Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6606DFB8C34611EF851E9D5E762E951A.roa
File: 6606DFB8C34611EF851E9D5E762E951A.roa (raw, json)
Hash identifier: dt2xkqeiZBH9Vx4OV6yY2HnrLrCClDTi9sBwIRGuSNw=
Subject key identifier: 5A:4D:18:43:83:77:C2:0A:E9:BA:1D:EE:A3:F9:4D:B4:E6:E6:83:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6606DFB8C34611EF851E9D5E762E951A.roa
Signing time: Thu 26 Dec 2024 05:01:00 +0000
ROA not before: Thu 26 Dec 2024 05:00:56 +0000
ROA not after: Wed 10 Dec 2025 05:00:56 +0000
asID: 984
IP address blocks: 156.245.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60425 (0xec09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 05:00:56 2024 GMT
Not After : Dec 10 05:00:56 2025 GMT
Subject: CN=676ce30c-824f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ca:91:5d:1f:c7:c5:05:59:4d:5b:c2:81:25:
71:72:e0:17:ef:eb:b9:31:c0:ba:9f:0d:76:21:01:
0c:26:39:1e:3d:59:cf:81:16:18:5e:75:79:a1:29:
b0:95:cc:6b:89:67:bc:bc:9a:e5:70:06:9f:9e:9f:
e5:de:93:26:e1:4e:f5:d8:71:6d:61:57:1e:43:db:
20:cd:a1:8b:1b:cd:a1:af:8f:b6:bd:67:14:cb:40:
e3:a8:59:37:ba:97:8a:40:bc:8c:ac:47:82:b9:1b:
4c:6a:12:1f:d2:58:31:7e:da:1a:66:11:56:e2:85:
be:57:b2:8b:08:ec:e2:a4:e2:de:ce:21:f5:2c:e9:
7b:49:55:18:16:b1:7c:c4:22:e7:61:e1:ec:12:19:
3d:27:ec:03:6e:01:e0:1e:dd:eb:de:90:71:43:52:
86:5a:8f:29:06:96:bc:66:3a:8a:2f:b4:57:3c:9b:
5e:d1:a5:58:60:84:12:69:96:34:c4:b4:09:4f:7b:
1d:f7:1d:45:5a:81:3b:a8:7d:88:b0:d5:dd:35:58:
fc:1e:5d:08:39:fb:9b:a1:46:90:0a:7f:04:57:18:
79:d6:57:bb:bb:42:d5:86:5f:21:ab:25:e3:92:4b:
dc:46:20:d0:69:22:1a:3c:ba:e3:27:2a:80:59:f8:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4D:18:43:83:77:C2:0A:E9:BA:1D:EE:A3:F9:4D:B4:E6:E6:83:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6606DFB8C34611EF851E9D5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.170.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:19:18:b1:51:6e:c1:54:8e:86:5e:0c:4c:01:b0:fe:48:9f:
ac:a5:9c:f6:5a:f7:8c:19:2f:7a:ed:7a:97:70:91:2f:90:15:
d2:bc:92:fd:4d:c8:b5:81:ad:24:7a:b2:65:48:18:ce:69:91:
50:f7:10:76:95:82:d4:c7:45:6e:f2:92:c8:6f:44:f7:ca:8f:
89:86:14:0c:b7:c9:e8:71:8c:fb:05:e5:56:a1:52:78:44:58:
f9:4f:19:5b:cc:91:13:c0:79:72:a9:1d:6b:74:ec:d7:91:47:
83:1d:6b:1d:3c:93:51:a8:ed:a6:71:58:46:ab:17:05:ac:22:
0b:af:ff:c4:e2:cd:ee:f0:a2:06:01:c7:80:96:dd:b7:46:ab:
38:f9:57:fb:ef:7f:c9:cb:d8:02:7a:6c:2b:75:76:89:06:a2:
35:18:cc:15:b6:20:e9:b7:ef:3c:0a:e4:35:d2:a7:40:1c:95:
23:b6:89:ba:d2:ab:0f:99:69:0b:6b:6b:cb:00:0d:7e:48:d8:
68:23:9a:d7:7f:8f:09:25:e9:18:26:21:e9:c8:7c:88:c2:5a:
d0:d2:4c:5b:9b:63:38:dc:cd:8c:f6:63:38:af:32:d4:58:c2:
1c:ff:a3:43:68:33:fe:32:57:6f:1b:ed:dd:39:6f:b0:81:7b:
79:82:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:22 2025 by rpki-client