Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F36526CF3911EF88D74060762E951A.roa
File: 13F36526CF3911EF88D74060762E951A.roa (raw, json)
Hash identifier: 0e1SuWyq0hf+kw0lHVhDKGjhKdtb6eSI3ipFE8vuFXs=
Subject key identifier: 56:42:DF:E7:3B:90:83:9D:69:78:75:DA:92:4C:68:1D:38:83:F6:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010543
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F36526CF3911EF88D74060762E951A.roa
Signing time: Fri 10 Jan 2025 09:55:53 +0000
ROA not before: Fri 10 Jan 2025 09:55:49 +0000
ROA not after: Fri 25 Apr 2025 09:55:49 +0000
asID: 216050
IP address blocks: 45.199.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66883 (0x10543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 09:55:49 2025 GMT
Not After : Apr 25 09:55:49 2025 GMT
Subject: CN=6780eea9-df49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:c3:e0:03:2f:7b:5d:8d:71:c0:ba:45:33:
45:a0:4b:14:68:b4:f0:39:1d:e5:f9:e1:d8:ed:6d:
1b:a9:56:34:33:f3:2a:11:69:f1:de:e5:19:d8:55:
0b:c7:03:a3:cd:2b:23:ad:5a:d3:2f:b7:51:b5:de:
cc:f4:1d:ca:aa:df:71:75:51:de:c8:cd:27:6c:fe:
1c:86:f7:78:ec:56:f0:12:29:fe:32:9a:57:1e:e4:
84:71:cc:90:81:18:41:ce:00:77:a5:07:80:35:00:
b0:16:ad:97:4d:26:58:15:bc:ac:d2:31:f9:78:7a:
dc:02:28:2b:8c:0f:2d:95:96:ce:d0:3a:e6:d8:d9:
42:73:3d:6b:2b:50:2a:18:ae:94:f0:38:09:51:74:
74:a6:d7:21:b6:34:15:16:28:82:c5:4a:ac:cc:5b:
e0:19:29:c7:44:3d:9f:73:de:e0:63:48:bc:6f:19:
c3:18:ab:65:be:15:7f:fb:dd:ba:d2:48:19:bd:d0:
b5:86:bc:06:1b:ec:91:e1:de:93:61:2f:f4:33:fd:
15:23:43:74:c6:12:e5:f4:b7:0d:36:60:7e:f7:3a:
b8:4f:1d:3a:92:9f:16:2e:e9:f4:f6:8e:80:5f:d0:
88:93:0d:b6:33:5a:84:b2:4c:49:d2:46:67:45:e0:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:42:DF:E7:3B:90:83:9D:69:78:75:DA:92:4C:68:1D:38:83:F6:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F36526CF3911EF88D74060762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.149.0/24
Signature Algorithm: sha256WithRSAEncryption
13:87:4e:a9:6a:8a:cb:65:87:37:de:be:03:5f:3c:8e:5d:f6:
de:c5:40:23:b0:c8:8d:b5:1b:ee:b4:b0:01:b3:d8:b3:92:77:
63:3e:9c:8c:4c:29:ee:64:be:36:73:94:05:42:fd:ef:be:5e:
80:2f:2b:3a:27:d1:da:e3:3a:bb:23:63:b1:5b:d1:c8:ce:cf:
8e:6a:72:a6:15:6f:a5:0a:e0:2a:c7:c6:d3:90:8a:3c:e9:15:
6c:8f:d3:21:cc:f4:6b:f0:6a:2f:00:12:3c:aa:f3:87:1e:2b:
c6:a1:a0:ce:75:4b:ae:75:30:b8:84:4c:19:ab:c2:4f:76:cb:
fd:31:aa:97:3d:d0:4f:57:3f:72:a5:f9:32:81:d8:a5:f3:32:
17:fb:7d:4e:b9:57:69:20:62:08:76:d4:14:7b:7f:d9:3b:80:
42:7c:1d:24:f2:39:65:a2:d4:2f:65:8a:cb:80:0e:51:53:98:
df:fa:5b:7c:ac:df:e1:e3:95:df:92:27:f2:f6:ea:55:fa:bf:
7c:b8:4b:86:aa:2d:4e:38:60:ab:31:c4:ff:c2:82:08:16:30:
23:8a:29:82:88:01:f7:7b:b7:bf:2a:66:8d:c2:ab:da:4c:79:
16:17:50:bd:52:e5:38:f7:38:ba:7c:5c:d7:59:57:45:72:18:
75:a3:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:25 2025 by rpki-client