Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6467090AC94D11EFBFFE92A3762E951A.roa
File: 6467090AC94D11EFBFFE92A3762E951A.roa (raw, json)
Hash identifier: cJKGMzWQgMDRykO52Ruxg9OGNnstA6f/zCBHkIplLY8=
Subject key identifier: 4D:BB:C0:6F:DC:9A:0E:D4:4E:3C:8C:6F:4F:DC:49:A5:48:0F:2E:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6467090AC94D11EFBFFE92A3762E951A.roa
Signing time: Thu 02 Jan 2025 21:06:11 +0000
ROA not before: Thu 02 Jan 2025 21:06:07 +0000
ROA not after: Mon 13 Dec 2027 21:06:07 +0000
asID: 17561
IP address blocks: 156.225.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62372 (0xf3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 21:06:07 2025 GMT
Not After : Dec 13 21:06:07 2027 GMT
Subject: CN=6776ffc3-5c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:70:65:22:13:5c:62:90:93:7d:87:2d:f9:
19:e6:12:e6:5e:8b:02:41:d4:7e:9f:f4:cd:94:e1:
21:b1:c7:2f:c2:b4:55:9f:e2:59:3f:c6:83:fa:25:
53:b8:18:c8:02:1d:36:28:d0:e6:4e:8e:d6:6b:0d:
95:81:b2:b8:a6:c1:dd:57:20:eb:cd:db:e9:e6:92:
58:fd:cf:55:26:29:1f:13:2e:d4:da:0b:30:c6:93:
e3:09:ff:a1:bb:c8:b0:45:8e:83:eb:95:2b:c7:4a:
77:f3:22:f4:7e:f7:c0:4c:2c:42:e5:7d:81:9f:0b:
20:83:ed:28:79:cd:6c:9d:aa:e4:fa:ea:db:53:bb:
38:c9:0f:67:b3:c9:79:59:23:2d:21:1a:a3:c1:e7:
c9:3f:0e:05:0c:c4:37:2f:21:8b:48:4f:db:d3:b6:
e0:93:d6:ff:20:0f:0e:a5:a8:b7:c6:a5:44:d9:cb:
f9:55:b0:7d:9f:7c:5f:2a:3c:7d:c1:cd:65:72:17:
07:48:6a:ef:f6:8f:1a:15:3b:c8:cd:dd:c0:88:3c:
49:f4:53:70:84:8f:35:2a:9f:41:a8:f7:cf:b8:c7:
64:a8:61:1c:da:5b:ea:d4:c4:62:5e:04:08:a8:5d:
02:cb:85:cf:03:48:33:0c:36:bd:51:f6:e0:c2:59:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BB:C0:6F:DC:9A:0E:D4:4E:3C:8C:6F:4F:DC:49:A5:48:0F:2E:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6467090AC94D11EFBFFE92A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:d6:71:b0:1e:72:b6:3c:12:04:7e:18:4c:90:a3:76:ff:d3:
05:9b:8d:dc:07:79:0a:76:fa:9b:7b:28:a2:24:33:66:69:f1:
da:9f:63:7a:ad:82:4b:12:26:7f:b3:c9:45:fd:13:f5:98:dd:
b9:18:ea:fe:cf:30:f2:08:84:97:92:1d:bc:de:f8:f1:38:62:
89:54:d2:d0:8b:3f:ea:c8:f4:41:a8:a7:d7:a1:e0:cf:a6:3c:
d6:8f:c3:37:c7:0b:05:47:bd:ad:6d:23:e8:4a:38:4c:79:be:
b4:48:a4:0a:ab:23:4d:b5:b5:ea:74:e7:f5:ef:4e:f6:1e:bf:
34:18:f7:f2:d9:a5:ce:4f:0c:de:df:79:97:9f:28:9b:64:2e:
08:b5:16:8f:49:ca:6d:bb:d0:73:92:42:1d:1f:41:31:d8:02:
68:34:41:74:4a:03:8b:8e:2a:73:12:81:04:55:2f:a3:ec:23:
6f:33:4d:b8:37:07:47:55:87:f4:26:b1:02:3c:cd:b5:8b:39:
4c:59:89:7d:e8:9b:27:3b:6e:9f:11:b3:d5:ba:82:2c:47:26:
4b:d5:89:68:a6:4e:9e:53:54:8a:65:ab:39:a7:c0:57:14:69:
e0:1d:73:f1:11:9f:65:2d:02:8e:2c:0d:54:51:14:5b:83:43:
60:88:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:40 2025 by rpki-client