Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AF3493ACCC911EFB4B3D350762E951A.roa
File: 6AF3493ACCC911EFB4B3D350762E951A.roa (raw, json)
Hash identifier: hXMSx+bctmJ9tZY8kJZ5t1q5xgvKwdz2/DUcocJFjjw=
Subject key identifier: 10:26:B4:6A:D5:46:AF:9C:30:39:93:E1:3C:A9:0C:E5:6C:8E:A0:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AF3493ACCC911EFB4B3D350762E951A.roa
Signing time: Tue 07 Jan 2025 07:31:33 +0000
ROA not before: Tue 07 Jan 2025 07:31:29 +0000
ROA not after: Sat 13 Dec 2025 07:31:29 +0000
asID: 984
IP address blocks: 156.233.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64108 (0xfa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 07:31:29 2025 GMT
Not After : Dec 13 07:31:29 2025 GMT
Subject: CN=677cd855-e51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:38:b3:03:e7:19:9e:4e:44:f9:d0:39:fc:4f:
96:36:dd:a6:ec:e7:56:ad:1b:6f:a2:32:bb:32:96:
5c:af:5e:c1:f6:c8:66:30:b3:91:52:ba:97:f9:70:
f7:ee:eb:f2:f9:15:3b:a5:3c:ba:38:6e:52:5d:e6:
f1:54:86:95:9b:8f:3b:22:43:e8:fb:67:62:ea:03:
b8:1c:19:98:28:1f:92:1a:1d:82:f1:cc:66:7e:54:
22:43:f7:32:b2:c1:77:af:8d:10:5e:8d:4f:c9:0e:
7a:8d:f4:5b:11:59:ef:d3:b5:65:c4:34:9d:36:c8:
83:97:46:2c:c3:de:ce:4a:9c:25:9d:23:8e:40:49:
b8:a8:f6:95:48:b1:95:eb:85:7b:26:d3:44:61:70:
03:33:9d:f7:41:38:9d:58:e9:1b:85:30:8d:e5:27:
dd:1c:86:00:5e:15:0b:85:1e:f0:44:a8:3a:9f:27:
db:6d:08:36:af:87:00:b6:91:77:d2:9b:ea:d0:02:
bd:be:ec:a3:06:a7:c1:43:da:d1:5c:dc:40:79:d3:
04:c2:12:a7:b1:43:d8:50:82:ca:e2:99:d4:1e:77:
b8:93:8b:bb:4d:47:85:88:59:c1:33:0d:f3:7a:58:
b9:88:22:88:5e:01:8b:fe:b5:c3:b2:13:8e:0c:f6:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:26:B4:6A:D5:46:AF:9C:30:39:93:E1:3C:A9:0C:E5:6C:8E:A0:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AF3493ACCC911EFB4B3D350762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.81.0/24
Signature Algorithm: sha256WithRSAEncryption
06:95:2e:f6:56:2f:b7:64:fd:bd:8e:aa:38:8d:43:8a:49:dd:
f0:0a:d1:2f:3b:d6:a1:03:96:d6:f8:be:ae:14:5f:45:24:a0:
7d:60:b5:2f:92:6b:60:e2:0f:43:54:38:40:48:79:41:d4:79:
ff:f1:7e:2f:60:2d:99:7c:b8:14:b7:a5:a3:b9:81:0c:ea:f7:
4e:2c:9b:73:2e:46:0b:8f:c4:a6:32:41:5a:ea:a4:b0:0e:20:
0f:a9:f7:2b:5f:9c:87:f9:fe:0c:cd:ea:79:14:39:38:38:6d:
c0:02:7c:4a:e7:20:80:b6:02:7d:71:c8:54:ab:6d:16:a3:24:
c7:68:e3:58:a2:9d:24:ae:30:8c:1f:19:28:2d:0c:a5:10:e8:
2f:b8:ad:71:b3:da:1e:a8:c8:87:1d:02:53:c7:4d:69:2c:3e:
46:41:9b:7e:f3:30:dc:8a:0f:c4:31:55:8b:9e:23:5f:a6:d3:
4a:4f:31:31:91:5a:31:38:80:53:6e:fb:2a:ad:a2:a7:c0:c9:
d3:17:36:c8:d3:75:1d:fe:70:14:7f:cb:ae:18:be:c7:69:a5:
57:51:ba:a5:65:46:9f:28:b3:7c:6a:ee:b1:1b:90:f8:21:da:
17:ba:81:e2:12:10:30:2a:1c:27:38:6f:a0:f5:4a:f5:9c:fe:
3c:21:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:01 2025 by rpki-client