Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E2AC34EF46511EFB7C23E4C762E951A.roa
File: 6E2AC34EF46511EFB7C23E4C762E951A.roa (raw, json)
Hash identifier: 8By7ophk6yQTTU2+yugT7/6suoO7tWK31zWMrRoW9gQ=
Subject key identifier: AC:B9:38:61:BE:2C:05:CF:DE:2F:4D:66:9C:58:33:8C:54:1D:34:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013573
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E2AC34EF46511EFB7C23E4C762E951A.roa
Signing time: Wed 26 Feb 2025 17:16:35 +0000
ROA not before: Wed 26 Feb 2025 17:16:31 +0000
ROA not after: Thu 19 Feb 2026 17:16:31 +0000
asID: 984
IP address blocks: 156.245.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79219 (0x13573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:16:31 2025 GMT
Not After : Feb 19 17:16:31 2026 GMT
Subject: CN=67bf4c73-3128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:0d:03:1d:4d:82:16:0f:69:46:6d:6c:2d:
cc:35:f5:7e:82:47:a4:5f:32:8b:e4:74:28:52:a9:
b1:3e:2b:d1:a6:49:ee:7c:77:0c:07:a5:b3:0b:e1:
48:05:a4:52:f2:0e:7c:4c:81:aa:89:7b:8a:ab:07:
ee:fd:85:9b:46:8d:a7:45:d8:90:d9:50:a9:92:56:
ae:b2:d7:41:b1:44:99:65:7d:8f:4c:76:98:a7:22:
f6:54:de:6d:06:9c:e1:ac:c9:c1:9e:57:02:6a:b7:
ca:33:3b:ab:fe:21:07:1c:c6:30:83:9a:06:d6:b2:
33:34:8a:f2:99:10:9b:69:16:01:85:b0:47:0f:ad:
a6:51:cd:f3:1b:59:56:8b:49:91:00:7f:f5:79:f7:
2d:bd:ec:32:e9:59:e8:e5:fd:16:b8:88:b5:08:20:
41:8b:30:e4:cd:f0:fc:f9:b3:fd:74:46:77:c9:cc:
18:35:66:4f:dc:47:84:43:2f:27:90:b2:eb:ea:86:
0c:19:f7:2a:9d:08:29:9b:52:af:bc:4a:c1:70:c2:
d7:84:35:2f:d9:91:13:56:e0:fe:08:65:32:a4:e9:
ec:82:32:a3:97:55:0e:f6:c7:c2:f0:07:de:bd:78:
18:f6:88:5c:47:cc:93:31:82:36:e6:f5:20:2e:d2:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B9:38:61:BE:2C:05:CF:DE:2F:4D:66:9C:58:33:8C:54:1D:34:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E2AC34EF46511EFB7C23E4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.81.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c6:a4:89:17:3d:18:2f:c6:48:29:06:63:9c:5c:d5:a7:af:
3e:a9:04:4f:ae:6c:fb:7e:f4:5d:9a:a1:27:8d:0f:64:0e:50:
0f:96:ef:8b:d1:48:95:2e:fa:de:6f:35:c9:e3:f1:85:1c:40:
80:e6:34:d0:c6:3b:53:74:20:46:28:57:7e:4a:3b:0c:f7:ac:
43:3b:74:e3:37:ec:7a:c1:1d:66:c6:7a:c3:65:b3:32:cb:5a:
a9:33:1c:a0:e5:34:74:f6:5e:ce:b6:e1:e3:d9:7e:eb:84:c5:
f4:49:e5:f0:39:cb:a0:de:ed:43:e0:11:1a:f4:9c:38:c2:d4:
fc:8e:63:bd:65:b8:81:a5:7e:4a:ce:93:a9:9b:79:79:1d:d5:
1a:0f:e7:5e:6e:6c:71:10:a0:fa:ea:4b:98:a1:77:30:68:2a:
9d:71:d3:96:bb:aa:f8:ee:3d:95:b9:c7:a4:c3:24:2e:03:02:
92:32:91:8e:34:b5:75:f2:e4:c6:17:b0:07:85:e3:71:b1:e3:
2a:4e:ea:e1:c0:be:cc:c6:17:2c:86:ee:41:74:f4:25:e1:e6:
14:3a:4d:28:60:52:72:28:4c:32:ab:4e:0d:ce:cd:d0:36:6a:
b0:71:1c:c2:e3:00:42:55:69:71:0b:75:36:8c:9b:08:52:64:
52:7a:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:26 2025 by rpki-client