Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3235D1D6D17811EFBEB5F88F762E951A.roa
File: 3235D1D6D17811EFBEB5F88F762E951A.roa (raw, json)
Hash identifier: pii0zVYL0J3r/GHi3ajkjzM+aUOhu4LEZh8G/BOFmlc=
Subject key identifier: AA:AB:56:BA:4D:B7:70:62:15:71:CC:3D:7F:26:D7:D5:A4:DC:09:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010660
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3235D1D6D17811EFBEB5F88F762E951A.roa
Signing time: Mon 13 Jan 2025 06:32:44 +0000
ROA not before: Mon 13 Jan 2025 06:32:40 +0000
ROA not after: Sat 15 Feb 2025 06:32:40 +0000
asID: 273222
IP address blocks: 45.194.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67168 (0x10660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 06:32:40 2025 GMT
Not After : Feb 15 06:32:40 2025 GMT
Subject: CN=6784b38c-de1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:92:41:ce:69:3c:46:71:e6:eb:9f:d2:b5:
bd:ff:74:a6:59:1b:72:45:9c:be:e3:51:24:06:a8:
53:83:dc:f4:4c:9b:ac:9d:39:7e:33:fe:99:d3:18:
54:c0:12:4f:df:ec:93:8d:10:b0:8b:c9:e5:5c:3c:
d2:d8:25:ab:b5:43:a2:6d:ce:e4:b0:0f:2e:5d:ef:
a3:21:c0:c0:0d:d7:09:7e:ab:9a:6f:a2:10:95:3e:
9a:77:7a:33:0f:6e:2f:3e:89:34:7e:8f:1d:cb:b8:
b5:74:44:b6:71:fb:3c:f4:db:28:0b:f7:69:07:50:
e1:d9:0b:7f:a0:48:e7:f0:8f:13:36:38:35:47:f9:
d7:4a:59:2b:43:34:a0:6c:97:cc:ac:d8:ac:97:55:
40:33:72:cf:79:49:91:bd:b1:22:6e:c9:79:0a:36:
84:05:85:07:b6:75:9a:7e:be:60:38:a3:17:26:47:
97:aa:0f:81:e3:dd:88:90:ff:bf:f2:f8:14:3b:d9:
11:3e:28:7e:11:f0:68:79:75:04:90:6a:9e:13:c0:
27:5a:6a:4f:60:b6:9a:1e:4a:5b:c8:9d:5e:87:bd:
5f:20:d6:a9:85:28:66:86:24:e6:d3:02:be:e1:7f:
73:55:ad:b4:1a:99:c7:91:d3:88:e3:cf:43:78:26:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AB:56:BA:4D:B7:70:62:15:71:CC:3D:7F:26:D7:D5:A4:DC:09:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3235D1D6D17811EFBEB5F88F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.7.0/24
Signature Algorithm: sha256WithRSAEncryption
88:71:d9:fb:d6:60:19:ff:22:db:e6:56:ca:e3:a9:5b:6e:69:
63:bf:33:8a:a4:1c:c2:ec:66:98:64:ca:aa:3a:d0:e6:dc:cb:
ff:a5:a8:fe:ce:cf:21:10:56:76:3b:a1:02:5f:79:e1:9b:0d:
48:29:f6:ef:83:b1:c2:02:d8:d7:2c:c7:db:a9:ec:b1:82:cc:
4b:57:a4:52:d8:73:73:32:69:90:55:5e:59:52:26:40:65:70:
d7:18:23:ca:2c:2e:1a:f4:69:23:54:ce:85:a2:ac:93:e9:e2:
21:6b:09:4d:eb:cd:99:8c:70:07:fb:f4:18:de:3e:55:19:bc:
97:0a:17:c3:08:df:10:9f:05:a5:2f:00:28:91:c5:0e:c1:1e:
68:d1:76:f1:43:42:96:f3:59:92:47:7a:b7:7a:5e:15:91:18:
94:fe:1a:6e:da:d6:8f:94:0d:ee:79:b9:e0:94:11:c6:9f:9a:
f3:80:07:82:ee:6f:33:c6:2e:17:33:61:2d:7b:83:2f:4f:eb:
40:e3:a8:d1:ab:a7:84:fa:83:84:bf:41:52:d9:1f:39:c3:30:
67:2b:c6:3c:24:cb:9c:eb:a9:e1:60:de:e8:28:21:bf:36:00:
9b:48:fd:56:89:47:bf:2b:c6:7d:dd:9e:bd:99:ce:f8:90:37:
3b:aa:58:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:39 2025 by rpki-client