Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B01D37CD24311EFA66CB496762E951A.roa
File: 6B01D37CD24311EFA66CB496762E951A.roa (raw, json)
Hash identifier: JS9tmEuZPV2FJSZxr9jS9BYHuwr4hJM6lUo/TuQltls=
Subject key identifier: F4:66:53:3D:2A:EA:9D:B3:D5:8C:08:A2:27:49:BD:2D:B8:E7:B2:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B01D37CD24311EFA66CB496762E951A.roa
Signing time: Tue 14 Jan 2025 06:47:27 +0000
ROA not before: Tue 14 Jan 2025 06:47:24 +0000
ROA not after: Thu 15 May 2025 06:47:24 +0000
asID: 55020
IP address blocks: 156.224.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67262 (0x106be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 06:47:24 2025 GMT
Not After : May 15 06:47:24 2025 GMT
Subject: CN=6786087f-43ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:b2:48:f8:72:34:2c:49:03:6d:16:bd:18:
4a:08:8f:ce:f5:cd:0d:af:43:56:97:0a:35:fd:18:
f3:87:1e:e6:7c:87:62:09:6c:41:8d:b2:aa:5b:70:
60:30:52:5f:f0:94:8e:89:7d:e7:40:59:cd:20:34:
7a:28:df:0b:26:e0:08:3b:25:5d:5c:49:df:a4:92:
db:01:02:52:8d:6e:df:b2:45:cb:74:df:04:a5:ce:
a3:2b:c7:1f:94:80:30:e0:b5:11:e2:cb:f9:dd:8f:
38:bb:b9:01:86:0f:2c:7f:1c:ae:e4:7a:c0:b2:20:
4f:70:6d:84:8e:f0:15:94:4e:a1:1b:30:76:b3:b4:
6c:80:5a:e9:20:9b:96:81:33:ce:5f:e6:d0:74:f9:
a5:48:01:0b:6f:e6:10:b7:06:d4:7b:85:9b:d2:82:
8c:57:d4:66:8c:0a:69:36:aa:78:ed:9f:92:a3:c6:
06:5d:27:b7:2c:f2:68:58:ad:62:ae:65:ea:b1:01:
98:26:51:54:5b:74:b9:1e:d4:7a:b5:7c:bd:87:01:
2a:da:02:51:64:9d:4e:5b:53:e2:5b:6a:fd:3e:94:
73:07:22:fe:91:f8:5a:37:a4:89:f5:d7:da:f0:de:
db:d8:f8:c8:62:27:77:ed:61:69:42:64:52:a9:16:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:66:53:3D:2A:EA:9D:B3:D5:8C:08:A2:27:49:BD:2D:B8:E7:B2:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B01D37CD24311EFA66CB496762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.18.0/23
Signature Algorithm: sha256WithRSAEncryption
99:10:10:ba:5f:c9:88:b4:ec:56:39:06:d7:1a:8b:ed:a5:03:
1e:43:13:31:9c:a1:19:91:08:e3:27:28:81:d3:ee:9c:d9:45:
b0:e2:7f:b3:b1:60:db:b4:11:bf:d7:60:a1:f8:db:17:a4:01:
90:e6:66:0d:00:7b:58:09:8a:33:52:2d:93:ba:81:d3:33:bf:
02:cc:9e:bd:24:ae:e6:4a:75:c8:d3:a3:31:7a:2b:f3:2a:6f:
eb:cf:85:6b:32:30:42:25:11:b3:02:78:c3:91:92:53:ef:44:
eb:a7:c2:da:02:ba:8e:1c:c4:b8:3f:e3:5e:fd:9f:19:bd:f9:
5a:fa:e0:4b:fb:09:c3:f0:82:e5:41:2f:3b:24:49:25:32:63:
77:c1:9d:80:35:2a:7c:f9:c5:09:67:a1:b4:4f:c5:c9:9b:f2:
d3:3a:fb:be:77:fe:4d:eb:c6:91:99:8e:d2:0f:55:2d:e3:2a:
4b:62:78:54:ea:01:51:e2:c5:96:4e:44:b0:5f:cd:10:42:c9:
12:05:91:df:5b:e3:0f:ef:96:0f:d9:9e:96:41:8b:10:01:b4:
ef:a2:29:76:39:e7:cc:27:84:f1:be:85:fa:b6:11:a4:31:30:
e2:07:f6:64:4c:0f:25:ac:aa:58:31:24:3c:61:59:16:9c:5b:
b8:3c:4a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:03 2025 by rpki-client