Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/030B669ACCD811EFA01816AD762E951A.roa
File: 030B669ACCD811EFA01816AD762E951A.roa (raw, json)
Hash identifier: iiVrBnnzoTMgUKCkx4h7KZsGYGowNPui+fqVI9xgz9w=
Subject key identifier: 0A:F5:BE:36:34:5E:63:27:71:A9:8E:86:57:3A:E5:49:ED:F9:54:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/030B669ACCD811EFA01816AD762E951A.roa
Signing time: Tue 07 Jan 2025 09:16:01 +0000
ROA not before: Tue 07 Jan 2025 09:15:57 +0000
ROA not after: Fri 07 Feb 2025 09:15:57 +0000
asID: 214095
IP address blocks: 45.192.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64288 (0xfb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:15:57 2025 GMT
Not After : Feb 7 09:15:57 2025 GMT
Subject: CN=677cf0d1-c920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:88:e9:e0:39:bc:84:05:38:6b:19:98:24:
ed:15:0a:00:c9:c4:01:d0:d9:d7:bd:32:0d:25:5d:
da:bc:68:ab:a8:d9:e3:04:50:c5:d1:a9:0a:3f:76:
08:b5:a6:bc:98:6d:b2:dc:5a:5e:20:d5:94:22:4c:
78:d6:1d:12:9e:95:26:b0:8b:4a:aa:b6:95:1d:4c:
14:3d:89:1b:ff:35:94:c3:b7:92:a7:b9:e8:66:dd:
f4:a6:ed:a9:eb:c0:42:dd:91:b0:9c:94:4c:52:db:
df:f4:46:70:70:40:9f:07:e3:4d:25:ac:64:fe:3b:
f4:62:49:fa:5f:d3:00:44:b8:16:a3:a1:86:18:0c:
2e:5f:4f:92:0c:71:c1:6f:d3:71:ef:9e:4d:b5:98:
9a:61:c5:13:ad:64:11:d8:12:70:52:fc:c1:2a:59:
69:9b:7f:3e:55:0a:9a:64:2b:15:7a:36:ba:4d:c0:
d1:fe:dc:51:ac:0c:82:e7:30:11:03:71:a6:1c:dd:
bf:f9:5c:72:10:5c:10:de:6d:31:69:12:7c:5f:88:
81:11:79:36:53:6b:92:68:12:a8:7e:68:c5:5b:32:
c8:83:08:90:78:f7:1e:d2:0e:1c:cd:31:71:7f:e9:
18:60:81:6d:9c:4f:82:69:d8:53:17:5e:eb:a8:ab:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F5:BE:36:34:5E:63:27:71:A9:8E:86:57:3A:E5:49:ED:F9:54:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/030B669ACCD811EFA01816AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
17:67:cb:e8:53:96:fd:40:4c:ff:c5:bb:ea:62:fa:c6:02:61:
32:24:f4:64:b5:36:c3:5b:a4:a9:1c:34:04:df:12:94:c3:98:
3f:47:46:b3:5a:9b:56:dd:a0:88:a5:a0:27:37:66:ad:e8:28:
21:c9:3d:95:43:8b:f0:18:df:0a:4d:dc:0e:4b:5d:de:d6:b2:
38:4c:08:98:02:cd:5a:f1:a5:a5:20:9a:b6:cc:b9:98:78:f0:
6a:e0:e4:87:45:1a:c6:a7:95:26:41:9c:cb:23:bf:07:fe:d7:
90:03:2f:45:20:6e:a3:03:96:0e:a3:89:bf:5f:67:5d:32:ed:
8e:06:71:59:e1:e7:3d:db:f1:ee:c0:71:78:46:49:c3:ae:77:
42:ec:c0:0e:46:85:58:3f:4a:df:a2:4d:8a:c0:10:d7:47:5c:
50:d8:93:ab:e3:8a:34:63:24:f7:be:7f:28:10:0a:33:27:15:
be:8d:d5:eb:ae:5a:36:51:33:8d:d6:17:3e:52:f1:e6:0a:31:
22:b9:44:ad:95:1a:c3:86:22:4f:31:3b:81:82:39:8e:c9:90:
5b:a8:23:d8:00:8c:38:dd:c3:87:2b:08:0d:d3:e4:71:5b:84:
1d:eb:32:31:83:bd:5f:95:27:e1:04:db:c2:62:a4:1c:21:1e:
2a:9a:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:43 2025 by rpki-client