Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62A1D67AC95E11EFB5E0D78E762E951A.roa
File: 62A1D67AC95E11EFB5E0D78E762E951A.roa (raw, json)
Hash identifier: a9TjgY/UScdXvI5G/Yj/YSNn84EcJGaLVM1NFl+tSvs=
Subject key identifier: 0D:AC:6C:C1:7C:5D:B9:DA:15:45:BB:3B:9F:14:A6:2D:16:BC:EF:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F446
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62A1D67AC95E11EFB5E0D78E762E951A.roa
Signing time: Thu 02 Jan 2025 23:07:49 +0000
ROA not before: Thu 02 Jan 2025 23:07:45 +0000
ROA not after: Sat 13 Dec 2025 23:07:45 +0000
asID: 984
IP address blocks: 156.226.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62534 (0xf446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 23:07:45 2025 GMT
Not After : Dec 13 23:07:45 2025 GMT
Subject: CN=67771c45-53a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:2a:4e:12:f5:04:3a:ab:a0:00:e8:d1:df:
d7:28:78:44:a8:23:ce:9f:65:2d:0f:db:00:72:a6:
56:e6:dc:72:81:08:c5:79:ab:ef:8a:d0:4f:e0:52:
f5:43:a4:3d:1b:67:b4:34:4a:7f:b8:76:25:60:a7:
fb:1a:dc:43:49:9f:59:1b:b8:e9:0f:47:ba:0b:39:
57:29:96:82:86:8e:f0:32:66:ff:f3:e9:63:27:ce:
55:63:75:51:17:69:7e:70:6f:b3:55:4c:ae:66:c9:
44:b6:df:e8:ba:e8:9e:65:85:c3:28:45:28:89:3a:
5f:7b:b3:21:44:67:1b:74:4c:7f:32:c1:e3:e8:68:
42:1f:62:c6:a9:d4:81:dc:29:25:a7:5c:59:fa:12:
e2:cd:85:e1:99:52:10:90:77:30:1c:61:70:c0:af:
e6:87:ae:8a:9c:53:a8:2e:92:9f:2f:6f:82:a9:aa:
94:2e:d6:ff:27:ed:19:0b:90:de:5d:b4:de:51:05:
8e:a1:1f:90:80:89:1e:12:bc:a4:99:e0:7f:ef:58:
a4:71:b6:00:4e:74:af:12:a6:4d:3b:a1:85:9e:98:
08:32:20:7a:53:05:d8:be:8f:a6:65:18:1a:00:e0:
f7:c7:a4:59:8c:e4:fe:a2:e6:3e:c8:a3:b4:1e:a9:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:6C:C1:7C:5D:B9:DA:15:45:BB:3B:9F:14:A6:2D:16:BC:EF:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62A1D67AC95E11EFB5E0D78E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:61:14:90:a6:dd:4e:07:4e:94:ac:d8:f2:03:e8:45:ea:4b:
ff:08:25:46:c4:46:5d:43:b1:1d:3b:80:f5:35:41:0e:51:0c:
fe:58:51:d0:96:73:be:4a:d7:9e:ca:f8:9a:a3:8f:d6:d5:85:
74:b5:e3:76:57:2b:9e:69:48:5b:e4:d8:23:9d:df:28:2d:2f:
4f:65:dc:6f:09:3c:c6:21:a0:c4:80:34:88:ff:7c:82:71:41:
43:e3:eb:af:55:f2:16:f6:32:7d:de:b8:cb:4a:f9:df:0a:0b:
0b:df:8e:bc:9b:cd:8b:05:dc:50:96:ed:19:a1:2f:ba:77:c7:
77:3d:8f:e5:0e:ea:2d:67:d5:e4:33:fc:bb:7b:d2:6a:1f:90:
1f:d9:19:09:be:04:ce:8a:5f:5e:5e:bd:a9:76:c1:14:f8:e5:
5c:2c:c8:cd:83:fa:d4:66:1c:ce:f1:d5:b8:bf:dd:55:95:03:
26:20:3b:74:0f:42:f0:eb:03:3e:9e:05:3c:3c:47:21:15:1b:
16:ff:72:a0:34:72:ed:96:f4:55:4c:a6:74:22:bd:43:4e:74:
22:83:11:3a:60:a4:7b:0b:27:35:5f:6a:05:1e:1e:a9:34:dc:
8a:9c:d0:e0:94:a0:79:4d:de:4c:79:30:02:c4:dd:ea:08:6d:
64:ba:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:32 2025 by rpki-client