Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FA83F3EF8CB11EFB9331A62762E951A.roa
File: 6FA83F3EF8CB11EFB9331A62762E951A.roa (raw, json)
Hash identifier: 6vJsRmwROzW78zI7q9mGQXFexTTAWDvIutmDsR8J+dk=
Subject key identifier: F0:BB:89:C3:B9:4E:72:21:F1:30:D0:2D:D3:D3:EA:C6:68:7E:9C:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FA83F3EF8CB11EFB9331A62762E951A.roa
Signing time: Tue 04 Mar 2025 07:36:51 +0000
ROA not before: Tue 04 Mar 2025 07:36:46 +0000
ROA not after: Sun 11 May 2025 07:36:46 +0000
asID: 5650
IP address blocks: 156.255.16.0/22 maxlen: 24
156.255.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82631 (0x142c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 07:36:46 2025 GMT
Not After : May 11 07:36:46 2025 GMT
Subject: CN=67c6ad93-a6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:bb:85:94:c4:95:63:fa:75:b9:ce:9e:c1:
4a:a5:10:dd:ae:6b:dd:a5:9b:1c:63:f2:f9:4c:de:
a9:2b:61:6c:02:aa:83:dc:04:c7:be:1f:d8:a3:a6:
59:6e:0b:7d:8f:eb:4e:96:18:00:51:04:6e:95:80:
f3:85:e4:16:8f:9f:ce:d2:76:91:ff:ad:a1:78:9d:
12:b4:f6:ed:7e:a1:3d:fb:ce:bb:c7:cc:45:93:af:
16:dd:7d:2c:f3:17:78:9e:bb:85:eb:81:7d:af:b0:
f7:b7:b8:21:c7:5c:b1:a7:a7:7c:e0:c6:bf:8a:6f:
ff:cf:74:0b:07:30:2a:86:b7:06:1c:e8:03:9d:5a:
9f:de:5c:b0:3f:e5:c6:ad:05:72:2f:82:de:f8:72:
b4:26:0a:ea:e3:87:f8:cc:1a:e2:74:31:60:21:8c:
d0:73:18:b5:f9:05:10:e7:80:04:d9:8b:f2:7f:d5:
84:78:05:a8:d1:3d:eb:07:0a:a7:ad:8a:8e:17:5a:
85:fb:a9:6d:78:05:4f:51:25:b0:5e:8f:82:01:56:
27:a6:fb:74:2f:8c:19:95:b6:2b:5b:48:7e:4c:e2:
d7:6f:0d:64:9c:f8:7a:af:04:33:58:4e:f9:27:fc:
24:21:e9:8c:4f:0b:0a:eb:ef:c3:79:32:f5:f4:82:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BB:89:C3:B9:4E:72:21:F1:30:D0:2D:D3:D3:EA:C6:68:7E:9C:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FA83F3EF8CB11EFB9331A62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.16.0/21
Signature Algorithm: sha256WithRSAEncryption
35:77:2c:21:62:14:42:cb:5b:96:f8:1a:16:dc:76:b8:96:93:
39:f7:16:2d:2f:58:9b:43:3b:6b:59:b7:48:e3:ec:89:53:72:
bc:d7:53:5d:88:2b:7b:f5:eb:2a:9d:12:f4:38:1a:bc:93:23:
f0:a5:62:68:f0:96:79:e7:62:cf:92:45:05:5f:15:9e:dc:e2:
1d:f2:4a:b6:b2:bc:83:4c:d8:a0:9e:20:68:45:8b:19:47:95:
f5:8e:44:60:d8:c2:ad:92:c7:b2:49:88:d9:ed:dc:30:26:9e:
ed:40:44:91:34:42:18:77:5e:2e:4d:a1:36:30:2c:ad:0e:d5:
23:5a:30:1f:92:2e:85:8b:28:39:f8:92:35:47:b7:05:6b:f3:
d1:9d:86:55:b2:77:ce:b9:87:e3:1d:bc:9b:64:55:ec:15:38:
c4:b3:9c:2a:10:13:12:86:91:c6:ff:e0:30:8f:09:a4:dc:a5:
d8:82:6b:22:3b:f6:ba:88:b7:89:a4:29:93:ff:29:c4:d2:24:
3b:6a:d9:d7:7c:64:f4:46:20:57:aa:7b:ef:58:83:8c:22:01:
67:a4:9d:cd:65:6c:8a:43:f6:4b:68:be:d3:8c:b0:fd:e6:86:
83:78:2e:74:c8:84:33:c6:99:d2:2d:6f:6c:8b:e4:08:fd:70:
64:63:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:44 2025 by rpki-client