Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6E5D9D4C33111EF8E35CD55762E951A.roa
File: C6E5D9D4C33111EF8E35CD55762E951A.roa (raw, json)
Hash identifier: aqLRzqcCOniaAbeD4P7iWCQiIyWpGl/8pshRbQkedJ8=
Subject key identifier: A6:18:9D:D5:A0:56:5A:91:F0:07:56:18:08:B7:92:CF:02:95:D5:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6E5D9D4C33111EF8E35CD55762E951A.roa
Signing time: Thu 26 Dec 2024 02:33:23 +0000
ROA not before: Thu 26 Dec 2024 02:33:19 +0000
ROA not after: Wed 10 Dec 2025 02:33:19 +0000
asID: 984
IP address blocks: 156.244.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60183 (0xeb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:33:19 2024 GMT
Not After : Dec 10 02:33:19 2025 GMT
Subject: CN=676cc073-7478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:71:06:6f:de:f3:16:41:1e:04:10:dd:0a:
ec:cc:f1:02:9f:b1:46:15:63:48:62:89:c2:b9:3a:
bb:8a:e3:5d:35:84:8e:c4:e9:2b:02:bd:67:cf:50:
89:58:2c:eb:e7:9f:d9:5b:26:56:6c:1b:7f:71:5a:
91:b8:a3:f5:a2:0d:29:3f:87:42:9c:d3:49:8f:ee:
5a:4a:55:eb:1e:fe:02:13:8f:ce:ea:2c:d2:d8:9f:
6e:fc:1f:ff:6e:d7:a6:eb:5c:dd:2b:0e:6f:36:ac:
a0:9e:c8:a2:0f:b0:e7:fd:21:b3:99:b5:02:b4:6b:
7f:6f:ae:a5:48:26:0b:e9:13:25:4e:ae:52:4e:8f:
d1:65:a3:bf:39:b3:4a:df:6f:3c:db:02:11:da:1e:
a1:cc:bd:c7:c0:24:f5:7e:06:cb:51:88:54:c9:84:
dd:5e:28:69:ec:8b:02:0f:10:ff:bc:bc:b5:af:a3:
7c:67:bc:99:64:ec:78:c6:bf:99:bd:cb:d2:a4:41:
57:f7:88:ed:d3:72:b1:76:f8:2d:14:b0:45:5a:56:
6f:f7:7a:b4:dd:78:ea:e9:5d:b7:91:16:b2:ba:83:
16:d4:82:95:7e:33:91:8d:f9:a6:1c:3a:d2:f1:05:
a1:60:a6:ae:94:71:80:1b:94:b0:cb:2c:17:55:27:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:18:9D:D5:A0:56:5A:91:F0:07:56:18:08:B7:92:CF:02:95:D5:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6E5D9D4C33111EF8E35CD55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f8:24:1e:94:ca:7d:e0:c1:67:5a:e9:36:40:0c:20:ce:8a:
eb:83:60:af:60:b5:71:7e:b0:1f:96:46:f6:70:90:1e:fc:0e:
71:34:30:ed:04:c6:e9:41:9b:fa:9f:8f:8b:f2:b0:8c:67:a0:
7c:74:8b:ab:7a:ab:bd:2a:5a:2a:6a:1e:a1:c3:32:91:9a:da:
89:04:b6:80:39:89:30:0c:98:7b:fa:ee:f7:b2:b2:6d:ae:7b:
40:22:91:e3:3f:1b:8e:77:8c:e7:39:0c:63:69:c4:06:3b:b4:
f0:ce:88:b3:b6:ee:1c:42:43:1a:a3:76:50:19:52:fd:61:49:
26:47:d0:89:04:7c:b9:ee:a7:00:4c:ec:b4:68:65:12:12:54:
d0:95:2c:ab:1d:fc:f7:fd:e6:c6:95:2c:ac:07:4d:5e:5a:d2:
32:76:9f:d1:4c:01:b6:e5:f0:fa:61:bc:17:1c:aa:8d:67:e8:
98:ac:ea:a3:e1:75:2d:b6:44:7a:f3:85:49:89:05:ec:d5:a0:
35:5e:15:9f:6f:d0:76:69:7c:cd:10:60:b6:3a:28:51:5f:d3:
f4:21:64:e8:39:6d:d6:c8:54:00:6d:62:49:4b:e1:98:0b:6e:
86:44:b6:fc:0f:9d:75:da:98:10:42:dd:55:96:7c:2e:ff:7b:
d8:86:96:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:17 2025 by rpki-client