Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61DACE96CCEB11EF95D9DDA6762E951A.roa
File: 61DACE96CCEB11EF95D9DDA6762E951A.roa (raw, json)
Hash identifier: PD7lB9IJF6KgP1Fd46vsePXwas2OY3XIUyqLheChORk=
Subject key identifier: 9E:8A:37:DA:45:A0:BB:56:2A:E9:88:81:B7:86:3E:05:9E:BA:4C:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61DACE96CCEB11EF95D9DDA6762E951A.roa
Signing time: Tue 07 Jan 2025 11:34:40 +0000
ROA not before: Tue 07 Jan 2025 11:34:36 +0000
ROA not after: Mon 13 Dec 2027 11:34:36 +0000
asID: 17561
IP address blocks: 156.236.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64509 (0xfbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 11:34:36 2025 GMT
Not After : Dec 13 11:34:36 2027 GMT
Subject: CN=677d1150-66f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:a6:f1:df:f6:6b:ac:9b:05:ce:a9:6a:dc:
33:74:16:f7:b2:1e:33:67:ab:41:35:33:d2:b6:c6:
a2:ee:80:6b:0c:16:8f:d9:6e:0a:33:46:f6:0b:ae:
48:d7:cc:e8:d1:2a:34:c3:0b:f8:5c:87:c7:6a:c1:
2c:48:e4:a3:81:a2:a0:89:19:71:37:f0:67:89:6b:
b7:12:a6:94:a3:e3:82:9e:1d:81:37:73:b7:72:f2:
a7:dd:46:e7:47:5c:0e:57:05:f7:d4:49:37:fd:ca:
50:9c:c3:6a:03:d8:e4:2f:89:f9:df:76:ac:18:ce:
83:d7:df:02:fc:9b:f5:f5:70:07:fc:2e:df:be:b6:
b4:b2:d8:90:b9:2d:cb:1c:25:a0:c4:81:5a:8e:17:
a9:e4:6e:14:69:e6:5f:bc:d0:79:29:33:a1:94:3e:
e3:ae:c5:a3:65:46:d9:c0:8e:1b:88:b7:9b:d2:a0:
be:cd:42:a7:62:6d:15:b9:3f:5b:da:ba:81:2f:cf:
a7:1d:57:e3:9b:d4:f6:70:ab:45:87:5a:ee:0d:d9:
cb:33:b4:36:0c:75:4d:46:ab:21:91:20:b3:09:71:
96:42:f4:f3:1e:f0:07:d3:cf:9a:d3:f5:9f:23:2b:
e3:82:f4:d8:77:3f:67:76:81:e5:2e:8d:8e:ec:e1:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8A:37:DA:45:A0:BB:56:2A:E9:88:81:B7:86:3E:05:9E:BA:4C:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61DACE96CCEB11EF95D9DDA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.9.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6a:eb:6d:e2:3c:b2:c0:c9:6c:88:90:3b:17:5b:d0:88:26:
59:dd:e3:c4:cd:e4:69:d5:74:b9:08:c7:7c:f8:92:36:c7:7d:
db:13:4a:44:17:d1:04:75:77:1d:5d:0e:bb:32:ef:cb:ff:d6:
88:c9:24:6d:ab:c9:86:85:ae:2c:29:31:46:c8:63:76:07:07:
fb:a0:eb:dc:4f:8f:54:53:92:d9:0d:0e:49:49:00:0c:15:0f:
55:13:5c:2c:68:73:14:7e:0d:40:84:fa:5d:c5:4d:3c:34:e5:
64:ac:51:35:b0:74:98:bd:54:ee:17:45:e0:87:36:32:8d:a3:
a3:be:b0:b3:1d:0a:9c:41:fa:24:c2:92:3d:8d:63:88:13:21:
14:66:b5:c5:14:ea:7b:22:ab:28:84:58:3a:b6:06:85:ad:3a:
c8:69:7f:0a:d5:a2:ed:7f:02:0a:20:52:6f:73:89:14:da:3a:
75:0d:95:14:e2:35:9e:00:4e:8c:b1:15:2b:42:a3:76:98:14:
be:ba:02:82:2b:bb:44:bf:57:08:e9:13:1b:ea:69:3f:ad:bb:
5b:7a:01:0a:b4:28:f9:ee:85:be:4a:f0:28:ef:09:a5:23:2f:
18:4a:dd:8b:9c:49:12:47:ab:c2:2d:bc:db:01:36:11:25:14:
68:94:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:29 2025 by rpki-client