Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6A686B4C98011EF8A7F057F762E951A.roa
File: A6A686B4C98011EF8A7F057F762E951A.roa (raw, json)
Hash identifier: EV6ZsAh45pcPkdpTMVTIlKUG17a2CRzG/LKnsWJN6v4=
Subject key identifier: 58:BF:A3:FA:EB:74:54:86:E2:16:FD:81:EB:6A:47:AF:D1:29:65:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F54B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6A686B4C98011EF8A7F057F762E951A.roa
Signing time: Fri 03 Jan 2025 03:13:06 +0000
ROA not before: Fri 03 Jan 2025 03:13:02 +0000
ROA not after: Sat 13 Dec 2025 03:13:02 +0000
asID: 984
IP address blocks: 156.229.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62795 (0xf54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 03:13:02 2025 GMT
Not After : Dec 13 03:13:02 2025 GMT
Subject: CN=677755c2-dc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:d1:22:f8:29:4f:62:56:a8:00:c7:25:eb:
18:4e:fe:7b:f5:35:0a:5a:cb:4e:45:c5:bf:c2:a3:
8d:f1:74:0b:41:c0:fa:c1:80:78:96:14:f0:b5:83:
7a:ae:5f:fe:af:9f:cc:30:03:38:92:ef:37:fc:b6:
72:50:06:89:1e:3c:e0:90:c1:c7:4b:28:bd:1b:2f:
e7:d6:5a:64:69:7e:fd:8b:24:4d:cc:93:b2:be:1c:
e4:71:71:a3:13:eb:bb:69:a0:87:68:5e:85:78:16:
68:ae:36:79:12:6f:f2:b6:30:2f:5d:a5:17:dc:fa:
2c:bf:e5:eb:9d:7d:0e:cd:85:ab:93:30:ec:6f:2e:
82:19:07:b4:7b:50:65:84:b4:54:0b:68:68:8e:c9:
8d:c8:01:e8:ff:1d:18:13:23:6f:b2:87:b6:8b:5e:
e6:4a:b6:13:4c:cf:52:e8:34:05:98:39:52:75:ba:
44:c4:7b:6c:77:ef:e0:83:67:05:a7:10:61:a4:c6:
31:00:98:af:c5:93:eb:de:cd:ac:af:c5:d4:70:32:
80:e1:ba:81:a1:f9:39:f3:8f:d9:a2:a5:6f:f6:28:
c9:40:fa:c4:33:0e:aa:a8:5b:e9:19:cf:e3:76:83:
ac:07:cb:40:39:b0:73:f0:54:f4:34:d7:83:dd:8e:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:A3:FA:EB:74:54:86:E2:16:FD:81:EB:6A:47:AF:D1:29:65:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6A686B4C98011EF8A7F057F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7c:b8:6a:0c:18:e6:65:69:c4:0b:1b:26:af:c1:b0:84:d8:
48:87:f9:54:94:ae:38:ca:91:3f:16:e3:53:99:c5:ad:80:9f:
cd:25:94:fb:88:00:c8:67:dd:f8:e1:03:70:80:db:d2:2c:3f:
85:e8:07:e9:dd:17:06:70:ab:dd:fd:06:e9:7d:52:e7:a4:1c:
1e:ee:13:a9:95:4b:7a:a3:bc:f4:9d:9b:22:f6:9e:53:5a:72:
2f:01:d8:4d:4c:73:0b:f6:c7:bf:84:4e:7c:78:ae:47:91:24:
c9:39:3f:da:5c:e2:85:18:6e:54:8b:9d:ab:a8:94:ba:31:16:
e4:14:73:4d:64:2b:68:02:9a:34:44:ae:d9:c4:e1:60:5c:97:
d7:f4:ae:10:ed:08:dc:e9:84:13:13:b5:24:54:2b:43:48:1d:
87:b7:f6:00:13:0f:f8:00:25:92:4b:85:cc:4c:66:86:e1:e0:
94:7d:cc:b0:a7:16:89:3c:de:fe:c0:b6:c2:10:2e:7f:43:81:
d2:6a:ca:86:a2:3a:1e:37:a4:db:10:f0:f3:0e:f4:3d:ea:a0:
ff:8d:ca:1e:0d:78:04:4d:2f:c4:27:ed:12:96:dc:1d:c0:61:
db:e0:73:4c:1f:50:b0:03:6f:11:ff:2e:a6:b9:4e:dd:9e:68:
b1:40:ef:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:14 2025 by rpki-client