Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6E4698EC28511EF8FC12097762E951A.roa
File: C6E4698EC28511EF8FC12097762E951A.roa (raw, json)
Hash identifier: FYzPhXfobX7KHtH9qbRIKL5slMYTpyyXsBRJUZRn95Y=
Subject key identifier: E2:2B:E2:E0:BF:DC:79:9D:4E:40:C9:51:21:1E:09:F3:A2:E2:7B:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E923
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6E4698EC28511EF8FC12097762E951A.roa
Signing time: Wed 25 Dec 2024 06:02:09 +0000
ROA not before: Wed 25 Dec 2024 06:02:06 +0000
ROA not after: Wed 10 Dec 2025 06:02:06 +0000
asID: 984
IP address blocks: 156.228.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59683 (0xe923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:02:06 2024 GMT
Not After : Dec 10 06:02:06 2025 GMT
Subject: CN=676b9fe1-9741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:af:04:97:29:51:d7:ca:ad:37:09:9c:78:
f1:c7:38:7b:9d:fd:cd:22:ac:0d:0d:b2:c7:a6:b5:
e3:2f:e8:95:b7:b0:8f:1d:f1:66:6e:95:ac:95:8d:
7f:02:1a:bf:8d:35:67:4a:2a:6e:2e:8d:6b:13:61:
d8:69:27:9f:70:df:79:22:93:16:da:24:33:96:1c:
5a:ee:64:8c:d5:6d:2a:a7:7c:b2:85:84:f6:11:37:
04:0f:04:49:1f:dc:5a:ab:01:ee:5f:15:3d:5f:12:
c2:e9:19:bb:58:be:a2:2c:86:51:aa:16:53:1a:12:
1e:7a:af:ea:d9:1a:08:3c:09:86:59:5a:8e:0a:b1:
1b:86:58:38:47:90:25:b9:c3:bd:14:76:2e:10:c9:
30:9f:ee:57:9e:54:51:61:17:cd:db:77:24:8b:6a:
e0:26:95:78:31:24:01:cd:55:29:19:66:0f:aa:36:
41:e6:4c:5f:3d:9f:dc:72:ef:35:e0:b5:55:a2:40:
48:a1:db:39:3b:27:b4:86:17:95:a1:39:ab:5f:bf:
77:46:4f:39:28:78:69:10:c7:a1:b9:67:71:e7:3c:
0c:58:c4:ac:79:4b:87:8c:51:a1:c6:34:67:3c:6c:
b4:55:0c:fe:a5:40:3a:59:e7:5d:f5:33:38:2d:dd:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2B:E2:E0:BF:DC:79:9D:4E:40:C9:51:21:1E:09:F3:A2:E2:7B:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6E4698EC28511EF8FC12097762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c9:fc:59:c9:fc:cf:f5:66:53:b6:06:8a:75:e7:3d:7f:71:
f3:50:81:40:aa:59:6b:6d:90:94:63:13:d9:80:d4:27:38:ce:
97:ee:7c:e2:7d:35:0e:20:22:85:a7:bc:9d:95:05:1a:f7:be:
b0:4b:8c:74:6d:8c:45:4e:7d:4d:f9:38:0c:29:86:6c:e2:4c:
af:d6:4b:83:cf:47:41:e7:32:66:5b:3a:87:31:44:51:b4:31:
2a:e5:cd:61:e2:bd:bf:b8:02:8f:4d:18:9f:f6:16:43:5b:16:
c2:7e:05:ba:19:dd:93:0a:28:36:c0:58:49:61:72:84:8b:eb:
70:99:15:0b:83:b1:1b:fe:f0:36:7b:fe:62:0e:84:3e:99:27:
d2:58:02:77:cf:78:dc:bd:07:02:81:27:be:d6:64:89:8f:eb:
67:d2:39:83:03:7c:ee:4d:bb:8f:a5:58:ce:25:75:57:39:88:
9b:ef:d1:0a:b7:af:26:17:e8:47:17:52:07:44:1f:43:49:2f:
ba:f3:b4:a1:da:55:c4:2b:27:ac:f4:5a:43:e6:f4:49:27:3b:
e2:1f:cc:36:f3:bd:7f:25:52:a1:d5:5e:56:e8:66:8c:53:f9:
97:d4:44:21:fd:73:42:43:be:b5:69:69:10:92:fe:20:29:ad:
f8:bc:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:00 2025 by rpki-client