Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FAE3718BDB211EFB691BB91762E951A.roa
File: 0FAE3718BDB211EFB691BB91762E951A.roa (raw, json)
Hash identifier: DqVdovxyjkLXtfjUVGf+C5cRSN3Dpo7mZJdHx7f7OCQ=
Subject key identifier: 01:81:A0:29:97:31:9A:2B:73:13:81:9B:65:F3:5F:01:A7:8D:97:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FAE3718BDB211EFB691BB91762E951A.roa
Signing time: Thu 19 Dec 2024 02:36:34 +0000
ROA not before: Thu 19 Dec 2024 02:36:30 +0000
ROA not after: Wed 10 Dec 2025 02:36:30 +0000
asID: 984
IP address blocks: 45.198.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58557 (0xe4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:36:30 2024 GMT
Not After : Dec 10 02:36:30 2025 GMT
Subject: CN=676386b2-eb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:b3:61:34:ee:9a:85:a4:19:1e:7d:6d:16:
cb:ac:7f:da:31:8d:52:06:65:82:2c:99:69:ae:6e:
ab:6d:19:55:22:09:a7:e6:00:ff:3f:83:f8:39:6c:
ee:ba:25:76:80:98:c1:f6:10:49:27:c4:6d:2c:5c:
05:ae:89:c5:28:93:f9:eb:d3:82:51:1e:44:8d:3a:
9a:98:4b:2c:ef:86:d1:5d:3d:55:d7:cb:5e:c9:c0:
ea:32:44:1e:f7:1f:5b:74:32:cd:68:4d:d3:fa:6e:
b5:9a:97:c2:99:57:9e:30:f0:84:b0:89:ad:ab:16:
83:3a:6c:50:15:ff:c8:50:1e:95:b3:7b:d1:ee:94:
dc:74:3c:14:8a:a1:12:1f:6a:03:f1:30:7c:7f:e4:
72:c2:b0:73:1c:01:33:7d:1f:91:b3:4c:6c:6b:03:
a0:15:c8:c7:55:03:06:f8:cf:60:8f:b0:c2:69:b4:
71:72:85:39:03:49:45:7d:5a:f2:2b:10:e0:d8:83:
d7:b1:40:0d:c0:49:f8:6f:5c:bc:c8:66:43:12:fe:
6f:b3:ad:89:16:3b:da:fb:40:28:b7:22:ff:53:d5:
7d:32:ff:e3:38:80:14:fa:b7:2d:c1:81:2b:a2:06:
99:e3:2d:59:35:b1:21:42:36:46:81:e0:bc:85:86:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:81:A0:29:97:31:9A:2B:73:13:81:9B:65:F3:5F:01:A7:8D:97:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FAE3718BDB211EFB691BB91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.246.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f7:42:3b:1c:b8:dd:88:73:f1:0c:84:32:c4:69:43:88:8e:
b6:70:7f:34:7e:35:ca:cc:35:3b:65:04:d5:17:d0:2f:6b:17:
c1:c4:f3:c4:05:f1:65:01:61:cd:af:6e:7a:3c:cd:89:b9:4e:
ff:1f:a0:8e:f3:7b:1d:a1:9d:ea:b2:9d:27:ca:77:dd:d7:f4:
b3:f0:93:cb:29:b9:48:8b:cc:da:6b:9d:38:44:a9:93:f3:55:
26:f3:9d:15:7c:4d:16:7b:db:fb:1c:34:d0:28:ec:db:5f:07:
c3:eb:76:63:c4:22:8b:a2:45:94:8d:56:15:8a:d1:c2:75:64:
0f:6c:d7:a9:16:62:d4:c9:77:35:3a:7f:73:cd:ae:d4:b0:7e:
0a:57:54:ee:fd:6d:95:35:79:d1:4f:a0:10:de:d8:bf:dd:c1:
18:66:86:40:96:17:dd:54:9a:93:7b:ce:3f:a7:c8:41:0a:01:
49:6e:1f:1e:23:8f:bd:ac:98:33:a4:91:1d:73:cd:52:85:b5:
b9:c6:0a:83:aa:9c:3a:c4:ce:cb:88:55:9a:af:e2:01:35:67:
2a:14:47:da:ff:c1:a8:6c:15:b6:47:89:bf:37:f1:ae:61:05:
8b:16:14:53:8b:25:59:a6:0d:c4:b0:cc:8d:2e:f0:a9:78:f8:
3b:d8:f0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:09 2025 by rpki-client