Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DA3241ACDA611EFBA4C6958762E951A.roa
File: 6DA3241ACDA611EFBA4C6958762E951A.roa (raw, json)
Hash identifier: cJbOhPa+OPz1WSMkvz2iWfcfb0Qzg+n1oIIfVi8POng=
Subject key identifier: 65:3F:E1:D7:7B:6C:1A:F3:37:7F:60:25:7B:5C:04:80:05:76:C1:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01012B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DA3241ACDA611EFBA4C6958762E951A.roa
Signing time: Wed 08 Jan 2025 09:53:36 +0000
ROA not before: Wed 08 Jan 2025 09:53:32 +0000
ROA not after: Sat 13 Dec 2025 09:53:32 +0000
asID: 984
IP address blocks: 156.253.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65835 (0x1012b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:53:32 2025 GMT
Not After : Dec 13 09:53:32 2025 GMT
Subject: CN=677e4b20-e0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:0b:87:80:fb:0d:ab:90:2e:4f:38:ff:11:
d2:00:a4:20:b3:5c:e6:30:1e:0d:bb:b9:93:64:3f:
bb:fd:74:6f:8a:cc:00:2c:3a:90:c8:aa:34:8b:ae:
16:02:dd:92:d2:7b:11:b5:ae:8e:f1:fe:13:3f:0d:
39:1e:b4:9d:b6:68:7c:3d:40:d3:11:a0:a0:4c:29:
93:f8:d2:39:ab:cc:33:20:4e:6b:e0:45:e3:82:dd:
23:3d:2f:dd:c6:f6:42:ae:a5:00:34:89:2c:e2:ef:
c4:90:b0:ee:3b:65:95:02:91:d1:b3:25:40:c8:4e:
4b:e5:96:0b:e9:b1:4a:f1:07:43:df:47:cd:cc:2a:
1b:a1:ee:e9:ea:81:31:cd:85:2d:33:45:24:25:55:
45:ae:73:b2:85:d2:e4:9e:67:26:f4:fd:74:b0:5a:
02:fa:70:59:0c:7a:bd:df:78:d2:b1:2c:be:f9:5c:
08:aa:50:93:61:e5:ec:79:55:e3:f5:94:0c:b3:ba:
aa:ab:3e:54:6b:16:61:de:aa:aa:45:c3:2c:0c:db:
47:3b:14:76:2d:4a:26:b2:d3:5c:b3:0a:20:0a:b0:
02:cd:cf:11:26:db:ae:f0:62:e5:c3:0f:75:96:ed:
89:a3:5a:6b:c9:15:41:b6:6b:76:87:a0:59:75:e5:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3F:E1:D7:7B:6C:1A:F3:37:7F:60:25:7B:5C:04:80:05:76:C1:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DA3241ACDA611EFBA4C6958762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.62.0/24
Signature Algorithm: sha256WithRSAEncryption
04:33:18:7d:4c:c5:3a:a6:98:fb:fa:c7:31:2e:de:56:67:a1:
bf:81:b7:ab:26:a2:0d:54:46:d4:c3:48:77:13:49:58:8d:f6:
f2:39:28:62:5d:e9:6d:7b:14:d8:8e:eb:75:74:7a:4e:de:16:
ac:83:94:79:90:de:65:2b:25:c4:f2:90:be:79:71:79:5e:61:
25:b8:da:85:02:a6:69:b2:d2:81:b5:21:a3:45:ed:d2:6b:db:
d8:a0:0b:64:7d:ad:39:53:d1:74:48:d9:11:24:ff:23:12:bd:
b4:23:cf:ce:b6:f7:14:69:17:a8:6c:77:1d:3f:a9:14:79:73:
54:0e:21:9f:ee:ca:0d:99:44:dd:11:73:92:fd:cf:ab:91:53:
7d:e7:b8:b6:23:47:02:d8:56:96:81:94:2a:80:f0:eb:8b:f6:
d0:29:d3:aa:bf:43:21:4c:97:38:4f:87:79:13:da:69:78:33:
6e:db:ea:11:3b:bf:8d:15:6f:d4:7a:c0:02:82:15:23:e6:03:
7c:93:f9:28:6b:e5:a9:bd:d8:b4:e9:d6:c0:f1:64:a9:34:f3:
49:72:e4:10:03:7c:bf:3e:a9:ac:e9:74:69:f2:45:43:a5:79:
23:23:67:99:4f:97:f4:b3:4e:7c:82:7d:72:bd:fd:14:e1:8c:
3e:f6:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:05 2025 by rpki-client