Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32E8A874CC0A11EF8B671A90762E951A.roa
File: 32E8A874CC0A11EF8B671A90762E951A.roa (raw, json)
Hash identifier: p9h39AqhNf0nNgfAoAPIexh2tZaeDUcTO6nmcErFwiY=
Subject key identifier: 8B:20:83:BE:27:E0:C8:1F:7F:F9:D3:EF:14:3B:B6:6C:AD:06:35:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F85B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32E8A874CC0A11EF8B671A90762E951A.roa
Signing time: Mon 06 Jan 2025 08:42:45 +0000
ROA not before: Mon 06 Jan 2025 08:42:41 +0000
ROA not after: Thu 06 Feb 2025 08:42:41 +0000
asID: 200373
IP address blocks: 45.201.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 08:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63579 (0xf85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 08:42:41 2025 GMT
Not After : Feb 6 08:42:41 2025 GMT
Subject: CN=677b9785-4752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:a0:64:38:0f:95:bc:4c:77:d4:8f:ed:aa:
f6:2e:fc:a2:df:3e:80:f2:75:3c:cd:ef:c9:82:e2:
f3:71:58:56:f1:6b:1c:eb:b3:03:af:f5:61:4f:99:
4d:b4:d0:3d:42:dd:61:ce:4c:ed:b1:a6:9b:81:e4:
78:df:9b:eb:cc:3b:41:b5:b8:7f:15:48:12:f8:47:
33:30:4b:4d:46:b4:d2:a9:a7:7b:ef:93:6b:2a:e0:
55:5b:57:df:42:c6:20:de:40:17:52:95:45:db:9c:
d9:8e:31:cd:43:a7:2c:d9:6f:4c:89:75:50:10:df:
0e:7f:7c:76:d0:6b:86:a0:47:87:b4:3a:dd:6b:42:
6f:02:85:69:d4:a7:b8:fb:01:28:49:84:13:39:4e:
ec:e9:38:5b:fc:6c:d5:f3:e0:f7:24:a2:36:f7:1c:
4b:06:5c:69:da:d0:22:7b:6c:db:4a:29:df:2b:87:
b0:e8:5d:a0:54:af:ba:9b:7a:ef:78:3b:40:6d:fa:
68:cf:7d:55:75:fb:58:35:84:2f:5d:95:08:f2:09:
58:c7:19:7f:8b:86:2b:55:72:45:8d:4e:5f:6a:ae:
6d:1d:29:cb:f4:b4:e7:60:2b:f1:9b:90:d6:e4:8e:
ad:b4:fa:5b:ef:8f:fa:ee:60:99:27:e5:cb:59:77:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:20:83:BE:27:E0:C8:1F:7F:F9:D3:EF:14:3B:B6:6C:AD:06:35:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32E8A874CC0A11EF8B671A90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.10.0/23
Signature Algorithm: sha256WithRSAEncryption
25:0c:96:45:71:3d:7c:da:3a:be:b4:d1:b2:01:1c:81:0a:12:
01:28:42:01:d1:84:71:2d:db:c5:70:0c:ff:e4:93:28:f4:5a:
07:25:0d:e2:94:c4:2f:de:d7:69:52:63:3c:07:e2:79:27:b7:
30:4a:32:dd:76:e9:f8:c6:48:5a:ac:f5:f0:fe:68:84:bd:8e:
6d:74:67:a5:5e:fb:d0:6a:57:a5:40:9a:8c:9e:12:d9:62:63:
0a:25:36:f6:d3:39:c7:37:80:bd:f5:bd:78:4c:71:d9:04:5d:
a1:74:ff:16:7c:40:74:51:c4:7b:8a:cf:02:cf:b7:85:2e:65:
3f:2c:43:71:9b:54:b6:cd:6a:28:cf:3c:0a:36:46:21:36:a7:
77:f5:5b:30:2b:ab:07:39:e2:6a:d7:a7:fd:d8:e0:59:4e:e6:
fe:99:76:d7:8d:f0:e0:3c:e4:00:b3:fb:78:13:b7:5c:a9:b7:
ff:1f:a5:72:ef:1f:f5:ea:35:fa:d8:e4:75:98:58:f3:d8:21:
bf:aa:b3:4c:71:75:9a:2e:7b:9d:6e:aa:58:44:ab:4d:7f:f2:
ad:04:a4:7b:c4:1d:80:24:c5:c0:70:98:05:3d:68:99:2d:d8:
a7:8a:16:63:51:2f:dd:c4:ca:42:96:91:de:91:26:49:38:24:
2b:cf:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:32 2025 by rpki-client