Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F8B2FD2BDF011EFB378EE98762E951A.roa
File: 0F8B2FD2BDF011EFB378EE98762E951A.roa (raw, json)
Hash identifier: jzVSOH262eM+SGH6EtI8/V4Mqkv9LD0XFhe4gzcURrA=
Subject key identifier: 59:9F:FF:FD:9F:A0:F5:73:86:FE:44:61:7A:90:B1:F4:41:93:BA:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F8B2FD2BDF011EFB378EE98762E951A.roa
Signing time: Thu 19 Dec 2024 10:00:22 +0000
ROA not before: Thu 19 Dec 2024 10:00:18 +0000
ROA not after: Wed 10 Dec 2025 10:00:18 +0000
asID: 984
IP address blocks: 45.206.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58867 (0xe5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 10:00:18 2024 GMT
Not After : Dec 10 10:00:18 2025 GMT
Subject: CN=6763eeb6-f0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:7a:42:34:92:a5:c8:ed:c3:5d:59:9b:0b:
82:47:2a:f8:61:5c:33:c4:9e:ff:bb:73:5c:58:92:
ef:43:90:d1:18:b5:02:df:2c:8a:6d:05:aa:cd:96:
8e:80:1b:41:4f:fd:04:d6:8f:e8:f8:fd:5d:72:f2:
1d:36:f7:29:48:90:33:97:8f:91:bd:9f:dc:81:cb:
40:ca:89:ca:41:3f:17:15:9b:7b:85:04:81:ca:25:
8a:21:18:ca:08:4d:61:6f:b7:ab:bc:63:40:dc:9e:
de:9d:5d:34:10:c5:6f:e0:ee:97:d6:14:56:75:59:
79:74:ce:27:64:23:9f:a9:88:68:0d:f0:c2:dd:b9:
7e:72:bd:5b:0f:de:00:14:7e:21:b2:86:f5:b6:10:
83:6b:c8:a8:7e:73:1a:ed:b2:5a:b9:51:42:b7:3b:
7e:fa:de:a0:58:31:c6:64:a3:52:d7:91:14:44:90:
18:ef:28:cf:6e:71:2e:c9:a7:01:1b:43:b7:9a:d0:
5e:0b:c6:24:bc:3e:1b:40:db:6b:a5:bb:04:8d:7b:
5f:6e:11:df:0b:0c:ea:3a:d5:b7:0f:ce:71:ee:ec:
3e:66:be:1b:9a:c0:e0:a7:97:56:49:e0:e2:49:b1:
c5:49:79:ef:55:86:0e:fd:98:70:01:5f:17:fc:92:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9F:FF:FD:9F:A0:F5:73:86:FE:44:61:7A:90:B1:F4:41:93:BA:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F8B2FD2BDF011EFB378EE98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b3:33:1a:c8:ec:0c:e7:a2:99:33:c7:0e:f9:ec:60:ac:9a:
e2:59:3b:4f:ff:7d:0d:55:c6:4d:72:50:29:3e:25:e5:0e:d7:
b4:b2:ea:cd:86:59:e8:1d:13:0a:71:21:86:d7:a4:a7:43:35:
17:5d:0b:90:80:b4:7d:14:6e:a0:57:dc:2a:1f:58:1b:ff:ff:
04:f1:b4:8f:3f:44:ae:09:97:76:68:34:69:67:7c:63:ad:92:
7e:f6:e7:49:03:9d:bc:e8:9a:87:a7:8a:1a:0e:6c:22:7f:a5:
c3:3c:fd:ee:1b:45:97:d9:5f:ed:3c:3a:95:4d:45:00:dd:f6:
7d:49:ac:14:96:48:e8:d9:da:91:ec:f6:36:33:ff:13:1a:90:
5e:88:ca:f5:50:79:23:4e:36:eb:f6:8a:a3:9b:91:09:43:09:
be:a6:e1:bc:b3:39:f2:4a:4e:e9:e0:2d:bf:9b:b7:63:16:ca:
e8:b2:5a:68:26:b0:bd:76:35:fa:4f:3b:e7:e9:3f:5e:9c:35:
40:53:78:2a:9d:50:8f:1d:5b:f2:45:49:2d:2e:af:a3:0c:29:
b8:1e:fb:b5:2f:b4:41:29:61:0f:cc:f5:2c:eb:86:4e:41:10:
3a:8e:22:9a:fb:60:fb:f9:cd:e5:d3:68:69:0f:47:30:e8:d2:
61:20:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:45 2025 by rpki-client