Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC7F6138D4B611EFACA2F852762E951A.roa
File: EC7F6138D4B611EFACA2F852762E951A.roa (raw, json)
Hash identifier: hafINKYDmb9sz+LvdI3ISuGqujYXXypJu918PtgL0Bc=
Subject key identifier: 92:AF:12:FF:71:5B:80:79:52:3B:D4:73:48:CA:B8:9B:65:86:97:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010963
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC7F6138D4B611EFACA2F852762E951A.roa
Signing time: Fri 17 Jan 2025 09:39:19 +0000
ROA not before: Fri 17 Jan 2025 09:39:15 +0000
ROA not after: Sun 14 Dec 2025 09:39:15 +0000
asID: 23764
IP address blocks: 156.242.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67939 (0x10963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 09:39:15 2025 GMT
Not After : Dec 14 09:39:15 2025 GMT
Subject: CN=678a2547-d9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:25:35:94:ad:0c:9a:5c:37:b2:6c:d0:a3:
9a:46:81:ae:98:41:a6:b1:5c:1a:1b:41:ed:4e:24:
e8:f4:4f:24:ad:18:b6:7d:ef:14:c5:07:75:84:1d:
74:c9:e5:82:bf:e5:7b:7b:9d:03:e9:33:d7:de:ab:
b2:ed:88:18:fd:0d:38:3d:8b:fc:7d:94:90:17:5a:
a1:fc:b0:30:c0:99:52:e9:12:6d:6d:04:ba:a7:68:
c8:34:cd:02:0a:e2:a5:5e:b2:bf:1e:84:0b:5d:95:
69:12:1f:35:c7:d0:00:e9:f3:ec:8b:10:26:4c:cd:
48:05:21:ef:4e:11:c4:2e:44:22:9b:08:23:41:bb:
7b:57:4b:56:6b:71:31:f8:90:c7:df:5c:45:88:49:
34:dd:6f:b1:c7:af:3d:1c:03:37:9f:c3:2e:54:98:
5c:89:0e:19:96:30:04:14:56:05:02:ca:e3:d3:c7:
8e:68:9d:63:7d:a9:bc:02:28:94:a2:78:86:88:56:
03:f5:c9:95:25:b8:ab:2f:9c:a1:f5:7f:95:11:27:
f0:85:9c:8d:11:ac:b7:1e:3a:80:5a:83:6a:83:fc:
33:13:9a:3e:01:e7:ab:3d:9f:5d:71:50:6e:77:6b:
f2:9d:2b:ef:06:ca:af:05:1c:c2:12:c5:ce:15:9d:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AF:12:FF:71:5B:80:79:52:3B:D4:73:48:CA:B8:9B:65:86:97:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC7F6138D4B611EFACA2F852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5e:df:30:51:4d:49:6d:d4:1a:78:01:83:e5:c9:44:b0:4f:
8c:d7:37:63:f2:91:30:03:4e:b5:19:ab:2a:0a:68:21:6e:a9:
ab:b4:8d:a6:4e:b4:94:fb:60:2d:51:f9:e1:50:f8:89:c8:9d:
82:1f:36:e1:3b:79:2d:a2:a1:4a:c6:60:f1:c5:86:d2:db:5e:
0d:2a:b9:be:8d:1f:9a:0c:b6:ab:18:94:9a:50:19:a6:7c:ed:
7e:a4:ed:21:fa:fe:c5:bc:a2:b0:61:7c:a3:e5:6c:18:e6:a1:
8b:39:db:27:18:ec:f5:b1:c5:71:56:9c:e2:86:1e:1b:fe:04:
e8:74:ab:bb:70:63:be:3b:32:56:f3:76:8f:92:61:ad:8e:37:
f1:8b:84:32:c2:00:11:ef:9f:68:1a:87:34:2d:f7:7e:29:a6:
3d:35:c6:b1:5e:e0:74:b6:b4:58:fb:81:24:c1:39:cf:f9:55:
92:31:e3:aa:9c:00:09:cf:5e:ae:2b:4c:0a:cb:16:90:69:8c:
b0:a2:e2:08:a0:8b:3b:f5:38:7b:f4:34:6f:2b:22:35:74:68:
15:91:5b:be:97:22:56:1f:25:41:df:ae:a0:3e:24:ec:27:85:
2e:a5:67:2e:40:17:e5:d6:2a:98:c5:22:be:fc:e4:86:c2:aa:
82:e5:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:02 2025 by rpki-client