Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A6FD9E0C94911EFB711C38A762E951A.roa
File: 9A6FD9E0C94911EFB711C38A762E951A.roa (raw, json)
Hash identifier: BTG95qgxsF4nlAKe0CI7a6R+7VaihoOeBWG4TcwFVvM=
Subject key identifier: 35:13:80:27:B4:71:13:8A:E1:6E:DB:37:11:19:C3:31:DB:9F:FF:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F380
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A6FD9E0C94911EFB711C38A762E951A.roa
Signing time: Thu 02 Jan 2025 20:39:03 +0000
ROA not before: Thu 02 Jan 2025 20:39:00 +0000
ROA not after: Sat 13 Dec 2025 20:39:00 +0000
asID: 984
IP address blocks: 156.225.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62336 (0xf380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:39:00 2025 GMT
Not After : Dec 13 20:39:00 2025 GMT
Subject: CN=6776f967-9b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:07:00:6d:59:50:d5:9e:c6:cb:aa:5a:b4:
c2:50:52:60:0e:57:e7:71:9a:a2:0c:9c:98:bf:22:
a5:4a:53:46:02:e0:5b:64:f5:5f:3e:d2:38:e2:4a:
1a:17:55:18:31:d9:f4:23:d1:65:f2:25:b8:8d:fe:
fd:63:4f:62:6c:22:61:dc:fb:cd:cc:70:85:b7:20:
b5:fe:dc:21:0e:80:c5:34:f8:97:5d:78:88:39:91:
27:91:fd:c2:ab:85:ce:52:8f:e4:ae:5e:23:65:3f:
41:fe:51:48:36:61:60:0d:e6:a9:2e:7b:c1:5f:83:
af:d2:18:24:ff:b8:d1:fe:06:c3:71:d5:06:1d:bf:
d4:88:a0:6f:ec:8d:1a:a8:6d:91:b3:d2:16:dd:cc:
8e:eb:4b:e9:72:a5:22:2b:5c:8d:65:6c:6b:68:9e:
74:3a:93:21:ae:90:13:0d:83:65:44:66:85:f5:ee:
e2:95:ab:dd:50:cf:b7:a4:47:a5:c6:09:63:c0:ac:
ef:0f:06:30:fe:d7:1f:61:8c:8d:1d:9e:44:4c:86:
83:a7:26:1d:ea:ab:f8:f3:cf:7b:9b:f8:5f:eb:04:
43:55:31:d3:bf:db:c7:7a:4d:f3:02:74:47:6f:92:
4f:73:fe:b7:9f:e1:e4:2b:54:76:93:e8:45:bb:08:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:80:27:B4:71:13:8A:E1:6E:DB:37:11:19:C3:31:DB:9F:FF:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A6FD9E0C94911EFB711C38A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.60.0/24
Signature Algorithm: sha256WithRSAEncryption
67:13:08:2d:3a:d3:35:45:22:ab:97:9c:c2:17:fa:53:b0:cf:
d9:72:8d:6e:7a:4a:b9:99:42:1c:d5:49:27:49:a7:93:42:a8:
f0:ed:5e:24:72:94:a5:2e:9e:c7:78:f9:72:81:3d:13:a5:f5:
7b:ef:b4:72:d0:c2:dd:04:05:37:5d:9b:39:af:31:70:fc:fa:
58:85:64:94:db:6d:64:23:ea:a0:cb:8c:85:7c:73:62:3b:a8:
6f:2d:f1:b6:8c:f8:da:e4:45:f4:06:47:35:f4:e1:9c:cf:8f:
46:67:79:a6:e8:81:f5:96:49:5d:ba:69:c9:68:06:0b:cb:02:
da:82:e1:f4:07:b1:0b:3b:89:40:90:39:f0:1f:fe:7c:d2:e8:
41:70:7f:b1:41:18:8b:4c:c2:94:eb:32:f6:16:26:21:91:d8:
c4:ec:b2:c1:7b:53:a5:92:db:70:41:1b:24:94:01:08:37:b8:
16:f0:f8:25:94:6c:8f:a5:92:28:aa:94:29:be:87:8e:1b:33:
96:39:e1:3d:73:e8:19:ee:cf:b8:fd:40:6a:af:d5:df:c1:8a:
47:e2:0f:27:f6:0f:cf:d2:bb:a9:24:53:cb:42:75:33:ba:25:
92:a6:9a:11:29:a3:13:96:3b:29:3f:3c:dd:92:12:85:92:b9:
65:2f:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:47 2025 by rpki-client