Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAD9A06BDEE11EF8582588C762E951A.roa
File: 1EAD9A06BDEE11EF8582588C762E951A.roa (raw, json)
Hash identifier: twoLc7Fgy9L5KuZE7Fkt/yK+UbdWU1fSrHx0rpP3tfE=
Subject key identifier: FD:A2:87:07:BB:6B:48:BF:74:B4:9B:D1:25:5E:D9:CF:EE:42:AD:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAD9A06BDEE11EF8582588C762E951A.roa
Signing time: Thu 19 Dec 2024 09:46:29 +0000
ROA not before: Thu 19 Dec 2024 09:46:24 +0000
ROA not after: Wed 10 Dec 2025 09:46:24 +0000
asID: 984
IP address blocks: 45.206.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58843 (0xe5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 09:46:24 2024 GMT
Not After : Dec 10 09:46:24 2025 GMT
Subject: CN=6763eb75-38c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:a5:0f:07:a2:37:5a:e4:21:77:3c:0e:8b:
02:f9:db:f7:88:49:6c:2b:0f:74:a1:c4:1b:e2:b6:
4f:57:e0:36:d6:eb:51:da:52:a3:c1:b9:eb:d5:b1:
18:d7:d5:a9:56:8f:8b:0d:2b:3f:d3:b3:28:6e:14:
08:0a:dc:60:d5:50:9a:56:de:e0:ef:86:d7:30:c8:
1e:39:87:f9:5d:f2:86:e0:53:03:93:66:79:86:1f:
ba:9e:34:e9:87:c6:53:b8:07:1f:3b:d1:c2:42:08:
ff:2e:0c:1f:16:fe:44:d0:02:3f:2a:e7:da:d2:d2:
8c:37:65:97:5c:97:b0:95:da:7b:de:8a:c3:65:cb:
05:c9:a6:59:ba:3a:1c:de:dc:61:f8:37:4e:35:a3:
0c:23:fb:6c:d3:65:7c:18:0d:e2:ec:b1:ad:c0:b1:
b0:c1:b4:b2:f1:e0:4a:c6:8c:51:db:86:28:05:b3:
ab:19:b5:16:d8:49:fa:4a:39:db:cb:9d:f6:6c:a0:
f3:df:6e:aa:ac:be:28:45:86:52:33:d7:8e:f2:9b:
89:3e:e0:12:ff:46:d2:ec:b6:2e:93:66:f9:ac:fd:
44:5a:56:57:28:73:76:94:7d:ee:74:2e:8a:98:ba:
8c:ef:6d:af:25:9e:27:18:03:e9:06:39:7f:2e:f6:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A2:87:07:BB:6B:48:BF:74:B4:9B:D1:25:5E:D9:CF:EE:42:AD:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAD9A06BDEE11EF8582588C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.110.0/24
Signature Algorithm: sha256WithRSAEncryption
92:91:67:14:d3:37:ed:af:bc:c2:44:00:b2:54:1a:87:d4:c4:
2d:6f:90:f4:16:3b:e7:9b:dd:d2:0d:3d:08:0c:67:db:99:7c:
eb:fe:a3:6b:03:d7:55:4f:cc:c9:d9:3c:39:8a:0b:8d:cb:5e:
15:93:12:17:62:c7:40:53:ef:9d:9c:ca:84:82:e0:d0:81:fc:
b0:95:a8:60:80:a9:23:fd:97:57:56:17:fc:a1:a1:1b:0b:da:
78:c9:70:9c:4a:7f:fd:be:cb:fc:02:38:ff:07:dc:e1:5f:3d:
3c:0b:da:be:04:14:11:83:0a:c8:94:82:8e:ed:86:d2:46:25:
6a:3d:7f:8c:dd:79:70:69:0e:7d:66:4e:d5:04:12:4a:ea:6e:
6b:64:36:a8:56:a6:c9:ac:10:a0:3a:8f:22:40:9f:e2:c4:b9:
5c:5a:93:46:96:aa:c2:7b:a1:c2:f4:fd:7e:af:9f:a2:a9:71:
ed:2e:85:36:f0:cf:55:b0:75:f0:5c:3d:47:0d:79:6e:f6:fb:
75:0c:28:9d:19:80:09:29:32:2f:47:7c:b3:cb:97:8a:76:66:
39:f0:3a:b3:d3:83:dd:47:f2:04:47:f6:2f:d8:af:32:e3:80:
b4:24:24:17:d2:64:4c:df:44:e9:0e:cb:86:ea:a1:2d:c1:0d:
ab:f4:0a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:01 2025 by rpki-client