Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DB46938D24611EFAA49C6A9762E951A.roa
File: 6DB46938D24611EFAA49C6A9762E951A.roa (raw, json)
Hash identifier: mSdikXtC7NgLSogHHS3ECabpkr2NFUrhf79BCYyGAVU=
Subject key identifier: 4E:7A:8E:6E:3E:48:B3:5C:10:DE:C8:89:B9:34:D6:BF:AF:22:85:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DB46938D24611EFAA49C6A9762E951A.roa
Signing time: Tue 14 Jan 2025 07:09:00 +0000
ROA not before: Tue 14 Jan 2025 07:08:57 +0000
ROA not after: Tue 18 Feb 2025 07:08:57 +0000
asID: 214413
IP address blocks: 156.255.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67284 (0x106d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 07:08:57 2025 GMT
Not After : Feb 18 07:08:57 2025 GMT
Subject: CN=67860d8c-d76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:15:4d:1c:fd:bf:5f:6f:3a:e7:28:f2:9c:
1e:51:5b:67:8e:05:24:04:90:21:2b:8d:16:0a:b5:
0b:7f:ca:3d:68:db:0d:b3:5b:bb:98:f0:a7:01:5e:
07:c4:65:0f:c7:0f:bd:3f:a2:47:58:13:5b:70:15:
c4:17:7e:2c:a0:f2:51:91:de:d4:1b:fa:66:3d:a3:
90:dd:e9:7d:24:a4:7a:ce:8a:88:2f:f6:04:08:c6:
c3:e1:63:43:d8:9b:46:85:3d:94:c1:0f:9b:2b:9d:
16:56:8b:21:0f:58:97:15:d1:ac:18:05:ce:32:8a:
ce:bf:d3:11:e7:f5:c4:fe:71:2f:20:3a:ce:9b:84:
e1:fb:d2:db:dc:ee:51:2e:6e:e2:e9:c8:f9:70:6a:
90:38:0f:7f:0e:ba:ce:ac:33:88:04:d6:b4:b3:d1:
a8:f6:05:9d:b3:09:a4:99:8b:c1:e0:9e:cf:db:85:
b9:f0:86:25:a6:47:19:a3:7d:0a:bf:c2:2c:13:ac:
c9:97:5e:1a:9b:5d:63:1d:73:24:31:da:c3:03:c3:
37:f9:39:08:94:ec:94:13:c0:06:0d:a2:d7:19:c0:
83:f7:55:fc:d2:42:24:b3:dd:3e:cd:ca:91:8a:c1:
bb:e8:1e:2c:9a:c2:e9:cc:3a:3a:1e:16:b4:82:44:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:8E:6E:3E:48:B3:5C:10:DE:C8:89:B9:34:D6:BF:AF:22:85:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DB46938D24611EFAA49C6A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.59.0/24
Signature Algorithm: sha256WithRSAEncryption
83:76:58:43:ee:b0:2e:9a:4a:e4:1b:12:d5:45:9b:ec:45:2a:
32:3a:aa:49:ae:d6:09:23:53:bb:df:5f:0c:b9:f1:5d:a2:38:
bc:63:ae:63:0d:7e:7c:62:1e:ea:36:35:36:23:ef:fc:7f:fc:
9a:ad:c7:6d:ef:f2:76:dd:9f:58:ae:0d:b0:4b:ee:c7:32:05:
5c:d3:a0:f4:b3:e4:4a:f8:3e:63:a1:f8:d2:5c:b0:c2:9b:7a:
66:ca:91:e8:f3:87:0c:92:62:95:68:82:1e:a6:ae:8d:75:29:
a9:de:35:e7:e6:21:f0:7f:de:85:fd:3c:4a:79:7f:ba:6d:f0:
7f:76:da:ae:3e:d8:fc:52:f9:f5:b7:46:47:4a:77:bc:61:41:
b1:cf:46:93:fe:09:f2:db:4f:4e:ec:4d:d9:5d:d9:54:08:db:
76:02:08:06:38:90:1a:c0:21:74:8b:06:fe:02:4c:97:12:fe:
45:2c:bb:cb:6e:9a:5d:ac:b2:e4:a7:45:9e:ae:02:18:c2:f0:
7e:85:98:2e:f3:0c:1d:84:92:2a:4d:ef:c7:ae:09:57:53:92:
27:b5:bb:a3:91:6a:b3:58:55:28:45:7e:c6:43:26:50:6c:d8:
72:91:d4:de:09:1e:16:ee:b8:dd:7b:4d:67:f0:26:ed:98:a3:
de:ec:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:37 2025 by rpki-client