Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7AF142B21411EFB7444982762E951A.roa
File: 0D7AF142B21411EFB7444982762E951A.roa (raw, json)
Hash identifier: cwCgZOh6UW9T3Il/cEor9QbZZMGKqSAnnVNj8mJNbfY=
Subject key identifier: B9:2A:78:10:AB:98:22:04:CF:6F:83:1A:A0:BB:60:A2:95:98:66:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7AF142B21411EFB7444982762E951A.roa
Signing time: Wed 04 Dec 2024 07:47:47 +0000
ROA not before: Wed 04 Dec 2024 07:47:43 +0000
ROA not after: Fri 24 Oct 2025 07:47:43 +0000
asID: 398704
IP address blocks: 45.202.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57148 (0xdf3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 07:47:43 2024 GMT
Not After : Oct 24 07:47:43 2025 GMT
Subject: CN=67500923-fdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8d:d1:de:d3:ff:dd:86:7b:af:3c:0e:eb:12:
82:97:e3:87:f8:a3:2e:24:01:72:99:73:90:92:fd:
72:02:0b:1a:a5:d5:6c:f0:a6:9c:7e:96:cc:54:b0:
89:52:bd:32:80:90:eb:b0:32:05:36:d3:6f:80:ed:
20:1f:e7:62:dd:14:35:6e:ce:5f:37:4a:fc:d0:08:
09:e1:54:56:7c:a5:9f:00:6a:ed:48:0c:d8:e1:70:
de:83:95:72:ad:1f:ed:3b:eb:a0:06:ad:e6:37:f9:
92:37:73:7f:69:7a:61:79:45:f9:b4:4e:20:ad:eb:
42:f1:4b:41:6d:df:62:09:00:5e:77:d3:44:a7:51:
8f:d1:c4:33:47:42:3f:a6:b2:4d:93:05:54:a7:94:
3b:9d:23:bd:15:d3:12:cd:e4:af:63:b4:a6:fe:69:
6f:86:81:be:9f:cc:8d:30:0c:f6:f7:fb:8e:69:32:
32:07:87:ec:0b:52:3d:94:3e:fd:e9:3e:23:ad:20:
b9:f6:9c:e2:1a:a9:69:f4:0a:1b:73:3d:dd:c2:ba:
d9:15:25:d1:8e:92:68:02:4d:d2:67:e0:db:10:c8:
b0:8f:74:80:46:d8:1a:d1:e2:bd:4e:36:50:dc:79:
b6:41:6c:04:ce:d6:a0:74:b7:90:c0:56:45:ef:c6:
cb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:78:10:AB:98:22:04:CF:6F:83:1A:A0:BB:60:A2:95:98:66:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7AF142B21411EFB7444982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.216.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:57:1c:d0:21:db:a9:ad:06:aa:d0:2c:73:fa:3b:f3:9b:96:
93:79:1c:a2:1e:48:c8:0f:7c:63:e5:cb:3e:0e:1c:9b:3c:31:
81:fa:ff:fa:bc:ec:48:13:95:de:b1:e1:e1:94:c7:1f:f8:5a:
4d:4f:f2:12:de:2f:62:31:6b:d4:a1:c8:92:c4:91:3d:34:57:
fb:68:1d:e9:df:68:e2:17:28:50:ef:e8:d1:e5:a6:f5:45:ea:
e6:df:86:f2:54:a6:e7:4d:41:52:df:73:43:ac:70:0f:6f:61:
bc:94:d7:79:a1:ab:ed:cc:b1:46:f2:cb:60:b4:c7:74:e7:76:
2f:b9:db:03:c6:38:ca:cc:dc:f7:ea:18:e0:72:93:0d:e3:89:
be:97:97:be:21:f1:21:62:d6:73:96:af:6f:86:fe:31:8d:cc:
f5:3e:e2:a4:86:32:9b:87:ea:2c:33:cc:5b:b7:fd:f3:24:51:
0f:d5:aa:58:80:b1:82:78:1e:7d:16:00:ef:8b:b9:15:4e:99:
96:43:6f:b4:5f:56:51:9f:27:ba:5e:f6:ac:66:68:a4:09:70:
15:77:a7:da:85:94:7b:ae:a3:3a:f4:a5:9b:f8:c2:86:d1:e2:
a9:e4:20:05:87:0e:27:6b:1c:52:5f:27:fa:2b:3a:c8:00:26:
6f:0c:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:04 2025 by rpki-client