Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13E3938EBDB011EF97A4C482762E951A.roa
File: 13E3938EBDB011EF97A4C482762E951A.roa (raw, json)
Hash identifier: SRTJfvLKqEATVi9ja8xs24Ppytm041C2vPZp9jzKmVA=
Subject key identifier: 28:B2:F0:30:7E:E0:56:84:84:1E:4B:A6:CA:6C:D4:88:33:64:99:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13E3938EBDB011EF97A4C482762E951A.roa
Signing time: Thu 19 Dec 2024 02:22:22 +0000
ROA not before: Thu 19 Dec 2024 02:22:18 +0000
ROA not after: Wed 10 Dec 2025 02:22:18 +0000
asID: 984
IP address blocks: 45.198.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58531 (0xe4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:22:18 2024 GMT
Not After : Dec 10 02:22:18 2025 GMT
Subject: CN=6763835e-07a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ce:8c:6c:68:1f:42:73:98:39:be:86:b7:81:
b4:b2:bb:b5:bf:e0:8f:47:33:8a:0a:14:63:20:73:
76:57:f7:f5:ee:d3:b9:63:c1:bd:1a:cf:56:28:b9:
5f:71:12:3c:03:58:35:39:62:b3:be:71:bb:38:8c:
b1:be:de:52:0c:36:bb:15:18:c8:df:92:17:ed:e2:
35:59:03:e8:0e:41:0e:55:a2:45:2f:be:6e:5d:2a:
75:c1:f7:87:f7:a8:95:e4:f6:85:fe:d2:07:07:6d:
23:3b:cc:c9:bc:26:86:19:07:cb:71:89:d3:a8:a0:
33:f6:b1:b8:ef:0d:20:29:b6:a5:9a:ec:1d:42:b4:
4c:f3:87:52:4f:70:e8:39:dd:ac:81:00:e5:38:ad:
3b:6b:9a:2e:e6:8e:85:18:de:cf:cb:ea:16:10:65:
12:28:4a:f0:0e:7c:8c:38:ca:d2:d3:2e:d3:12:6d:
a6:d4:f2:91:af:a1:64:c0:c6:04:42:0e:82:50:8a:
bd:ce:fa:8e:77:2c:bf:ae:70:c5:b5:e9:23:ea:81:
a2:75:93:0e:3b:c1:44:ea:72:d3:fa:28:1d:04:ab:
a3:8a:1f:b7:85:87:b9:75:d2:31:f7:ae:10:79:b6:
6c:6b:15:e8:11:ca:46:c9:2d:9e:a7:e3:4b:a8:c2:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B2:F0:30:7E:E0:56:84:84:1E:4B:A6:CA:6C:D4:88:33:64:99:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13E3938EBDB011EF97A4C482762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.233.0/24
Signature Algorithm: sha256WithRSAEncryption
07:82:06:8c:8b:1c:b4:66:ec:de:74:d8:22:00:a7:e1:31:53:
a2:3b:d2:de:87:b3:51:96:62:ea:ff:a2:04:20:84:0d:77:45:
d5:be:73:a4:ac:61:7f:78:94:3d:95:db:df:49:96:1e:7d:1a:
2f:d2:37:48:2e:f7:0e:af:32:26:09:01:ee:8b:49:ca:9e:5f:
1a:66:f8:d0:02:ff:b8:76:ee:fa:3b:fc:17:53:90:5c:4e:67:
d6:c4:48:b1:28:92:9f:b6:e0:f0:5b:2a:e6:29:59:5a:ce:b0:
8f:27:1b:0d:e6:b3:30:fe:a3:99:ef:85:64:7b:87:50:67:bf:
df:32:44:fb:30:15:3d:dd:07:52:06:20:e4:18:95:a2:d0:00:
27:00:58:a6:b8:13:6e:77:c5:37:b3:02:3e:19:60:71:9d:99:
df:f2:13:6b:6b:cc:0f:84:4d:1b:da:d7:d6:58:4e:af:94:71:
7e:15:43:10:ea:20:73:ad:f8:df:3b:f4:79:5b:5b:fa:b6:ba:
ff:c7:e0:9e:ca:78:34:ae:fb:7c:ee:31:2a:7e:46:1d:65:c8:
3f:32:a3:09:64:dc:64:b8:00:0a:df:c1:77:a3:83:ab:8d:b5:
45:68:b2:0c:b4:a8:21:b1:81:8f:8a:95:9c:67:0c:41:0c:f2:
d1:35:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:04 2025 by rpki-client