Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61F50A2B3CF11EF9F59D764762E951A.roa
File: A61F50A2B3CF11EF9F59D764762E951A.roa (raw, json)
Hash identifier: D+k4wvZ2wCQGcIQgVXaIjWNois0oNWNX6I2Awom1Wms=
Subject key identifier: 69:F9:1C:C7:4E:37:4B:74:53:7F:A8:40:D2:F9:D4:6B:01:1E:66:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E01F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61F50A2B3CF11EF9F59D764762E951A.roa
Signing time: Fri 06 Dec 2024 12:43:10 +0000
ROA not before: Fri 06 Dec 2024 12:43:06 +0000
ROA not after: Wed 06 Dec 2034 12:43:06 +0000
asID: 17561
IP address blocks: 156.244.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57375 (0xe01f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 6 12:43:06 2024 GMT
Not After : Dec 6 12:43:06 2034 GMT
Subject: CN=6752f15e-8509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:3e:63:18:3f:ca:69:8c:85:e5:12:f2:bb:
fb:72:aa:66:df:67:b1:dc:7e:3d:d2:bd:e7:d2:38:
d5:aa:4d:ad:8d:1e:61:55:0e:6d:32:73:d9:b6:3b:
57:01:da:96:f8:99:fd:68:66:72:dc:cf:b4:0f:60:
e3:a8:19:9d:de:14:d4:01:f8:5f:bf:63:e6:af:40:
dd:a0:08:46:06:2d:63:5c:01:fc:79:70:6f:bf:91:
03:28:56:c2:13:0b:69:d5:0e:9b:42:81:19:cc:e3:
f2:79:b3:00:6b:48:ca:34:5f:00:61:03:ac:27:fa:
8a:fc:9e:91:0b:58:c6:23:d4:89:e4:e6:ee:2c:05:
27:c9:ee:17:9e:35:1b:a0:d8:28:df:3d:aa:0f:08:
ce:06:c5:13:cb:98:10:0e:5a:ca:3c:6e:75:73:2c:
b3:88:6c:b5:2a:c8:b3:f5:b4:fd:8f:37:c7:c4:81:
4b:30:a9:90:a8:26:5f:f6:39:78:a5:0d:c6:bd:ed:
2f:09:8b:86:a4:47:ff:25:54:56:c7:bb:ba:7a:a6:
7c:43:6f:af:8f:b5:6c:63:c3:cf:48:02:79:83:92:
3b:4f:fd:46:7f:69:93:6e:b5:ca:f3:e3:2a:36:f2:
b0:81:dc:18:47:d5:d7:ee:31:fb:b5:ba:6d:77:5d:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:1C:C7:4E:37:4B:74:53:7F:A8:40:D2:F9:D4:6B:01:1E:66:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61F50A2B3CF11EF9F59D764762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.128.0/22
Signature Algorithm: sha256WithRSAEncryption
22:3c:32:0e:bb:2d:6a:9a:7a:79:07:f0:26:b8:6d:6d:b3:5b:
04:b9:b0:80:a8:4b:2d:41:8f:cb:f4:3b:53:c6:cc:73:a4:8f:
a2:eb:cb:c1:d6:e3:64:0c:ef:19:36:f2:76:ee:df:bf:56:76:
4d:8c:d4:e7:2a:d4:fe:a1:08:50:16:48:0f:6f:05:38:83:6b:
cd:90:7a:46:03:78:bd:94:13:ab:9c:13:c7:d5:da:35:02:25:
a1:58:8c:12:69:71:fc:d4:94:5d:ee:5c:5c:66:a2:32:a7:e1:
c6:9d:a4:a5:37:5c:9b:6d:28:f6:98:0d:9a:ce:80:3b:2a:32:
5f:a3:4c:cf:18:50:ab:55:09:ae:fd:20:65:6e:c4:d1:a5:59:
db:8d:e3:04:91:84:a2:8f:36:ff:e4:fc:6d:8f:7b:7a:71:74:
e6:1d:c2:7d:6a:1d:08:bd:ce:73:c6:e4:80:5a:04:1e:20:ad:
17:f2:cd:04:da:ac:2e:c5:6f:89:af:06:a5:af:1b:55:2a:ae:
84:b0:aa:be:30:cb:cd:b0:85:b4:e2:96:36:3f:36:7d:36:be:
38:2b:8c:4c:ff:8f:2d:1f:a8:ba:b4:4f:14:04:b4:bd:34:3a:
9f:82:3c:c7:2b:17:6a:33:68:f0:7a:4c:59:be:c3:43:8b:e0:
77:67:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:08 2025 by rpki-client