Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F2DB5C4DFE511EF9152487E762E951A.roa
File: 6F2DB5C4DFE511EF9152487E762E951A.roa (raw, json)
Hash identifier: 9iPOXnLnwtV7M8bWQY+mGe/eA1f33OpYDhTa/U4N4Pk=
Subject key identifier: 98:DD:AE:C9:EB:20:D5:66:9B:27:0E:3F:29:C2:99:0D:6F:2F:5F:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011614
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F2DB5C4DFE511EF9152487E762E951A.roa
Signing time: Fri 31 Jan 2025 15:09:58 +0000
ROA not before: Fri 31 Jan 2025 15:09:54 +0000
ROA not after: Sat 03 Jan 2026 15:09:54 +0000
asID: 40065
IP address blocks: 156.243.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71188 (0x11614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 15:09:54 2025 GMT
Not After : Jan 3 15:09:54 2026 GMT
Subject: CN=679ce7c6-2f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:73:c5:4a:48:2f:86:c8:74:6e:65:1d:c9:
64:6a:3a:eb:dc:51:e5:27:02:5d:cf:57:9a:9b:5c:
ed:73:03:8e:3b:4d:b4:0d:0b:ec:92:6f:a2:f8:7e:
ce:a6:7e:c5:e8:50:6c:84:f8:39:53:60:f3:0f:63:
5e:fa:68:af:35:45:0c:38:4d:57:6d:3e:b0:44:80:
81:63:78:d3:d8:36:85:ed:59:db:1b:4b:b0:1d:a0:
4c:1e:ca:93:bc:b8:a1:32:10:49:16:39:fd:dd:3c:
9e:fe:f7:8e:58:b7:cc:ca:4b:75:aa:f5:f6:49:b9:
97:e5:47:12:8b:d4:a7:5a:43:53:62:8b:20:42:cb:
86:f3:83:ff:5c:4b:91:26:92:37:24:84:ac:1b:45:
0e:ec:d2:aa:e4:8f:bc:8e:72:dc:53:d7:87:41:1c:
c4:c7:fb:cd:20:e3:de:b5:1a:05:ba:a6:59:fd:01:
f6:db:e8:54:6c:be:a2:f8:62:28:76:6c:58:34:25:
08:05:67:fd:c4:21:aa:d9:63:f6:a0:d4:a8:d9:8c:
e3:93:f3:cc:dd:10:df:01:e1:18:3a:ae:df:05:83:
f3:7c:43:af:b0:76:10:9c:0c:ec:1f:cf:ec:a2:98:
82:b0:1d:a3:70:18:90:36:c0:18:58:ef:11:8f:f2:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:AE:C9:EB:20:D5:66:9B:27:0E:3F:29:C2:99:0D:6F:2F:5F:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F2DB5C4DFE511EF9152487E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:60:7a:49:66:b7:2b:b5:43:08:74:b1:4d:c7:34:f6:cf:3c:
20:a9:71:45:a9:05:a4:4a:0a:8e:c3:dd:ba:eb:f7:91:d8:40:
71:34:b9:de:cd:89:2a:0b:27:dd:e5:ac:cb:2a:7a:63:ad:19:
54:1f:ae:42:57:0e:12:22:92:b4:da:d8:38:23:d1:78:c2:d1:
d6:30:a4:04:18:16:a8:56:fc:81:6d:6a:98:29:91:d6:7a:79:
00:bc:38:1a:03:5f:fc:2d:2a:c8:3a:0b:35:0b:a7:58:aa:67:
b6:17:71:a8:28:8a:69:43:79:61:e7:cd:f0:e1:0f:a6:02:3d:
e3:a3:7d:9d:26:dd:57:6d:cc:56:18:76:ea:1b:aa:30:5d:6f:
1e:a7:ad:9c:90:e8:89:2e:b3:48:6b:c6:7d:16:df:5b:39:11:
01:71:c4:06:e7:9c:62:a5:53:35:2f:5a:75:3b:32:40:04:52:
47:bd:74:57:c0:32:68:c8:e9:bc:c3:a2:ae:27:d9:2c:40:91:
a4:c8:76:ba:d3:5f:21:2e:de:2b:f9:90:5e:17:58:e2:dd:80:
9c:5f:e3:b0:10:5f:2d:d2:59:0a:8e:e1:61:1f:bc:ef:8d:3e:
99:f8:c5:6d:49:6b:72:01:6c:c8:44:54:d3:f0:5d:3f:34:7b:
25:94:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:46 2025 by rpki-client