Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AEA5952CDB411EFB79067AD762E951A.roa
File: 0AEA5952CDB411EFB79067AD762E951A.roa (raw, json)
Hash identifier: Vs9wkzzuDNB2+lXOntQkMDXyG0eweR3xZGXdQNBOZgY=
Subject key identifier: E0:3C:B5:94:7A:CE:17:3C:6E:47:B5:1C:21:90:B0:66:AE:36:19:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010197
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AEA5952CDB411EFB79067AD762E951A.roa
Signing time: Wed 08 Jan 2025 11:31:03 +0000
ROA not before: Wed 08 Jan 2025 11:30:59 +0000
ROA not after: Tue 16 Dec 2025 11:30:59 +0000
asID: 984
IP address blocks: 45.205.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65943 (0x10197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 11:30:59 2025 GMT
Not After : Dec 16 11:30:59 2025 GMT
Subject: CN=677e61f7-a039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:60:e6:c8:43:dd:19:7a:29:91:aa:e2:a2:
52:45:37:98:95:79:35:12:49:ce:03:fe:c4:ee:f5:
33:a9:4c:af:67:21:99:36:47:1a:b3:96:5f:cc:ea:
13:a5:97:3b:56:c4:c9:01:19:16:1f:8a:5b:67:a3:
3e:9a:4e:fa:d5:44:e1:c7:13:b6:f3:cb:7d:36:ab:
7e:5d:f6:10:e7:dd:d0:a2:5d:fd:33:8f:26:ed:c4:
42:2e:9f:0f:2f:83:78:95:5b:33:48:1a:de:27:81:
98:ca:5f:46:49:93:b6:58:71:b3:96:3c:3e:44:94:
51:68:48:88:da:3d:1c:d4:90:93:3f:14:35:1d:96:
d6:eb:c7:5c:e0:fd:51:4f:b6:84:2c:04:01:ee:d3:
7c:09:ee:35:f8:38:d4:cd:d7:73:5f:a5:ea:63:0b:
98:09:55:98:42:5b:41:9f:e3:df:45:17:7f:dd:f4:
8f:33:01:25:da:d4:f3:15:40:c6:fe:44:cb:79:0f:
56:58:e4:84:ed:ec:29:ed:af:e2:b9:dc:ac:ca:3a:
9e:c5:41:1b:f3:c1:17:40:2e:b5:30:f4:75:07:5c:
7e:b8:90:06:17:67:17:f8:a6:37:f6:a2:69:b8:02:
23:a6:56:71:12:de:00:bc:81:ec:4a:71:bb:98:bd:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3C:B5:94:7A:CE:17:3C:6E:47:B5:1C:21:90:B0:66:AE:36:19:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AEA5952CDB411EFB79067AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.109.0/24
Signature Algorithm: sha256WithRSAEncryption
34:34:7f:ba:38:ff:48:3f:9e:f3:25:d3:62:25:c3:a8:1b:ef:
ab:e6:42:72:30:1c:f3:b0:05:d5:94:db:13:02:3a:ab:18:9a:
e4:be:07:0e:9a:5d:f5:e4:e3:aa:7a:c9:6b:35:74:2c:45:02:
c8:9a:6e:d5:75:e4:7c:0b:80:8f:9c:db:a4:1f:c1:36:13:05:
40:79:dd:9f:fa:66:a2:28:2a:3e:53:c8:14:5b:a3:ae:50:3f:
33:c1:6f:8c:e4:28:bc:5c:4e:57:82:bb:2a:5a:a9:37:d2:2e:
b6:1f:02:57:0b:09:3d:27:21:a3:b9:50:0c:1a:57:8e:7c:2a:
83:ef:46:8c:27:3c:5b:40:a5:56:09:40:dd:33:60:9c:f3:ca:
b9:71:6b:9f:cb:8a:02:ac:4c:8b:b0:8d:b4:42:e0:6e:92:aa:
73:50:2a:5e:96:ac:9c:4f:ea:7d:34:5a:f9:14:ba:0d:f5:83:
04:06:33:e9:f4:c2:ac:48:b0:6d:7d:be:17:10:9d:19:53:fe:
7d:f7:6a:a3:32:b9:87:2e:b0:17:fb:35:6b:cb:9e:36:51:0e:
54:11:85:1f:43:ec:17:19:6b:d9:f3:a9:0b:f7:5f:2d:68:25:
22:5a:9c:12:a7:e3:d3:96:72:f7:12:ec:6e:80:94:3d:17:c0:
12:e2:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:50 2025 by rpki-client