Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20DE144ABE7511EFB1974154762E951A.roa
File: 20DE144ABE7511EFB1974154762E951A.roa (raw, json)
Hash identifier: KTR4qGwnSOe2rQ04YJZxBHSfbscIMuTtNjyG43NcOTc=
Subject key identifier: 6D:32:97:07:31:21:2F:72:CD:AB:9D:6B:32:78:43:9F:E7:1F:D2:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E61C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20DE144ABE7511EFB1974154762E951A.roa
Signing time: Fri 20 Dec 2024 01:52:54 +0000
ROA not before: Fri 20 Dec 2024 01:52:51 +0000
ROA not after: Wed 10 Dec 2025 01:52:51 +0000
asID: 984
IP address blocks: 45.206.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58908 (0xe61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 01:52:51 2024 GMT
Not After : Dec 10 01:52:51 2025 GMT
Subject: CN=6764cdf6-b9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:bc:5b:d7:b5:99:85:47:a2:67:a7:45:b3:
dc:45:4c:59:8b:da:a0:73:ff:ed:5c:73:87:ed:a2:
4a:dc:0a:0f:6e:e8:d0:ab:f3:93:b5:65:d2:1a:2e:
76:49:75:05:11:84:98:e0:eb:62:80:16:1c:27:9d:
f6:cb:2c:10:fc:39:20:5a:4f:ee:c7:a9:57:bb:08:
83:c1:76:96:23:57:1f:2e:8e:d6:11:13:08:a3:2b:
8e:2e:b8:cd:74:38:29:22:77:37:14:95:b0:a6:78:
ed:82:7c:82:a9:f0:6b:f6:5f:a5:26:4f:87:cb:1b:
47:f0:89:4d:72:c1:10:9b:23:5a:09:08:0d:b4:cd:
ae:6b:08:c1:e8:ba:e2:0e:d1:0c:52:d9:74:10:b8:
bb:08:c1:66:cb:8b:39:2f:62:98:c8:10:50:55:c2:
0a:5f:db:c5:c0:47:ee:da:be:4e:37:1e:d9:f8:73:
d1:24:fd:a9:0e:a7:cb:3b:38:98:c7:18:72:e8:f8:
d7:9c:a2:ad:dd:28:ee:6f:78:77:d9:13:86:23:b5:
57:2f:02:2e:e6:24:70:dc:5b:f2:ca:42:05:7f:f4:
a2:83:19:36:8c:24:7a:b5:0d:c4:d9:3e:92:c2:0d:
95:ed:a7:29:07:91:35:53:a0:ba:db:77:7d:e8:42:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:97:07:31:21:2F:72:CD:AB:9D:6B:32:78:43:9F:E7:1F:D2:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20DE144ABE7511EFB1974154762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.141.0/24
Signature Algorithm: sha256WithRSAEncryption
48:92:9e:1d:c3:13:27:a8:19:aa:b3:50:d8:d4:3c:d2:45:18:
51:85:34:84:7a:da:51:e9:87:1f:5b:ae:b5:0f:5e:e5:49:b8:
41:77:e6:d3:51:19:09:cb:77:54:1f:8d:b5:99:72:02:4c:d7:
04:69:b1:3f:ba:73:59:ac:a0:b5:04:5d:78:27:dd:42:13:6f:
44:29:a5:ef:62:8f:bf:61:56:f5:03:dd:37:4c:51:f2:41:35:
06:70:dc:11:48:ec:9e:24:db:99:53:e7:6c:cd:d3:0d:0e:75:
82:79:b1:19:41:a3:56:5d:f1:6d:9c:dc:ed:54:29:d3:2f:e9:
b6:18:11:4a:1d:e2:02:5d:93:d0:4f:d3:cc:96:86:e7:0f:de:
8c:21:32:75:29:eb:2b:fa:53:c5:2d:6a:06:f3:9f:8c:fb:58:
be:d8:84:0c:46:b6:a9:f9:b0:e3:9d:18:ed:88:88:b0:da:98:
d2:4c:93:03:8a:39:ea:84:63:f2:24:be:58:9f:60:dd:26:fb:
b6:a5:ae:06:bf:3b:3a:5b:99:bb:5f:c3:be:52:4b:f3:ef:d1:
ba:9d:bd:81:dd:0d:48:50:43:02:73:bd:45:c9:70:1c:fb:26:
d3:36:3c:58:62:c4:41:bc:f5:79:30:38:85:28:c0:2c:c6:b4:
50:07:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:23 2025 by rpki-client