Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6139F74CD5011EFADB075A3762E951A.roa
File: A6139F74CD5011EFADB075A3762E951A.roa (raw, json)
Hash identifier: BeNYO1taXDaRf7ey9GbM+bwngoI+5UMfk7zsxWOIFOs=
Subject key identifier: 22:D4:3E:76:35:A5:73:B6:45:61:B7:E3:E8:94:33:FC:E3:89:D7:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6139F74CD5011EFADB075A3762E951A.roa
Signing time: Tue 07 Jan 2025 23:39:34 +0000
ROA not before: Tue 07 Jan 2025 23:39:30 +0000
ROA not after: Sat 13 Dec 2025 23:39:30 +0000
asID: 984
IP address blocks: 156.247.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65257 (0xfee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 23:39:30 2025 GMT
Not After : Dec 13 23:39:30 2025 GMT
Subject: CN=677dbb36-f71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:a8:b5:d0:e9:b7:d7:31:71:52:d9:b7:14:
53:2d:bd:c4:36:d0:44:cc:5b:6c:22:6d:98:19:82:
54:52:b6:c6:9b:fb:9b:87:6e:9f:1f:2a:da:42:40:
75:d8:b9:91:0c:31:b0:e6:91:5c:d6:a5:fa:1a:41:
d8:1b:33:03:b7:6a:c1:08:56:6c:92:9b:27:17:4d:
ad:f9:5a:0b:a9:8c:10:a9:4b:5b:1f:26:cd:1a:b8:
db:35:45:7c:69:ab:1d:f6:60:f5:80:c6:f8:12:18:
80:1e:a3:eb:9f:c1:33:b3:97:07:a7:e0:2a:27:25:
7a:8e:7e:f8:42:24:41:56:04:21:34:16:ba:1d:47:
ed:e3:c7:d7:fe:0d:0e:f7:48:de:90:24:d1:4e:4f:
04:73:36:d7:a1:32:87:fd:30:cb:d0:f1:ee:36:4b:
90:e2:cc:7a:05:f3:b8:ce:ad:e0:1e:a8:a1:74:6c:
f8:1a:fb:39:11:25:7a:ea:6a:3e:f2:ef:0d:db:6c:
2a:ae:83:c5:05:d7:18:32:c1:e7:05:79:6a:34:2d:
71:ae:9f:41:c3:9a:f3:a8:3f:25:f2:dd:81:99:ea:
f0:98:e3:49:11:05:07:32:f9:3b:03:13:03:91:7e:
86:7a:10:7d:57:7f:68:f3:6e:cd:a0:ac:6e:d4:98:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:3E:76:35:A5:73:B6:45:61:B7:E3:E8:94:33:FC:E3:89:D7:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6139F74CD5011EFADB075A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6d:2d:15:e9:1f:a8:18:bd:ce:40:fb:80:ff:c3:25:00:31:
7c:ef:57:f7:b8:ea:15:7c:4e:c3:27:0a:75:d6:20:cb:cb:8c:
be:24:ab:c2:65:83:47:35:8c:36:df:15:57:3f:3a:86:33:87:
1d:63:83:d9:fc:d6:05:50:19:c4:1d:15:22:14:a8:f3:0f:8f:
da:4e:e8:ad:94:4d:53:bc:45:d2:33:8b:92:dd:42:16:fb:82:
a4:b2:ee:2f:0b:15:33:31:44:3b:87:65:f2:06:fe:a2:26:a3:
18:31:c5:86:ec:09:7a:3e:b8:aa:45:31:b3:75:47:c5:c4:d8:
44:f5:b2:16:0e:05:c8:68:17:9a:d2:99:14:3c:a3:9d:5d:6c:
1b:cf:97:8a:dd:81:3d:ab:3e:c3:2c:ca:c0:ae:05:96:f4:11:
6e:3f:3d:c7:65:8c:07:27:42:44:03:46:29:a5:a9:62:d4:95:
39:23:b9:2a:5f:c4:83:ab:d6:01:0e:6f:58:23:ad:60:b2:63:
b7:20:68:f0:90:16:9c:4f:79:f8:da:55:07:d7:13:fd:37:32:
60:33:c6:ed:85:3e:dc:58:ae:e1:e0:9e:19:5e:49:86:49:54:
b4:70:60:5b:b6:3f:47:83:27:63:33:07:bc:b6:92:60:b4:bf:
da:bb:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:14 2025 by rpki-client