Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C06734FCCC0711EF9B02F47F762E951A.roa
File: C06734FCCC0711EF9B02F47F762E951A.roa (raw, json)
Hash identifier: gz1oWSqThp5cvof6gD2nALbek8U4mLWbrqjyZAfkR5E=
Subject key identifier: 22:70:30:44:A9:1E:7F:65:D3:3D:00:E2:A2:7A:25:45:6B:3D:33:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F849
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C06734FCCC0711EF9B02F47F762E951A.roa
Signing time: Mon 06 Jan 2025 08:25:14 +0000
ROA not before: Mon 06 Jan 2025 08:25:10 +0000
ROA not after: Wed 02 Apr 2025 08:25:10 +0000
asID: 135377
IP address blocks: 156.232.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63561 (0xf849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 08:25:10 2025 GMT
Not After : Apr 2 08:25:10 2025 GMT
Subject: CN=677b936a-2bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:5f:54:41:72:d7:dc:c8:2a:be:73:31:1b:
98:a1:f7:48:9e:66:a6:76:fc:7a:63:72:57:27:b5:
a6:df:48:6f:a4:64:c7:f1:d6:82:d2:b8:df:e4:e2:
a5:4c:c0:0a:f8:5a:19:b7:c2:57:25:d6:1d:59:9f:
a4:36:08:b6:6e:03:91:c9:82:53:c3:bb:f4:7d:9d:
84:d9:9f:2b:cd:0a:12:c6:a4:7b:8e:85:56:2a:c3:
c9:08:2a:b9:9b:85:07:47:4b:2f:8d:c7:56:7a:d8:
6b:d3:ac:7f:8e:a1:4f:ea:3d:01:a9:96:db:c1:f5:
2f:0d:6b:14:db:56:20:39:18:43:32:16:db:87:51:
14:9d:4d:7e:d5:56:82:fb:18:01:26:4b:a4:31:9e:
ef:32:7d:af:ff:49:30:1d:39:01:f7:cf:79:48:83:
89:a7:83:b8:f0:07:ef:12:65:2c:84:5f:b8:db:97:
2d:f7:22:ba:f9:e7:6c:25:6d:87:3a:55:f1:17:ca:
ae:8c:8b:ab:0a:ba:f7:d3:c3:ff:52:dc:ba:f2:84:
29:20:44:d2:4e:18:59:e3:26:92:06:ff:90:4d:89:
d2:8f:04:e1:27:b4:ce:1e:db:db:a6:7d:99:d1:27:
8c:1f:2c:31:95:e2:ac:c6:61:47:60:b6:0b:23:7f:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:70:30:44:A9:1E:7F:65:D3:3D:00:E2:A2:7A:25:45:6B:3D:33:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C06734FCCC0711EF9B02F47F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.100.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3f:05:2b:ee:22:f0:c2:ef:64:e7:ac:1d:29:4d:46:a7:90:
39:0c:9e:2a:7b:c4:35:6a:52:48:e2:dc:05:d8:e0:5b:d2:2c:
77:2f:4e:ad:42:e2:da:b4:c1:22:2b:b5:20:b3:f1:b3:39:f2:
c7:ef:3a:54:0e:1a:6e:9f:50:34:02:1d:3d:d1:44:5a:02:53:
5f:84:9c:72:20:21:3a:bc:bb:c0:1b:5f:44:8a:01:87:ab:e8:
be:6f:a6:b3:8a:8f:01:fd:99:ef:37:f3:6f:88:7a:c9:84:e4:
2e:3a:35:bd:3f:01:40:e2:d9:5a:a6:7a:34:3f:41:ce:09:68:
8f:6e:80:3a:73:e7:38:36:55:b1:57:e1:97:2c:9d:b2:33:06:
c4:e3:fa:0b:2e:07:91:92:e0:96:32:f2:78:47:d1:d3:5a:3d:
3d:5e:47:a0:41:e0:b9:56:40:d1:68:98:e4:3d:51:91:cb:00:
05:e4:19:e1:bf:a2:11:8a:a1:7a:cd:a7:46:ae:80:e6:c0:e2:
89:3e:d7:e5:02:34:07:35:8c:b0:b7:f0:32:78:72:27:1c:99:
5f:5b:a3:ef:17:24:72:a8:64:69:e8:1b:18:3c:39:39:a5:79:
51:6a:7e:0c:18:97:71:7a:b9:f5:b5:81:bf:fc:1a:fd:99:ed:
6d:3c:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:23 2025 by rpki-client