Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB7CD05ACE3C11EFA9BD849C762E951A.roa
File: BB7CD05ACE3C11EFA9BD849C762E951A.roa (raw, json)
Hash identifier: 62U7+xml3zenPpMcexpkrmBRrROaPVfIHivy2g4aDq4=
Subject key identifier: FB:3E:A6:B9:F2:91:C0:A6:59:F4:03:35:B5:87:0F:26:57:87:F0:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010251
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB7CD05ACE3C11EFA9BD849C762E951A.roa
Signing time: Thu 09 Jan 2025 03:49:31 +0000
ROA not before: Thu 09 Jan 2025 03:49:27 +0000
ROA not after: Fri 09 Jan 2026 03:49:27 +0000
asID: 17561
IP address blocks: 156.247.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66129 (0x10251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 03:49:27 2025 GMT
Not After : Jan 9 03:49:27 2026 GMT
Subject: CN=677f474b-c0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:51:ad:25:1e:26:67:a7:e4:4b:76:08:44:
7a:88:a4:71:11:37:e8:7c:19:20:6b:95:78:38:a8:
a8:99:5d:31:d5:d1:5a:7f:42:25:c1:c0:be:7c:14:
5e:08:79:fd:2b:37:08:2a:4d:c4:71:fb:90:7c:ad:
8c:1d:53:0e:b1:b1:6f:a6:31:e0:da:c5:ec:12:d3:
74:32:72:42:ad:fa:be:f5:63:f9:12:db:58:f6:65:
b8:5e:e3:d9:ff:f2:f8:a7:25:82:5f:60:3f:9f:24:
f7:b5:35:00:41:68:90:2c:cf:9f:c7:e4:f3:ce:46:
af:98:12:f9:7a:a5:f5:f3:c3:5d:b8:b8:64:ff:65:
df:52:7b:57:65:ea:af:f6:bb:79:6f:37:0e:cc:55:
49:ae:a3:1b:f0:54:9f:c5:be:7a:09:ce:32:08:8a:
b7:b1:ee:2d:0f:2d:2a:15:a0:93:1b:fa:85:86:df:
53:af:ff:60:62:91:e2:15:f6:42:54:4f:6b:41:e3:
01:6c:a1:2f:34:e3:e6:bd:4f:4b:fb:0f:8e:b6:d1:
9d:ec:f7:be:0f:8c:36:0d:ec:9f:6b:2a:83:c1:a3:
2f:11:f2:9b:42:ae:e1:f7:d3:e7:29:84:c5:c7:01:
72:23:b7:47:52:bc:66:99:33:29:fe:61:6b:c5:2d:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3E:A6:B9:F2:91:C0:A6:59:F4:03:35:B5:87:0F:26:57:87:F0:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB7CD05ACE3C11EFA9BD849C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.60.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2c:d9:21:4a:b3:6c:e1:67:a0:1d:7c:ba:c9:1d:fc:65:be:
61:3d:13:82:71:a2:c8:18:37:07:18:4b:40:c1:72:04:7f:9b:
15:59:19:41:95:6a:c4:73:b9:8b:d4:bd:44:3c:fc:13:42:53:
ff:0d:6d:ed:b4:d1:b0:34:0e:d7:d0:08:55:01:9c:94:d3:66:
60:97:de:e1:8f:0a:0a:ef:34:7a:5d:f2:37:a0:33:17:bc:46:
a2:79:9b:e9:49:80:fb:13:f0:e8:de:bd:6b:76:60:34:50:c8:
45:c4:60:c1:a2:49:9b:2e:e2:9a:41:7e:3a:a5:d6:cb:8c:22:
eb:0e:d7:be:32:be:1e:de:62:78:ec:a3:f2:f2:e9:7e:07:8d:
31:c2:ad:5f:87:4b:97:3f:f2:9d:4c:de:80:0f:9f:a5:8e:4a:
bd:fe:fc:f9:4a:df:e3:36:11:87:6e:e2:70:4f:e5:9a:d8:c6:
cb:c0:28:0e:a9:7f:96:f9:74:61:e0:5d:37:61:89:01:20:20:
cc:fd:a3:a7:fa:2d:59:e5:4f:03:04:d7:fc:a0:19:d8:91:41:
e2:aa:81:0a:68:de:42:93:a1:4a:f2:d9:de:22:93:d6:7d:10:
da:69:9e:7e:8a:5a:0c:ea:b1:91:a2:34:01:5a:f7:84:1f:c1:
4c:c6:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:13 2025 by rpki-client