Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/083426EABE8A11EFB33EB664762E951A.roa
File: 083426EABE8A11EFB33EB664762E951A.roa (raw, json)
Hash identifier: w1HNR2WBSLMMD9trTJHYLC85lf2BmcyBv7jAN4T0RHI=
Subject key identifier: 18:96:1A:1A:AE:98:BC:31:76:2D:50:D2:9E:A9:88:6F:77:78:BD:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E6B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/083426EABE8A11EFB33EB664762E951A.roa
Signing time: Fri 20 Dec 2024 04:22:32 +0000
ROA not before: Fri 20 Dec 2024 04:22:29 +0000
ROA not after: Wed 10 Dec 2025 04:22:29 +0000
asID: 984
IP address blocks: 45.206.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59064 (0xe6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 04:22:29 2024 GMT
Not After : Dec 10 04:22:29 2025 GMT
Subject: CN=6764f108-23cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:b7:04:70:4b:d5:b2:b5:8a:4c:f5:15:b9:
aa:10:0f:98:0f:b1:8f:64:c3:2d:6e:85:76:f7:3b:
a6:c1:b3:ca:79:8b:80:f8:6a:b4:b9:da:b1:a2:a5:
c6:60:97:2f:10:8d:89:a8:d2:82:40:48:37:c9:74:
97:a2:db:28:58:41:01:68:24:7a:9c:ac:fd:57:c3:
0a:ab:64:99:ee:f5:c2:97:df:6a:1d:85:99:51:a1:
0c:60:a8:93:bc:2c:18:67:95:72:51:b9:55:28:d3:
9d:54:e2:38:a0:32:e6:c1:53:c8:98:dd:4f:7d:43:
8f:e5:29:1e:b1:95:d6:4a:6b:3d:06:09:a2:af:77:
dc:64:f3:51:16:8e:39:e1:c9:5c:e0:13:48:40:0b:
ef:7b:9a:d7:66:cf:ce:03:71:52:b1:e1:a7:dd:1d:
52:58:a9:b0:29:07:80:f8:7e:5f:c3:c4:5f:b1:51:
e3:7e:f4:f2:d3:38:9e:17:83:25:1c:36:4e:a6:dc:
d1:3b:88:ba:00:77:d6:4f:3c:3d:37:ab:f9:a2:0c:
9d:ed:90:20:29:fa:11:3e:71:56:75:19:c7:34:1d:
ea:0f:1c:5a:0a:f0:32:90:11:96:44:f4:3d:22:3c:
31:b0:2c:d6:72:e8:60:a5:14:2a:ac:15:b7:0f:f8:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:96:1A:1A:AE:98:BC:31:76:2D:50:D2:9E:A9:88:6F:77:78:BD:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/083426EABE8A11EFB33EB664762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:20:7a:63:ae:94:b5:be:5c:3f:3d:3e:0d:7a:01:a7:75:d8:
da:54:bd:02:da:01:4f:5d:c2:b2:21:03:9d:8b:e2:de:fc:53:
07:0c:e6:9c:4e:43:6a:17:37:80:88:87:db:24:66:7c:16:1d:
34:e8:e3:82:23:0f:6b:09:d7:70:5d:7c:5a:10:21:7a:60:c9:
3c:74:64:02:47:07:6e:8d:39:2e:e7:95:46:41:dc:47:d4:ae:
a9:82:9a:fc:61:9d:47:b0:9e:0d:c3:7b:e9:38:19:ac:32:d5:
14:61:2c:fa:3a:45:3e:51:d9:c7:7f:bc:b4:30:70:59:33:b7:
1f:2e:6a:47:e9:4f:ab:e9:58:f7:18:4e:89:7e:23:e2:31:f1:
01:c4:19:7e:0a:6c:d7:4b:7e:05:86:23:a0:67:2b:ae:10:8d:
13:d9:f5:fa:2a:32:40:7a:e9:9b:6f:f8:1a:5a:b3:9d:42:1b:
24:47:a5:c7:a5:6f:3a:de:14:70:38:34:a2:4b:6d:cc:d6:e0:
0f:67:7d:a3:67:c1:f1:50:5a:04:7e:f8:61:39:08:93:34:62:
d7:2a:85:08:5c:d1:f5:49:7a:f2:73:4f:75:2d:d2:da:9f:6d:
da:83:18:5b:5d:26:40:c4:ee:ef:0e:88:12:b4:b0:9c:bd:e2:
1e:a9:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:09 2025 by rpki-client