Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6896EDDECD1111EF806F4396762E951A.roa
File: 6896EDDECD1111EF806F4396762E951A.roa (raw, json)
Hash identifier: QGgXWp+smTOam1/eyrpAeoVKoksLvgCrmXHDTZyjwH0=
Subject key identifier: 4F:7B:78:90:CD:17:50:2F:36:7C:83:88:91:A2:A0:EA:51:D4:5A:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6896EDDECD1111EF806F4396762E951A.roa
Signing time: Tue 07 Jan 2025 16:06:52 +0000
ROA not before: Tue 07 Jan 2025 16:06:49 +0000
ROA not after: Mon 13 Dec 2027 16:06:49 +0000
asID: 17561
IP address blocks: 156.240.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64757 (0xfcf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 16:06:49 2025 GMT
Not After : Dec 13 16:06:49 2027 GMT
Subject: CN=677d511c-d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:53:28:33:ca:c4:97:a2:b1:2d:a5:87:d4:05:
61:d5:e5:0a:af:92:ff:94:80:30:2a:1e:59:85:97:
e7:4d:35:14:e8:1d:1d:4b:da:76:8a:00:2f:a6:a0:
54:9d:cf:8e:ab:93:7d:3b:ee:b4:8f:82:cc:46:39:
29:0e:e7:61:c4:fb:ca:df:02:9d:42:cc:81:c4:d8:
fa:c3:ef:d3:55:46:d8:3c:87:7d:a0:78:b9:ec:f9:
33:27:cf:4c:c2:6f:45:a7:04:e7:b6:8c:ba:d5:03:
76:c9:59:ab:2f:51:bc:a0:1e:5d:30:56:e8:79:96:
aa:32:ac:b6:8b:95:cc:6c:1f:c8:5f:cf:b0:6e:fb:
a8:aa:0d:94:76:9d:3f:48:e8:d6:89:c6:de:ae:24:
95:fa:da:6a:9c:6f:3c:2b:1c:65:01:78:1e:16:28:
36:6f:5b:d1:0b:a4:23:dc:87:56:f8:bc:16:62:15:
8a:4c:dd:bc:70:85:39:11:92:48:07:77:07:f5:b6:
a8:e2:61:f5:58:84:87:15:53:79:9b:f5:30:1e:a4:
9f:a3:02:f9:16:e6:97:6d:47:1c:e2:8c:10:9a:8f:
a1:53:51:6a:71:44:ff:3b:15:32:a9:3b:23:b3:f3:
59:56:ac:3b:26:e7:8a:cd:c5:b4:58:92:23:b5:f9:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:78:90:CD:17:50:2F:36:7C:83:88:91:A2:A0:EA:51:D4:5A:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6896EDDECD1111EF806F4396762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.57.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:18:60:d9:48:39:cf:82:c7:84:80:91:80:c8:49:4f:40:77:
56:37:ac:00:79:4a:b0:10:04:50:e7:20:e0:34:92:10:0a:ae:
3d:d1:1b:9a:c9:3a:77:18:95:80:a6:15:5c:f3:8e:25:68:e0:
e9:18:43:04:94:bb:76:34:e2:a8:3c:1f:59:a6:44:90:98:7c:
f3:3c:f1:d2:98:a8:99:87:83:88:96:29:58:2b:60:5a:1a:5d:
37:77:12:03:5b:ff:1a:f5:d4:83:60:e4:b2:91:a1:51:1a:48:
3f:85:27:6e:fa:2e:41:78:80:f4:81:42:4c:cb:5e:69:e0:72:
98:6c:2c:ad:c7:27:bc:f4:aa:30:0d:bf:1d:c3:a1:ef:a1:a7:
39:a2:9f:df:f8:0d:e8:81:17:9f:26:ed:c0:71:eb:ab:2c:17:
5f:67:e5:c0:c6:ef:a5:07:66:9d:f4:3f:ce:44:83:99:5a:05:
0c:4a:8f:a9:1d:39:ac:03:f6:79:f4:c7:c9:2e:47:bb:56:91:
7a:67:6f:fb:e3:eb:f7:34:6e:ba:17:81:fb:17:56:94:ed:14:
07:53:ab:a0:37:8f:05:f9:2e:a0:4a:db:5b:38:bc:31:a4:ed:
15:21:a9:da:ce:b7:69:49:65:3f:aa:32:36:bc:c2:b2:44:23:
5b:56:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:05 2025 by rpki-client