Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DC60AA6CDA211EFB1BE45BE762E951A.roa
File: 6DC60AA6CDA211EFB1BE45BE762E951A.roa (raw, json)
Hash identifier: ZHlZLGliXNf5Z70Cw0l64fhX1wAsIK7wxfulpJMFmas=
Subject key identifier: DA:83:2C:8A:DD:06:46:A1:40:23:B7:1B:20:FF:9F:F5:F2:07:C3:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DC60AA6CDA211EFB1BE45BE762E951A.roa
Signing time: Wed 08 Jan 2025 09:24:58 +0000
ROA not before: Wed 08 Jan 2025 09:24:55 +0000
ROA not after: Mon 13 Dec 2027 09:24:55 +0000
asID: 17561
IP address blocks: 156.253.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65777 (0x100f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:24:55 2025 GMT
Not After : Dec 13 09:24:55 2027 GMT
Subject: CN=677e446a-ee6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:1d:43:67:2c:8c:0f:18:9b:79:4c:7f:c3:
6e:88:ab:b3:32:74:49:1d:da:48:b6:66:61:46:6b:
0f:b4:5b:41:89:99:b7:84:17:3c:08:1e:0d:b8:27:
51:7b:46:ed:42:0a:84:23:76:8b:36:8a:dd:7e:19:
68:5e:a4:43:e3:46:5f:f0:e8:ff:be:c4:93:cd:7b:
a7:99:1f:2f:17:f8:47:19:c0:3a:76:d3:82:41:5f:
07:37:f1:a5:64:a7:fb:34:5e:e1:7f:23:f9:d4:e8:
23:b0:dd:7b:1d:68:7b:70:85:7d:69:83:b2:3e:bc:
d4:0d:f0:5f:a4:28:d0:75:27:46:6c:3a:bc:cc:02:
79:40:8d:11:ba:14:fb:9b:fe:17:05:be:1b:f9:a7:
5e:91:91:19:a0:5a:df:e4:f0:49:c4:a2:e5:84:52:
70:d5:a7:b1:06:fb:7c:26:12:b4:0d:09:65:f3:5d:
72:a3:a6:c6:96:47:d6:f6:19:e1:a8:aa:a4:2a:f0:
ec:09:f2:39:fb:ff:65:1c:e4:8b:d7:b0:c0:cc:70:
ce:e2:e6:06:4b:33:1f:41:bc:02:32:dc:04:00:aa:
bf:52:49:31:70:08:6d:f7:b8:ba:8b:04:b9:db:91:
ee:6e:6b:83:e0:b7:de:2c:28:0b:b5:39:fb:78:40:
d5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:83:2C:8A:DD:06:46:A1:40:23:B7:1B:20:FF:9F:F5:F2:07:C3:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DC60AA6CDA211EFB1BE45BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:45:23:24:bc:db:32:9a:28:8c:0f:a8:bb:ce:ae:7f:19:97:
85:42:25:ab:30:51:2d:9c:9d:69:18:55:b1:86:a3:48:ef:70:
da:f9:a2:6d:a7:d7:28:d4:77:10:eb:04:00:f4:59:7d:7f:bc:
f5:24:c8:b4:80:aa:d8:75:bd:45:05:d9:50:11:fe:ee:4d:85:
5c:78:2a:26:60:36:bb:fe:2f:76:78:db:93:b9:c2:e2:7c:05:
ee:78:82:78:c8:4e:4b:ce:26:6a:10:5b:7f:00:d0:c1:56:4c:
32:dd:00:d4:ce:8f:88:8a:9a:a6:37:51:d7:ff:28:94:53:ff:
7a:eb:06:a8:a2:2b:18:bb:24:e7:d2:1d:09:65:5b:4d:c1:6e:
3c:33:f0:2a:fb:c2:a2:ee:eb:38:e0:e3:b8:ef:fc:3d:8b:a8:
f0:9c:fc:7b:9a:3f:45:b3:13:83:e5:e7:e8:89:ac:59:0a:22:
53:e5:1b:2e:80:31:17:da:41:e7:1e:62:78:a0:2c:f9:e1:c3:
19:f5:56:1d:52:28:db:ea:46:1f:87:a9:ec:ba:9d:06:e3:ae:
5e:89:66:93:fa:f4:15:91:83:73:db:b4:de:03:76:f7:01:0e:
48:1c:9d:57:70:7f:02:b1:e5:c2:37:c9:0c:2a:0e:2c:d2:3d:
f8:33:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:41 2025 by rpki-client