Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C5F5E52C34711EF95060D65762E951A.roa
File: 6C5F5E52C34711EF95060D65762E951A.roa (raw, json)
Hash identifier: +saP3PbUaI2SrQXbGfj/C7Tx1INOnlenCPuMtFZBxnk=
Subject key identifier: 25:D0:41:2C:FA:6B:03:B6:B4:18:36:32:92:27:04:36:99:F4:69:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C5F5E52C34711EF95060D65762E951A.roa
Signing time: Thu 26 Dec 2024 05:08:20 +0000
ROA not before: Thu 26 Dec 2024 05:08:16 +0000
ROA not after: Wed 10 Dec 2025 05:08:16 +0000
asID: 984
IP address blocks: 156.245.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60437 (0xec15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 05:08:16 2024 GMT
Not After : Dec 10 05:08:16 2025 GMT
Subject: CN=676ce4c4-52a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:24:5a:0f:db:0d:ce:38:63:09:de:39:03:
bd:b4:e1:fb:02:8a:b5:da:cc:8a:37:97:e4:1b:7d:
9b:e4:11:af:4f:ed:a8:23:16:1f:59:3b:82:5a:9d:
a4:27:25:9f:8c:0a:a9:97:9c:41:af:9f:af:0d:f3:
32:2f:9f:5b:d7:cf:69:29:ae:aa:7c:e3:51:38:02:
22:2b:e7:54:45:f7:c1:c8:f2:25:71:86:22:26:57:
a9:99:0b:f7:0c:a2:00:38:2d:37:c1:d4:cc:48:6c:
ff:6d:e9:f6:3a:2d:c7:c5:2d:b2:76:01:4f:95:e1:
14:58:81:aa:ca:b2:37:81:eb:7e:12:83:f6:ef:e0:
a3:ac:cc:47:b6:0a:1d:30:8a:b2:8d:6f:ec:6b:46:
97:b9:5a:2e:29:d6:bf:d3:e0:cb:ea:8c:c4:b8:9d:
93:ad:a0:b7:82:50:09:32:39:a6:5e:77:b3:a3:a3:
26:f0:3c:a1:d1:da:3b:46:8d:3e:ca:6e:5e:6c:32:
1f:69:ff:ab:1e:d3:02:5e:45:31:b8:c0:fd:69:39:
b7:75:52:7a:71:f4:3a:e9:cf:db:75:69:47:61:e2:
76:8f:36:ac:63:d0:f8:f6:ae:8c:e2:a4:8c:b1:e1:
1d:6d:eb:3b:4e:c9:03:00:f0:1d:85:a3:93:ed:e8:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:41:2C:FA:6B:03:B6:B4:18:36:32:92:27:04:36:99:F4:69:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C5F5E52C34711EF95060D65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
95:de:b8:bd:9b:1a:1f:6d:88:70:62:40:00:1c:3f:a4:50:98:
03:33:47:ef:ae:03:31:e1:db:83:a8:11:d1:f1:e9:d1:15:58:
6e:f2:e7:cf:a2:dc:30:6f:88:aa:3a:07:9d:d2:d0:c1:dd:78:
3f:8a:fb:a3:a5:7b:5c:c5:79:da:d0:ef:82:ba:8a:5f:de:99:
68:da:dc:d5:11:95:2d:fa:7a:a2:69:a1:d8:07:56:da:5d:a1:
fc:00:6c:24:17:e5:26:9c:5a:36:76:94:97:98:6a:ea:98:7f:
bd:58:05:08:5b:c9:ef:a3:a4:46:10:a2:b7:e1:f7:8a:55:eb:
82:f6:63:2e:07:14:76:a2:52:c4:21:d6:72:56:0d:98:ce:cb:
92:e8:d1:b9:9c:ec:bc:3f:88:7e:36:3c:12:78:32:f6:87:9c:
a0:14:1d:d4:f6:fe:8a:23:af:bc:34:23:e3:1d:37:6e:c1:58:
5f:73:b7:c0:2c:58:94:bb:ba:04:e3:0b:46:99:1c:ca:28:d2:
4c:09:02:96:1d:9b:55:62:56:3f:39:34:b1:69:d5:10:48:ee:
74:e3:52:74:9d:d9:2f:d5:1c:6c:ee:af:cf:85:10:23:93:2d:
05:ca:23:d7:0e:29:75:4f:29:d2:90:f6:b0:ea:ec:40:37:38:
0d:4d:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:21 2025 by rpki-client