Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01F41E14BDBF11EF92F63669762E951A.roa
File: 01F41E14BDBF11EF92F63669762E951A.roa (raw, json)
Hash identifier: JxF2qXFUq3kEqiiXnD8RKoaofHCZscIrwoIHBqNB3no=
Subject key identifier: 84:A4:83:95:78:A2:76:FE:90:58:B8:08:2E:34:7D:00:A7:90:12:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E563
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01F41E14BDBF11EF92F63669762E951A.roa
Signing time: Thu 19 Dec 2024 04:09:14 +0000
ROA not before: Thu 19 Dec 2024 04:09:10 +0000
ROA not after: Wed 10 Dec 2025 04:09:10 +0000
asID: 984
IP address blocks: 45.206.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58723 (0xe563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 04:09:10 2024 GMT
Not After : Dec 10 04:09:10 2025 GMT
Subject: CN=67639c6a-a776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:30:7d:f7:5b:bb:f6:4f:a4:b1:46:36:dc:
7c:aa:42:41:48:c3:54:a4:bc:c2:14:13:1b:95:5b:
5b:7d:64:5d:2f:43:3b:22:f7:c0:8a:74:e6:f3:a9:
8d:4d:74:5e:18:70:f7:44:ee:6c:99:ee:99:66:ad:
d8:dd:dc:49:40:9a:ed:19:44:f4:a7:12:73:0d:59:
12:45:63:79:13:e5:63:d7:70:3d:63:de:53:ec:2a:
44:1b:8a:22:1c:bb:9a:c5:24:3c:24:9e:4b:96:71:
e9:53:d5:48:e9:70:93:72:fa:6c:f0:30:77:ca:b9:
b3:a1:a6:15:f7:97:2c:05:02:b0:c4:8f:c4:9a:da:
7e:8b:e0:93:bb:36:6b:b8:cd:9d:a3:f2:99:65:f7:
37:3b:f0:9c:66:21:12:fc:6a:6d:f2:91:fe:71:4a:
64:5b:4e:7a:3c:0f:2a:f7:b0:f0:82:f5:9d:f7:f5:
6c:b6:f5:59:d4:ab:09:af:36:41:90:7c:20:c6:de:
e5:33:ca:ea:21:e1:57:53:07:83:45:f8:8c:9b:46:
af:78:73:98:0f:f3:ac:a6:73:de:17:f6:86:79:1b:
ac:8f:13:5b:d2:cb:2f:6b:65:0a:ea:12:cd:ac:21:
63:da:e7:d0:28:1f:b6:fc:f6:2f:4a:eb:18:ed:ec:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:83:95:78:A2:76:FE:90:58:B8:08:2E:34:7D:00:A7:90:12:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01F41E14BDBF11EF92F63669762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.84.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7a:f2:ec:c4:f1:60:55:e6:43:56:96:47:8e:e4:ad:f1:01:
4f:04:f3:6b:d6:17:2d:e0:e1:99:4e:cb:80:93:ea:9f:90:72:
fb:5c:15:e6:b0:e2:22:9c:39:3f:8d:4b:22:b0:8a:cd:45:95:
5f:5a:8c:95:b4:29:85:31:84:7f:bf:e3:38:8c:dd:0f:57:c1:
fa:65:a0:20:4d:c1:89:4a:6f:c4:23:b4:c4:e6:fc:ce:25:86:
98:f4:a0:c3:c2:84:2c:82:8f:5e:e6:1a:03:c9:3d:f0:06:75:
f0:8b:60:dd:e3:57:13:19:0e:5d:2a:43:62:7d:52:16:5d:2b:
6b:3a:62:38:8c:0c:15:e9:ba:5d:ff:4a:32:a6:b2:66:fd:81:
90:0e:b0:96:8e:82:b0:b9:18:7f:1d:5e:99:66:d3:36:50:5f:
2c:d8:b3:df:87:37:79:f9:f8:93:19:f5:b3:20:fe:dd:a7:84:
24:27:c3:ba:0d:89:6f:19:fb:b7:53:00:a5:c0:7d:af:0b:a0:
9c:f7:9f:47:d7:cc:d4:7c:80:1a:e3:dd:d5:50:ff:81:f4:6e:
42:3a:11:d8:50:e9:01:02:1f:cc:b5:2f:e4:42:8c:1d:0a:bf:
95:7a:0a:65:0e:a3:b6:8a:68:9a:65:9c:38:be:c5:71:51:52:
82:06:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:21 2025 by rpki-client