Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B6E520CE4211EF92F96142762E951A.roa
File: 69B6E520CE4211EF92F96142762E951A.roa (raw, json)
Hash identifier: SFpJ1AItW5+kE0QeGgbrSiCh/FVYemVwVCgzUnpmMs4=
Subject key identifier: CA:68:72:6F:72:FB:3B:61:EA:F5:F7:BF:06:1A:81:51:E9:30:8E:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01027B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B6E520CE4211EF92F96142762E951A.roa
Signing time: Thu 09 Jan 2025 04:30:11 +0000
ROA not before: Thu 09 Jan 2025 04:30:07 +0000
ROA not after: Fri 09 Jan 2026 04:30:07 +0000
asID: 17561
IP address blocks: 156.245.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66171 (0x1027b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 04:30:07 2025 GMT
Not After : Jan 9 04:30:07 2026 GMT
Subject: CN=677f50d3-3a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8b:e3:e1:ba:f1:20:3d:0e:7b:2a:ce:43:7d:
b4:3d:30:0e:ee:df:5d:20:03:f9:b5:87:ad:73:03:
60:5c:e6:3f:ae:9d:89:aa:04:e1:6a:8b:d7:84:2e:
bb:d5:cd:d9:85:82:d0:8e:1e:68:dc:8d:22:c4:76:
ce:bd:64:c5:78:36:e2:e4:bd:ca:0e:79:55:7f:04:
38:6b:67:52:68:ab:ec:44:b2:81:46:40:40:c4:1a:
a7:aa:7e:27:c7:02:3d:af:c6:b9:52:f6:7f:fc:48:
9a:fa:cd:24:ff:ce:2c:20:ca:65:19:30:f7:da:58:
29:06:9b:85:77:86:0e:1d:e9:1a:25:e9:e4:42:f9:
3b:68:62:fd:c5:08:33:7e:8c:65:6b:36:81:31:29:
9d:f5:b0:1a:ea:44:3c:aa:43:15:01:06:61:50:7f:
73:0f:c4:e6:c4:66:2e:bd:fc:07:c5:2e:2c:05:12:
3d:d3:a3:82:45:e3:15:1a:a1:ff:15:1b:f4:eb:ac:
7e:fb:7f:1f:ff:1a:59:37:29:a7:ad:d8:ad:ad:07:
ab:b8:31:fb:68:f1:85:ba:fb:2b:de:6b:9f:5d:15:
7a:d9:3e:63:30:c7:6e:2e:f3:32:db:53:fc:f2:04:
2c:2f:c4:34:bb:0b:82:70:3a:0e:30:bb:0e:fb:59:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:68:72:6F:72:FB:3B:61:EA:F5:F7:BF:06:1A:81:51:E9:30:8E:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B6E520CE4211EF92F96142762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:7b:6f:9a:60:55:24:08:80:92:4e:19:bf:64:e8:fd:ce:a0:
44:fc:c1:bf:9f:c8:07:e0:43:5d:18:7a:5c:e4:c9:b5:a6:14:
b3:d6:bd:79:15:d4:cb:de:61:e1:0b:52:36:cd:70:7c:19:63:
78:22:04:c9:2e:40:08:c3:85:1b:57:8b:ef:ef:c9:24:20:1c:
d7:75:42:74:9b:48:33:99:df:2f:f1:0a:29:2a:a2:c8:de:b6:
5b:cf:96:f8:64:f2:a4:22:a2:31:7d:ef:e9:94:5e:d5:13:c1:
47:cc:fd:ec:00:6f:42:ac:b0:de:fb:9e:44:21:3d:79:75:0e:
d1:46:bc:57:9d:a8:3f:bd:7d:3a:26:d8:f6:e8:ec:8f:b6:0d:
3c:9e:a2:0d:a2:51:ef:e6:7f:94:6c:9d:b7:85:26:15:3d:4c:
fc:75:e8:70:d3:37:78:6f:f2:72:e4:68:30:6d:69:b8:02:43:
80:35:b4:f4:65:05:b4:60:6d:98:e5:3c:49:f8:4d:4f:62:90:
7b:80:02:b7:cc:85:68:fb:b1:94:8d:ad:73:4f:e4:54:f8:62:
c8:29:4e:a2:f2:3b:bb:17:d5:a3:83:ea:b1:76:27:ae:96:78:
34:99:77:bb:ad:e2:51:17:a0:df:b1:9d:a9:74:b7:99:33:47:
ae:cf:d2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:49 2025 by rpki-client