Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09B5317CBDB711EF8985D1B3762E951A.roa
File: 09B5317CBDB711EF8985D1B3762E951A.roa (raw, json)
Hash identifier: f5GiEcsihRp9Ya/TPuTswdaBSpfEA8ygSL8Tfai1AbI=
Subject key identifier: 81:26:34:10:5B:29:65:C1:F7:09:D7:CF:4B:65:29:DF:A8:FF:6A:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09B5317CBDB711EF8985D1B3762E951A.roa
Signing time: Thu 19 Dec 2024 03:12:11 +0000
ROA not before: Thu 19 Dec 2024 03:12:07 +0000
ROA not after: Wed 10 Dec 2025 03:12:07 +0000
asID: 984
IP address blocks: 45.204.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58621 (0xe4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:12:07 2024 GMT
Not After : Dec 10 03:12:07 2025 GMT
Subject: CN=67638f0b-61f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:3c:76:c5:bc:7b:0e:0a:e3:8c:5b:ec:d1:
ed:c3:6f:70:a2:04:01:d4:f6:29:0e:65:86:e3:3c:
8a:ac:4b:4a:a9:e5:44:f2:d3:85:90:0b:3a:46:aa:
16:27:b1:9d:ac:4d:cf:7b:24:2f:9c:46:49:18:84:
8b:51:b5:ee:84:9a:28:9e:48:c3:ae:8b:95:a5:d7:
6a:28:e9:c9:5d:16:2b:37:05:ac:9b:f6:c0:aa:5b:
a9:6c:49:f5:31:1c:ec:6c:37:3b:0c:61:28:1e:c1:
26:87:b9:ba:29:34:9a:96:5f:a7:74:72:d0:0c:c4:
db:0c:c8:2c:63:49:09:17:07:03:58:c5:6e:16:81:
d9:f8:65:35:b7:7b:10:be:01:3e:6d:7f:71:62:e1:
02:f6:20:1f:d6:52:d3:f9:ac:73:77:e7:3f:b4:db:
06:d8:20:39:15:8d:79:f9:e4:3e:3e:a7:79:33:c1:
0c:44:4b:50:fe:71:bb:6d:5f:2f:cf:c9:32:f5:14:
17:bb:18:d5:87:f0:ab:1d:a0:ef:a2:ac:75:27:06:
f5:0f:e3:e0:13:8b:a9:02:65:e7:cc:89:48:b6:21:
a7:ca:90:a8:a1:e7:fa:c7:84:09:2e:5b:d9:16:ed:
60:21:90:f9:fb:d5:6c:e9:66:1d:4e:06:b2:74:5e:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:26:34:10:5B:29:65:C1:F7:09:D7:CF:4B:65:29:DF:A8:FF:6A:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09B5317CBDB711EF8985D1B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.171.0/24
Signature Algorithm: sha256WithRSAEncryption
10:71:94:6e:64:e1:4d:82:8f:92:49:56:29:e2:ea:9b:78:de:
95:7e:04:78:50:9f:ae:cc:f2:29:51:41:b8:f3:eb:d7:05:ac:
da:18:fa:ea:1e:c1:a1:bf:10:40:ee:76:60:cb:5f:8b:13:6b:
b8:92:48:d5:8a:ea:e9:aa:eb:84:31:1c:2c:3c:0f:30:18:ac:
7c:88:12:0f:1d:1d:6e:29:18:bb:36:35:8a:c3:79:03:ef:48:
88:a9:f7:c4:1f:e5:aa:0d:01:bc:61:70:9d:a2:4d:2e:e2:14:
e8:83:e8:53:97:4e:e1:9e:3d:ca:47:d8:eb:4b:8b:a8:a2:d9:
04:2a:92:0b:26:0e:10:de:05:cd:90:d1:6a:3e:5e:31:b5:cf:
60:f8:5f:df:63:f1:cf:73:58:79:a8:44:84:e6:37:dd:35:12:
34:03:8a:3d:0f:9e:47:85:bb:27:eb:63:4a:ae:16:c8:fd:b0:
d8:bd:d5:b0:3b:0b:9a:87:d2:63:58:02:0d:15:af:4e:f4:cd:
8f:85:5d:c2:0f:a4:07:dc:68:ac:21:be:b1:29:f0:4d:06:4d:
15:5a:07:60:a8:aa:55:7d:c1:99:18:29:fd:9f:a1:f4:02:04:
67:e2:60:ec:fa:ea:81:85:3b:f5:b3:43:54:46:ca:ae:76:51:
a4:42:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:47 2025 by rpki-client