Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6DF758ED31E11EFA029898A762E951A.roa
File: B6DF758ED31E11EFA029898A762E951A.roa (raw, json)
Hash identifier: Wh8WXeYVIbkM7SBvMKCSV9u+VlLNL25c9vkXehbntHs=
Subject key identifier: E9:A7:E2:CA:1F:AA:BD:6F:45:36:AC:47:3A:6C:14:01:F6:0D:33:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010881
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6DF758ED31E11EFA029898A762E951A.roa
Signing time: Wed 15 Jan 2025 08:57:14 +0000
ROA not before: Wed 15 Jan 2025 08:57:10 +0000
ROA not after: Sat 03 Jan 2026 08:57:10 +0000
asID: 984
IP address blocks: 156.254.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67713 (0x10881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 08:57:10 2025 GMT
Not After : Jan 3 08:57:10 2026 GMT
Subject: CN=6787786a-b355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:77:65:6f:62:23:6a:8c:ff:ba:ba:25:e1:
73:10:d9:11:4a:04:a2:79:8e:1b:fc:a7:8c:09:e8:
25:f3:c6:94:bf:7b:be:c3:30:3c:c5:20:4b:f7:6e:
29:c4:28:ff:06:80:e0:d3:63:e9:2f:31:68:ce:fc:
b2:82:93:54:3c:c3:77:a0:ae:8e:bd:47:16:05:cb:
eb:fa:67:93:7b:2d:c9:f9:19:e7:3f:b1:75:49:c1:
8c:27:37:40:c7:a7:b8:37:b7:cf:11:83:87:d1:b2:
84:b3:39:a9:24:22:0c:1f:17:7c:f4:0f:9a:d9:2e:
de:dc:c9:09:8e:94:81:1d:69:96:70:6f:e3:b7:1a:
e9:74:10:82:c7:f5:e0:8c:8e:0f:2b:a9:53:b1:84:
0b:56:4c:b0:63:c7:a8:97:4f:95:f6:90:a4:c1:40:
1f:ab:8d:72:81:9a:54:43:57:62:99:e6:f9:a0:a6:
37:b0:f1:7f:1f:a6:03:75:a6:2b:79:ee:a0:0f:f9:
bd:0f:49:3c:e7:f7:2d:28:29:c0:d0:da:a4:1c:19:
e3:5f:44:9b:a6:3b:43:da:bf:ac:ec:ef:bd:98:37:
f2:e3:08:0b:ee:f0:64:94:ae:4c:21:f8:30:3f:96:
10:95:38:2e:d4:69:22:31:21:76:2a:e5:63:9e:32:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:E2:CA:1F:AA:BD:6F:45:36:AC:47:3A:6C:14:01:F6:0D:33:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6DF758ED31E11EFA029898A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.86.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:6a:c4:40:ff:f1:e9:12:43:09:94:66:81:07:c5:43:c3:1f:
fd:64:14:c4:4e:2b:2e:70:c7:04:50:46:97:c6:00:57:af:31:
d8:a5:4a:b8:f1:d0:c7:4d:6a:04:83:72:09:b5:c2:38:63:fe:
82:cc:4c:ba:b2:67:c2:df:6e:5e:b6:4b:36:05:ca:a0:09:d1:
61:f6:77:93:7c:dc:b7:9d:1d:b6:b4:d3:51:d5:b6:9a:5c:0d:
9a:9a:a3:7e:58:40:2b:03:8b:2a:74:26:31:62:24:f9:11:cf:
e2:9f:c6:18:f5:ab:cd:0f:67:c7:ff:81:41:28:09:f9:cb:ff:
0f:bd:53:2d:f8:a6:3a:a6:c0:0c:9f:b4:c7:90:42:1e:26:e5:
9b:8a:ca:1c:55:1e:4c:ea:9d:a8:65:04:1c:cb:af:71:1b:2c:
38:5c:93:4c:9f:86:2b:fc:8b:2a:ee:15:e1:18:94:7c:74:4c:
a4:50:d2:8f:d9:a9:26:be:ae:ad:77:d9:11:51:9d:c4:a5:6b:
55:65:5f:91:76:28:fa:b3:72:21:b5:f0:bf:69:9c:e1:6d:b7:
e6:62:88:99:cd:06:4c:ec:0e:04:10:4b:23:ac:01:3e:e1:ca:
0b:3f:45:54:07:36:f5:9e:0a:fb:8e:fc:e1:0e:1d:a7:b3:e8:
ae:8f:8a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:42 2025 by rpki-client