Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6601B60CD6C11EF8446F268762E951A.roa
File: C6601B60CD6C11EF8446F268762E951A.roa (raw, json)
Hash identifier: 72XR5nImu29Aax52CPQdGKn4Buk+t00ah+KRdMujwcA=
Subject key identifier: F2:E3:30:B6:D0:B5:BC:71:60:54:B4:18:AC:F9:CE:1C:EC:B1:FB:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6601B60CD6C11EF8446F268762E951A.roa
Signing time: Wed 08 Jan 2025 03:00:54 +0000
ROA not before: Wed 08 Jan 2025 03:00:50 +0000
ROA not after: Mon 13 Dec 2027 03:00:50 +0000
asID: 17561
IP address blocks: 156.248.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65389 (0xff6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:00:50 2025 GMT
Not After : Dec 13 03:00:50 2027 GMT
Subject: CN=677dea66-b645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:b9:f3:ec:25:71:d1:ea:fc:a3:b2:42:c5:
e1:df:44:1c:6c:12:64:dd:e3:ea:8c:01:d7:72:86:
e9:bc:a2:2c:3c:5c:4d:1c:2d:a3:6e:4d:d0:e0:48:
59:9b:49:8e:a0:be:83:d3:2a:1c:5e:16:05:d0:2f:
34:8a:18:d7:87:7b:3d:88:e1:ca:80:34:90:4d:8b:
6f:0f:29:43:89:0a:5a:c6:05:5a:c9:97:d3:a8:99:
94:06:c6:25:a3:e7:92:19:fb:f9:2d:38:79:4e:c5:
50:25:c3:f7:67:39:3f:19:35:e7:be:52:16:12:37:
68:e6:64:ae:9f:6b:05:2a:4a:bb:68:80:1e:28:9a:
17:ed:c7:66:49:5d:89:33:45:9f:64:48:24:90:78:
f6:d0:4e:b0:e6:39:75:1f:1a:d0:bb:58:a7:09:05:
cf:5b:16:11:2d:e8:94:a9:43:1a:92:3b:64:33:c1:
af:61:bb:07:e0:68:03:d8:2e:bc:38:5a:8c:92:d3:
6a:75:d8:c2:bd:50:1b:48:d0:5e:5c:7a:89:90:a9:
85:12:4e:0e:a9:19:bd:5b:93:a8:64:8d:60:4c:b5:
5e:d4:d9:40:dc:f9:2d:3e:23:1e:fa:4d:c6:13:9e:
df:aa:02:d1:1f:71:3f:3e:ba:88:56:bb:35:1d:e0:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E3:30:B6:D0:B5:BC:71:60:54:B4:18:AC:F9:CE:1C:EC:B1:FB:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6601B60CD6C11EF8446F268762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.16.0/24
Signature Algorithm: sha256WithRSAEncryption
05:68:14:69:2f:5d:13:83:1e:b5:16:b6:a8:ad:19:15:21:f2:
ce:86:38:d1:6d:60:4d:15:32:af:04:36:11:eb:d5:e5:14:14:
0d:99:c5:96:a8:54:02:34:46:94:c5:31:4b:7b:2d:4a:0e:4f:
b5:dd:08:28:f1:0e:d1:14:51:91:65:3f:c5:13:cb:a9:5f:75:
2d:e9:51:15:6a:a8:6d:40:4e:71:df:97:1a:73:63:a3:56:7b:
ac:7c:65:34:1b:d1:5b:66:7e:b8:c4:d3:17:ac:46:05:95:de:
53:0f:87:b3:85:4f:43:5f:10:69:8b:cf:17:16:46:3b:28:0c:
f1:fa:98:95:e1:98:7b:3f:68:31:66:e6:21:71:90:be:04:c3:
42:44:c4:23:20:7f:29:c5:29:50:97:10:17:d4:92:68:da:07:
c9:7c:86:80:f8:eb:7e:c5:83:b7:b4:05:63:f8:09:d2:ac:e4:
94:06:e0:09:9f:7b:1b:ff:68:c9:20:e9:54:bb:16:d0:79:2a:
97:dc:0b:ce:c7:06:86:5e:ef:d6:da:9c:87:c0:26:5b:be:54:
2d:4d:ca:fe:20:01:58:db:db:2a:d8:f3:0b:2d:fd:a8:c6:9a:
6b:ba:a9:c5:19:a0:52:b5:c3:ed:c8:c5:3a:23:44:f7:13:66:
99:c6:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:46 2025 by rpki-client