Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/047B1AC0D15611EF93E0A2AF762E951A.roa
File: 047B1AC0D15611EF93E0A2AF762E951A.roa (raw, json)
Hash identifier: 7bFfgdn5uToULw2E+LshOBLhY1UT9jWPO68BXBcWB88=
Subject key identifier: 90:F9:F5:F5:7C:02:3E:4B:5A:ED:74:21:6D:6C:AE:50:72:52:96:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010650
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/047B1AC0D15611EF93E0A2AF762E951A.roa
Signing time: Mon 13 Jan 2025 02:28:04 +0000
ROA not before: Mon 13 Jan 2025 02:28:01 +0000
ROA not after: Thu 13 Mar 2025 02:28:01 +0000
asID: 17561
IP address blocks: 45.200.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67152 (0x10650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 02:28:01 2025 GMT
Not After : Mar 13 02:28:01 2025 GMT
Subject: CN=67847a34-48b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:b4:44:11:da:42:df:c1:f6:96:49:fa:71:
1b:64:79:33:eb:a0:cb:d3:45:7a:88:88:19:7b:95:
56:fd:e5:18:5f:d5:ea:60:80:98:c8:85:05:7f:1f:
48:2e:40:ca:47:86:ab:19:e0:dc:b4:93:b3:e1:43:
ca:29:2b:62:e8:24:1b:a0:de:55:69:9a:68:06:f2:
69:f4:61:7a:ac:9f:f0:5f:5a:e1:91:1c:52:ee:ff:
7b:7d:f9:ae:74:9d:66:8d:3b:3d:8e:e5:f4:f7:fd:
32:b7:94:60:a3:17:3a:3b:3a:60:c4:f5:7a:b1:c6:
2b:f4:10:a8:c0:b1:37:49:02:34:28:29:c2:98:70:
12:32:3a:37:2f:a3:2d:ef:1d:74:15:37:9c:c8:46:
df:ec:77:af:7e:63:de:11:2d:7a:6f:6d:5e:70:12:
7d:d9:ed:6b:90:93:9e:bb:1b:e0:41:71:05:5e:ee:
b6:7c:da:e3:a3:b5:f4:46:22:8e:3a:68:1c:10:09:
f5:1b:76:97:ea:99:89:4c:4c:3f:28:a9:7e:a5:62:
84:10:34:0a:c3:08:c5:23:9a:0d:ac:0f:9f:26:2f:
53:41:c6:ae:ef:ea:bb:36:b0:e3:93:ba:15:fc:71:
21:ad:61:d6:9f:8c:65:f3:14:15:28:ce:99:45:c6:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F9:F5:F5:7C:02:3E:4B:5A:ED:74:21:6D:6C:AE:50:72:52:96:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/047B1AC0D15611EF93E0A2AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.148.0/24
Signature Algorithm: sha256WithRSAEncryption
35:16:69:b8:b1:50:60:b0:6a:fb:49:22:b5:ba:6a:7b:89:5a:
bb:31:78:02:42:4a:e6:90:2f:39:3d:6c:3b:15:f7:93:c0:7b:
d9:c2:1d:97:3e:0e:f9:60:9d:cc:a9:bc:5a:90:f2:91:7e:2a:
bd:a2:f1:73:d8:55:4f:c4:44:44:72:57:76:0e:32:be:95:fe:
f8:2d:55:2b:cb:d7:d9:ac:50:70:d5:1a:e5:95:bb:8f:03:7a:
5a:f9:72:e4:e5:9c:17:c6:3d:d6:4b:59:5e:58:86:db:ae:1f:
01:88:75:6e:7e:8a:fb:8e:d3:a2:86:f4:58:5f:15:8d:22:29:
d7:a4:ab:58:7d:87:e7:3a:1e:42:53:31:40:55:70:37:48:af:
32:cb:0e:68:a1:9e:14:be:c8:d6:c8:b5:82:8e:11:02:14:bc:
b3:df:90:5e:6b:45:db:f9:ff:14:66:4c:8e:69:94:dc:62:29:
9f:1e:4a:14:89:34:95:f7:58:2d:b3:f3:c8:a2:01:23:13:8f:
eb:d0:b6:32:cb:59:b8:d2:e8:b5:ba:f5:78:82:4e:b6:82:98:
7c:d5:ee:28:20:29:ea:48:59:a7:69:d2:9e:46:95:ea:e7:df:
a3:24:1c:c0:ec:71:de:05:bf:c3:a6:97:11:07:1b:1f:a7:6e:
ec:aa:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:11 2025 by rpki-client