Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/243F8D56BEDB11EF84FC905D762E951A.roa
File: 243F8D56BEDB11EF84FC905D762E951A.roa (raw, json)
Hash identifier: 4h6nU+eLlIXN8fxsgDUBdUcPyk3aIurfY71bG4bCyvw=
Subject key identifier: 12:69:61:C6:D5:6B:39:ED:E9:BC:EC:2D:D8:8C:85:78:FE:F9:0B:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E775
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/243F8D56BEDB11EF84FC905D762E951A.roa
Signing time: Fri 20 Dec 2024 14:03:09 +0000
ROA not before: Fri 20 Dec 2024 14:03:05 +0000
ROA not after: Thu 06 Feb 2025 14:03:05 +0000
asID: 42831
IP address blocks: 45.198.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 14:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59253 (0xe775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 14:03:05 2024 GMT
Not After : Feb 6 14:03:05 2025 GMT
Subject: CN=6765791d-68a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:5c:b7:16:b2:08:30:45:f4:c1:e8:73:8f:
f7:eb:d9:ef:3a:6f:0a:b1:e0:2d:bc:cf:d0:ed:4f:
91:12:e0:36:2f:7d:5a:27:a3:18:bf:38:bf:00:87:
e9:4b:24:48:20:9d:49:ca:3b:a2:46:2a:af:0e:ff:
b1:6d:44:fb:09:9e:5f:8f:33:f0:78:8a:bb:74:06:
aa:45:1e:25:5a:a8:17:cf:17:2f:4b:81:b3:20:5d:
33:e7:a1:ec:1e:05:d3:5b:57:2a:9c:cd:77:d8:94:
8e:fe:54:ab:e6:d2:81:7a:20:d6:34:26:73:fc:bf:
bc:17:d3:8a:0d:8b:18:86:01:04:f4:71:a1:ef:bf:
bb:c5:7d:84:2d:ad:fc:89:c2:ac:7b:cd:74:4d:35:
2a:98:23:fa:18:13:6c:06:94:1a:c2:3b:5e:fa:ab:
e5:0e:fa:0e:bd:93:b5:cc:9e:40:67:1b:56:43:73:
ff:b1:d1:36:6c:5f:f3:ea:3c:d5:ee:ed:a0:ce:d3:
72:8b:69:47:ed:15:65:ea:4b:64:c2:c0:31:92:54:
a8:3e:f0:26:4b:98:13:b3:8b:0b:ae:04:05:cb:18:
b5:d7:31:ab:cf:d7:83:49:82:66:39:db:23:2f:c3:
4c:7e:5d:1b:7c:87:46:70:b1:6a:10:9b:54:28:b5:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:69:61:C6:D5:6B:39:ED:E9:BC:EC:2D:D8:8C:85:78:FE:F9:0B:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/243F8D56BEDB11EF84FC905D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.176.0/22
Signature Algorithm: sha256WithRSAEncryption
48:18:a5:10:26:46:37:af:11:1c:df:c7:7a:92:8d:69:05:e1:
38:c4:f4:cb:e8:9b:be:fd:93:45:cd:8b:7b:56:d5:9f:38:54:
c9:ba:bc:f0:0e:37:77:9d:e5:19:bd:10:8d:0f:35:80:4d:ec:
a4:37:71:5c:20:61:36:01:63:38:65:27:ff:70:b4:67:89:0a:
fa:28:b9:76:5e:df:f7:b1:11:13:70:79:ff:ce:ef:a8:1e:b0:
dd:c3:aa:9e:11:f8:4e:59:f7:01:39:7b:f5:3c:a7:f2:dd:c2:
d9:fc:42:50:00:b6:8d:3b:b8:af:0e:8d:75:21:d5:c7:b2:fa:
fd:12:ab:bf:3f:96:4c:d0:be:f7:45:75:41:06:0a:7e:bd:b2:
dd:a3:d8:ac:86:69:80:90:11:46:c6:b0:38:13:90:b5:c2:cd:
8f:1d:90:45:8d:e5:4b:65:83:5e:d6:98:16:b0:17:af:ab:06:
01:33:4e:ca:cf:46:fc:bf:83:ee:af:ae:c7:9a:29:16:0a:03:
0d:a1:3d:10:6d:87:37:e3:3b:af:bf:86:8e:f9:22:7e:c3:90:
73:2f:5f:c3:7e:e1:23:4a:3c:11:b8:93:16:b4:9c:9a:b0:30:
66:d6:f9:15:b7:00:97:57:d8:84:10:3c:70:be:f8:8a:a7:c6:
8b:d9:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:04 2025 by rpki-client