Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D3B5962CC2911EFABA2C853762E951A.roa
File: 6D3B5962CC2911EFABA2C853762E951A.roa (raw, json)
Hash identifier: bjElmxl6iXRKaqiaBU8hyY3jLCfJw0YZQcAhlwVIz8M=
Subject key identifier: 3C:1E:B4:A1:6C:40:45:D9:2F:6E:6D:15:D5:F1:01:D5:BA:DD:2E:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D3B5962CC2911EFABA2C853762E951A.roa
Signing time: Mon 06 Jan 2025 12:26:17 +0000
ROA not before: Mon 06 Jan 2025 12:26:13 +0000
ROA not after: Sat 08 Feb 2025 12:26:13 +0000
asID: 39600
IP address blocks: 156.237.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63717 (0xf8e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 12:26:13 2025 GMT
Not After : Feb 8 12:26:13 2025 GMT
Subject: CN=677bcbe9-8ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ac:13:e4:19:be:71:8d:1f:e2:aa:1a:7f:ec:
19:3f:0a:3b:d1:7e:49:e2:97:1e:a7:54:42:4e:9b:
ae:a4:b9:14:d0:f8:e2:c9:35:68:25:66:ba:41:a3:
31:25:bf:ac:3f:7b:c8:b9:83:2e:56:30:06:71:09:
d7:5e:4d:7d:1a:56:ca:0a:1e:26:56:9f:db:a9:8c:
30:f3:78:2c:d3:14:1f:25:26:0f:a1:58:90:52:f2:
d8:ed:15:2d:a0:8e:3d:1a:71:53:ef:78:a3:da:7d:
45:06:c4:da:64:f8:46:d4:21:cc:fa:d9:55:22:30:
78:4b:3e:5e:c4:08:69:5b:b9:ed:9f:a6:9c:d0:df:
18:eb:8c:e7:3c:b1:81:12:93:e9:f4:22:87:66:bb:
96:76:ec:4e:03:8f:f1:5c:4d:3c:f8:d5:87:31:6a:
5b:97:25:af:7c:1a:43:7f:dc:2d:e5:96:aa:05:63:
b5:2d:97:83:c8:07:3c:3f:65:e2:44:9b:b2:79:35:
1c:05:84:c7:29:cd:fb:50:c3:05:94:9d:db:f1:97:
e9:9f:6b:d1:46:d1:7c:1e:ec:95:ca:bf:34:f4:c8:
42:a3:1a:89:fe:93:a3:eb:21:db:80:45:30:8a:73:
cd:ac:b6:a8:3a:d4:ed:63:a5:2c:97:90:86:6b:83:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1E:B4:A1:6C:40:45:D9:2F:6E:6D:15:D5:F1:01:D5:BA:DD:2E:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D3B5962CC2911EFABA2C853762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.120.0/22
Signature Algorithm: sha256WithRSAEncryption
24:55:16:13:d0:ef:65:a4:10:c4:4c:73:f9:b7:15:d5:24:0e:
ea:c7:d5:e9:e4:ac:36:3c:9e:52:2b:ed:17:9c:01:29:32:ed:
9c:c4:ca:0a:d4:ba:8e:38:04:fa:d8:7e:38:83:cc:87:ae:bd:
8f:17:1a:bd:32:7c:5b:9b:d0:6e:da:60:47:a4:e4:0c:78:72:
30:84:bd:8f:61:1a:2e:b9:7f:89:da:5a:f4:70:1b:6f:84:53:
ab:da:bf:98:4e:78:3a:20:3b:e2:73:6b:ed:0d:f4:48:5b:54:
39:17:c8:4b:99:cf:da:22:a6:4b:62:6b:a7:9a:fc:5a:83:8a:
52:eb:cc:89:72:77:cc:79:65:11:33:2e:45:62:35:23:8b:98:
7f:dd:7e:8d:df:96:f5:9a:ed:6d:bd:21:82:27:ed:e3:d5:b3:
52:41:95:8f:54:fe:5e:ca:6b:ec:f0:0d:9f:e8:7b:b5:63:f9:
74:db:f7:4c:24:23:5a:83:42:bb:0c:35:54:33:a9:0a:cf:50:
ee:d9:de:d8:d2:ea:24:aa:ca:71:3a:89:15:8f:53:a6:b6:37:
de:42:35:23:a5:55:a2:c7:1e:38:69:07:c3:c6:76:a1:f2:ef:
ed:ea:54:de:77:1c:a7:26:9c:ed:9f:4b:6d:d6:e2:69:d3:26:
dd:58:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:18 2025 by rpki-client