36:BF:AB:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61B6A628CD4B11EF93EA6582762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:4a:23:8f:35:a0:2d:13:d0:65:d6:5c:47:29:2e:8c:5b:7e:
bc:b5:9a:17:14:25:c4:55:bc:06:b9:c0:0c:07:1f:e2:72:f7:
7f:19:d4:60:3f:03:2b:8c:3b:03:1e:60:5d:f1:c2:21:da:97:
b2:65:39:ab:30:07:6b:2b:ed:63:ca:a1:88:76:a6:4d:d8:73:
fa:69:e0:d6:d4:e2:13:86:ad:25:90:cf:fe:aa:a2:f9:ec:33:
85:0c:f8:58:5c:27:77:3a:61:94:6e:dc:15:48:4c:c7:6c:a3:
73:29:55:82:c7:fc:ae:12:1b:10:b0:5b:1c:07:5d:14:30:65:
bb:40:78:bd:c3:5f:de:d6:31:3c:86:8f:02:b5:82:89:87:ea:
55:03:6b:9c:f7:13:7b:bf:f5:b1:23:36:27:ea:a9:07:91:7c:
21:57:99:bc:52:6b:66:4d:bf:81:18:92:0d:19:56:9f:c0:03:
13:c9:cb:96:f1:4c:9f:09:84:82:45:28:e3:3a:1f:9c:dc:64:
7e:65:70:ff:a7:62:15:11:40:1c:64:ba:3a:d1:68:69:8a:80:
4a:98:8c:b7:9e:93:f0:51:19:db:d0:54:de:72:f3:27:9a:c4:
aa:99:c3:f7:8a:dd:72:da:3d:18:34:87:6a:fa:7b:7f:30:15:
6b:3d:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:59 2025 by rpki-client