Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C10B69EBEAB11EF8D0872B4762E951A.roa
File: 6C10B69EBEAB11EF8D0872B4762E951A.roa (raw, json)
Hash identifier: o0bNPT805f9oES8kDRtJEFy/0emNVo72MiJ3h3BywTI=
Subject key identifier: 5B:E7:4D:BB:5A:44:12:9E:60:85:A9:47:56:02:8A:00:59:DD:A4:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E71B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C10B69EBEAB11EF8D0872B4762E951A.roa
Signing time: Fri 20 Dec 2024 08:21:33 +0000
ROA not before: Fri 20 Dec 2024 08:21:30 +0000
ROA not after: Sun 23 Mar 2025 08:21:30 +0000
asID: 328608
IP address blocks: 156.229.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59163 (0xe71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:21:30 2024 GMT
Not After : Mar 23 08:21:30 2025 GMT
Subject: CN=6765290d-9f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:d2:5c:65:b6:fb:d7:6e:d0:e7:71:31:93:
7a:04:31:29:cb:52:a2:8c:56:3a:b7:27:4d:ad:a4:
6e:8f:88:8d:22:99:89:da:96:b1:e4:d9:5a:64:bd:
5b:52:29:42:89:a0:a4:95:27:dc:78:fe:0d:79:f6:
37:df:30:0f:b7:ea:28:aa:f7:fb:84:f2:9e:34:3a:
b5:41:c8:6b:de:cd:6b:65:df:94:34:54:ee:b1:2d:
fd:ad:62:1c:02:bc:84:34:20:b7:cc:6b:45:d1:77:
c5:9a:29:66:a8:58:a3:e9:0c:c0:a5:be:52:5d:eb:
c5:86:41:5e:af:7e:52:c9:4a:2d:04:e5:f4:6a:ce:
08:00:5c:d3:98:5b:5c:da:6f:f0:ed:a2:30:4b:af:
3b:95:a2:eb:b8:9f:0f:49:cd:4a:95:12:04:aa:db:
81:49:15:8d:49:04:eb:fb:d5:44:90:b8:aa:4a:02:
97:35:09:87:77:b6:a1:24:e4:e0:58:97:4a:a7:2e:
8a:4a:7c:d2:f9:48:80:ac:2e:b4:d6:48:94:2c:56:
71:c7:8c:b2:18:f9:39:6f:c1:4a:f2:ec:14:83:a1:
3d:73:a6:08:d6:5b:81:99:79:db:63:64:92:d4:f1:
dd:5f:e9:3a:9a:d7:39:b4:f9:c3:ad:70:4d:ce:e2:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E7:4D:BB:5A:44:12:9E:60:85:A9:47:56:02:8A:00:59:DD:A4:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C10B69EBEAB11EF8D0872B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:a8:5e:5f:a4:37:d7:63:27:de:76:f5:21:d0:2f:a0:f8:ce:
bc:00:fe:51:4c:7e:2e:e7:d3:fb:df:54:3c:5e:ec:c8:fb:8a:
3f:98:ad:05:09:80:a4:fa:95:f9:ee:38:bd:d2:7c:c7:bc:b8:
a1:fc:01:3e:81:97:f9:ec:76:b5:e7:27:d5:eb:74:e9:62:70:
6e:4e:ba:78:8d:27:3e:e3:e7:6e:37:04:b6:15:c6:94:b6:dc:
5c:f6:0c:dd:2c:5b:5b:67:e8:d3:13:b3:98:8f:58:8e:7c:46:
2c:6d:e0:63:df:ba:53:75:1c:50:eb:35:ba:39:8f:be:c3:3e:
13:41:00:69:94:13:ea:8a:dc:bc:b2:26:48:1e:0b:95:32:01:
96:8a:e5:73:27:27:1c:2d:d5:b8:14:4e:4f:a6:73:a1:f8:23:
fb:0e:8d:4f:0c:c3:a6:16:93:6f:fe:bb:07:c4:2d:36:92:29:
2c:0f:59:36:fe:4e:06:e9:f1:06:f2:35:28:8a:a3:5b:5e:fc:
20:e5:dd:b6:13:d4:81:35:cc:18:9c:bd:7c:14:14:c1:87:86:
5d:18:f5:b1:e9:1a:85:1e:28:2e:0d:97:79:e2:49:2a:e6:b3:
33:00:76:4d:86:7c:aa:48:75:9a:0b:76:60:8a:b9:f6:2b:94:
7d:6e:17:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:44 2025 by rpki-client