Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A8C5102BDB611EF80B434AF762E951A.roa
File: 1A8C5102BDB611EF80B434AF762E951A.roa (raw, json)
Hash identifier: pnZUk9dk9B4ZNhxFLCTbw8a5bw33HyY9pyke1+O0qbg=
Subject key identifier: F1:B5:04:33:72:51:81:AA:60:B2:3D:58:47:8C:1A:3A:E9:5C:34:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A8C5102BDB611EF80B434AF762E951A.roa
Signing time: Thu 19 Dec 2024 03:05:30 +0000
ROA not before: Thu 19 Dec 2024 03:05:26 +0000
ROA not after: Wed 10 Dec 2025 03:05:26 +0000
asID: 984
IP address blocks: 45.204.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58609 (0xe4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:05:26 2024 GMT
Not After : Dec 10 03:05:26 2025 GMT
Subject: CN=67638d7a-6102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:18:38:a3:86:da:ff:7b:09:23:85:7b:44:
ee:05:4c:39:87:bf:25:b9:90:59:5c:f3:79:c3:72:
3a:96:5f:17:af:3d:1c:ff:00:e5:59:5d:f6:66:60:
24:17:7a:e2:8e:ba:86:38:45:0a:cc:ea:b9:7c:e1:
40:51:eb:10:38:84:45:79:bb:4c:80:35:5d:25:2b:
bd:5e:41:7c:3d:62:de:43:a4:44:8a:35:13:ab:68:
77:81:e9:c7:2e:a6:70:38:90:6c:fe:45:04:3d:4e:
33:8d:33:b0:7f:e6:6c:55:bb:86:5d:80:de:ac:ae:
50:f7:67:15:aa:2c:1f:4e:c6:1c:8b:c7:35:7f:2a:
ad:aa:62:5f:5f:ae:72:1d:f9:0f:01:18:bd:4a:eb:
b9:22:10:ec:71:a4:82:b3:c6:4a:1d:08:c7:d6:32:
00:ea:ed:45:2d:05:a5:85:3e:27:c1:b7:a4:3d:f2:
88:f7:09:22:5f:12:a4:b8:d3:58:6c:0a:00:52:36:
ac:2e:a4:ef:f9:9e:7d:8c:5c:b9:9b:43:1c:29:1f:
29:88:3c:47:40:f1:a1:7c:67:85:00:e4:a1:da:42:
92:b0:d4:5c:2b:0b:e9:fa:50:66:4c:23:c0:be:e4:
40:ea:fa:a4:a1:04:c8:13:c4:d4:ed:d3:f1:5d:71:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:04:33:72:51:81:AA:60:B2:3D:58:47:8C:1A:3A:E9:5C:34:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A8C5102BDB611EF80B434AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:42:30:18:df:f7:3a:5b:61:59:0e:2c:10:72:10:f5:51:d1:
05:a7:6c:31:f8:0c:55:c0:08:72:41:6c:9b:fd:d7:02:72:61:
2f:0b:31:dc:4a:b8:1f:4d:13:f7:6f:b9:72:13:7d:35:ac:a9:
f1:d1:bf:b9:86:8c:2c:ec:97:ef:34:9d:88:d6:11:f3:47:1e:
d3:22:fb:c4:24:d9:db:2f:fb:b9:7b:31:36:fc:3d:ec:b1:05:
8e:2b:81:f5:7f:3f:44:d5:d8:8d:2e:ba:61:7c:db:3d:a6:49:
6a:2e:ba:12:7b:d0:25:dd:22:9c:91:fc:04:b6:8f:8b:4b:21:
91:96:5d:70:71:3d:82:db:6c:1a:a8:be:18:a6:5f:81:8e:5d:
93:de:9f:81:cf:36:b8:16:e7:c9:43:07:df:20:c3:52:48:4d:
0c:95:81:a5:04:a3:1d:d0:bd:e6:69:11:ca:4e:c3:c8:f8:5d:
f4:fb:c6:e8:79:0f:38:ec:58:85:fa:45:15:1a:82:c4:e9:81:
8f:b0:d1:35:a1:20:32:c8:35:ad:2c:f4:ee:98:78:4a:c0:a8:
8c:ef:a5:28:9e:f1:66:9d:a7:06:bb:0f:78:0b:a4:38:d0:51:
35:af:8e:48:eb:34:9c:71:3a:0d:ca:20:04:24:18:c1:e2:05:
1f:af:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:21 2025 by rpki-client