Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B601D930D24311EFA63C649A762E951A.roa
File: B601D930D24311EFA63C649A762E951A.roa (raw, json)
Hash identifier: Hu6e1453zzGVzQFu5R8mdLOqicW+gcUN5Rp7og4fzkY=
Subject key identifier: 09:01:FE:D8:1D:B3:83:03:0D:22:0A:47:AE:E7:AB:26:60:BD:65:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B601D930D24311EFA63C649A762E951A.roa
Signing time: Tue 14 Jan 2025 06:49:33 +0000
ROA not before: Tue 14 Jan 2025 06:49:29 +0000
ROA not after: Thu 15 May 2025 06:49:29 +0000
asID: 400619
IP address blocks: 156.224.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67264 (0x106c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 06:49:29 2025 GMT
Not After : May 15 06:49:29 2025 GMT
Subject: CN=678608fd-d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:fe:cb:e6:b1:b2:e3:2a:fe:95:b1:eb:04:
2d:99:ca:af:0f:0b:83:87:f6:e9:32:6e:5f:10:e6:
17:e0:80:61:3e:10:75:92:4c:45:f8:60:b0:0e:52:
8c:d0:0f:5e:df:51:a1:11:6c:3f:c9:cd:50:1a:e0:
9a:95:7a:7a:b6:8b:4d:54:0a:79:77:b2:cd:69:ad:
5b:35:10:66:50:a4:06:f5:75:c4:bc:f7:9c:a3:37:
56:f9:08:8d:56:86:c7:18:40:80:9d:ca:dc:a4:08:
69:2d:b2:3a:22:59:9b:26:dc:b6:e1:51:71:d8:ad:
d9:a2:1d:80:35:27:dd:df:9b:92:b6:13:34:bc:f8:
be:8b:64:6b:4e:60:a8:44:dd:bb:f9:8f:c7:d5:a7:
a2:87:39:45:d4:5b:44:a2:99:ac:d8:e0:97:a5:44:
f6:97:49:c8:e0:8f:a3:64:5e:79:34:8c:f5:52:ed:
1b:7a:cc:c4:5c:37:ed:26:50:da:e0:37:8d:b3:f8:
45:b7:08:43:61:c8:e5:9f:f1:3c:b3:67:be:06:2d:
02:d5:51:4d:b4:5d:5e:f4:65:36:d5:1f:06:ae:8c:
e4:24:74:54:41:f8:09:3a:1b:c2:69:2f:ce:8c:c9:
58:3b:09:ce:6a:ca:a9:55:d6:c5:7a:60:82:55:24:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:FE:D8:1D:B3:83:03:0D:22:0A:47:AE:E7:AB:26:60:BD:65:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B601D930D24311EFA63C649A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.18.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:9f:d5:09:60:ee:1e:a8:82:e3:7f:8a:2f:2b:a5:2d:d7:ee:
46:b8:8d:05:87:33:a7:d3:10:1d:92:de:1f:41:a9:58:57:fe:
c0:65:68:b7:60:6b:c1:6b:3e:c5:e7:45:0b:bd:c5:8f:6d:1e:
52:72:f1:0f:25:d8:64:cc:f2:c6:0a:86:cb:fc:7b:88:71:43:
0a:14:a3:c6:a8:17:5a:a7:fc:5a:e0:fc:2a:3c:4c:14:96:fe:
3f:d4:b6:c9:7b:ef:18:6a:8a:32:7c:12:65:f6:9a:95:23:5b:
01:4b:01:98:ad:a6:b5:f5:41:44:d6:91:2a:f9:1f:a8:6e:e9:
37:cf:b3:32:95:7b:66:de:cf:2f:2b:fd:89:6b:cd:13:cd:b7:
a0:52:33:b9:f3:a6:0b:e1:6c:a5:ce:3d:a5:24:42:73:46:2d:
f5:5d:2d:a5:55:12:c3:6d:d2:c0:23:b6:e5:33:d9:d3:71:99:
5b:94:95:c4:74:f1:a6:9f:39:3a:9a:58:68:10:82:13:aa:fe:
af:9b:73:43:3a:3c:38:d5:0b:14:ae:cc:a4:37:dd:52:7e:2e:
70:32:93:fc:52:4a:34:af:e7:3f:95:df:92:91:85:f9:2b:8a:
59:d4:a5:55:40:b7:80:1e:c0:88:a9:64:86:c6:41:0c:54:b1:
08:5e:a1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:18 2025 by rpki-client