Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6FA3ADACD9E11EFA628BDA8762E951A.roa
File: F6FA3ADACD9E11EFA628BDA8762E951A.roa (raw, json)
Hash identifier: keyc0QTUduHBrpl/EVD80ri9HSga+VlBtlewm2uRiNo=
Subject key identifier: 25:70:23:C3:11:2A:A1:4C:57:16:19:10:7C:20:10:A4:06:BF:14:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6FA3ADACD9E11EFA628BDA8762E951A.roa
Signing time: Wed 08 Jan 2025 09:00:10 +0000
ROA not before: Wed 08 Jan 2025 09:00:07 +0000
ROA not after: Tue 16 Dec 2025 09:00:07 +0000
asID: 984
IP address blocks: 156.249.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65719 (0x100b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:00:07 2025 GMT
Not After : Dec 16 09:00:07 2025 GMT
Subject: CN=677e3e9a-57ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:36:b7:c8:07:59:88:a7:0d:14:b1:ca:68:
4a:4f:e7:92:23:f5:2b:9c:34:a5:72:f5:f0:87:fe:
73:42:a0:bb:cc:f3:9a:62:16:7e:81:c3:bd:0c:b1:
fc:69:15:df:40:01:55:a0:75:e9:6a:b1:f5:f7:e1:
4f:fe:a2:c7:ae:a0:f4:c1:00:e9:a3:19:dc:5f:2e:
5a:a4:d6:50:b6:c6:86:b0:b2:df:74:37:7d:ce:97:
6a:a3:06:39:8e:80:84:31:eb:b4:e4:ac:29:6e:cb:
b6:a3:07:b7:35:76:91:82:d0:53:9f:84:79:62:72:
6a:5a:96:88:79:37:49:b3:0b:12:ee:e5:df:db:43:
2c:68:18:38:d5:f2:a8:c2:2a:8b:1b:40:da:b2:cf:
55:6c:95:12:2f:ef:9f:6a:cf:7c:34:63:f0:7b:9e:
d8:ef:80:7c:44:fc:ec:4a:c3:cc:bc:7c:23:f6:b6:
0e:6b:37:ea:70:c3:fd:6d:6b:67:ec:0e:2f:34:c3:
1e:90:2c:35:bd:e2:d6:45:75:ca:cc:c8:15:43:cc:
bd:ff:1e:1c:70:25:70:f9:d1:a5:bc:aa:7d:1b:58:
b6:20:24:c0:9d:a8:51:c6:dc:ea:e4:12:41:16:2a:
e8:e8:e5:b8:cc:b1:83:a6:de:6f:57:3c:69:ba:99:
8a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:70:23:C3:11:2A:A1:4C:57:16:19:10:7C:20:10:A4:06:BF:14:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6FA3ADACD9E11EFA628BDA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.104.0/24
Signature Algorithm: sha256WithRSAEncryption
39:14:66:22:1b:12:e3:31:c0:c4:75:ce:0d:77:02:7d:c4:5b:
4d:8f:e8:3b:45:e9:d5:6d:db:d1:f3:3a:ce:28:d7:69:fd:e2:
82:ce:33:12:70:32:fb:41:6f:cb:e4:e8:64:ca:e6:b4:76:08:
c3:d0:98:8a:4c:1c:e8:f2:35:23:7c:87:54:18:fa:31:45:38:
53:ab:21:83:77:85:30:b3:30:6b:28:c7:af:56:16:73:e4:f6:
2a:38:1a:f9:f7:17:d0:25:16:b0:68:ca:86:3d:d0:9e:b0:60:
0f:dd:ab:84:98:b1:72:e1:05:b5:08:0a:c6:22:a0:43:85:9d:
23:2b:9c:68:83:a6:b5:cd:48:02:90:28:68:a4:e8:24:2c:ab:
43:30:e1:0e:ef:8d:3d:dd:e0:90:62:5e:8a:d9:4b:f4:70:ee:
af:72:e6:8c:56:54:90:d5:cb:d0:f3:79:3a:e2:61:2a:37:98:
78:87:87:46:93:c1:42:06:69:8d:04:53:1a:38:4b:4d:dd:46:
2d:e2:b4:00:9b:b4:27:d2:9f:25:7d:da:53:5e:e6:ef:c4:f0:
9d:fd:a8:12:61:75:ba:97:2d:a1:ea:dd:13:ad:ad:7a:32:a7:
03:a6:6b:03:f5:0b:03:4a:13:86:ae:e4:d9:6b:28:5e:f1:1b:
2f:65:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:37 2025 by rpki-client