Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E95F94CEEC11EF85BA6766762E951A.roa
File: 34E95F94CEEC11EF85BA6766762E951A.roa (raw, json)
Hash identifier: YX5msN4/BUO6FWjyALkNVoPG6ylMu8X8ynG4ViQ5VWQ=
Subject key identifier: 97:5F:BD:D0:73:0A:F7:4A:FA:D3:D8:8F:D8:6F:62:ED:CC:81:2A:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010466
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E95F94CEEC11EF85BA6766762E951A.roa
Signing time: Fri 10 Jan 2025 00:45:37 +0000
ROA not before: Fri 10 Jan 2025 00:00:33 +0000
ROA not after: Tue 23 Sep 2025 00:00:33 +0000
asID: 134963
IP address blocks: 45.194.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66662 (0x10466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 00:00:33 2025 GMT
Not After : Sep 23 00:00:33 2025 GMT
Subject: CN=67806db1-56d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:5f:4b:49:3f:8c:08:73:47:cb:90:36:fa:
f3:9c:57:2d:01:5b:29:ee:0c:0d:5a:7e:42:09:c3:
46:a6:4c:45:28:24:9c:67:bf:fb:ba:17:33:72:c4:
bb:4a:b9:fe:d5:d0:ff:b4:de:d0:b1:bf:52:84:03:
33:62:33:67:33:7f:1f:fd:c2:a5:52:8a:ed:39:f9:
67:8d:cd:2a:6b:cf:33:8f:8e:74:b6:d2:25:f6:54:
3e:08:e3:4f:c9:3e:d8:43:35:8a:01:0f:6e:4b:97:
dd:63:0b:64:9e:e8:db:7c:d5:2c:d3:7f:5d:ea:7f:
de:80:97:be:c4:7a:ac:ce:3a:50:8f:24:75:0d:c3:
7f:e9:8f:ea:e8:b4:0d:a2:06:18:a8:b3:9f:34:26:
48:8a:ab:c8:e8:9a:d6:ea:53:93:09:3b:ad:6f:7e:
48:8e:15:4a:f2:5f:4c:14:78:cb:5a:2b:d9:7e:e9:
19:a4:89:80:ea:ac:17:19:cc:4b:fb:61:8f:a0:34:
42:f9:8e:0a:71:09:4a:03:1f:fa:6f:2c:41:68:d8:
26:5b:b7:9d:35:dc:73:c4:e7:1b:d1:86:f6:e6:f3:
77:62:7a:17:ce:c6:a1:e7:96:79:d3:f0:27:b7:94:
fb:bd:7c:4a:53:42:ad:a4:ed:75:6d:bf:ad:12:88:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5F:BD:D0:73:0A:F7:4A:FA:D3:D8:8F:D8:6F:62:ED:CC:81:2A:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E95F94CEEC11EF85BA6766762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.56.0/22
Signature Algorithm: sha256WithRSAEncryption
92:63:e4:b5:44:31:74:81:76:df:72:bc:21:c8:33:13:22:8b:
bb:b9:0e:54:fc:08:0e:e4:90:a1:61:e1:1d:e3:f0:af:17:c6:
12:bd:11:e8:3e:51:da:19:38:11:c8:d2:d1:c8:fc:ac:aa:8b:
7c:ab:47:a6:96:74:40:fe:d9:16:6b:b0:44:b0:6d:ab:89:61:
f6:4a:7a:01:60:44:ad:a4:77:95:ef:ee:64:1c:2c:03:01:d3:
c2:4e:67:5e:e8:d5:3e:a0:81:9a:31:01:17:dc:ff:4b:a2:24:
10:4b:11:98:60:ab:96:ff:a6:c4:4d:8c:f6:59:ab:24:cc:da:
d7:19:f0:88:d8:91:ab:cf:2f:f7:3a:f4:92:c9:bd:3e:3f:9e:
49:9c:38:37:9e:39:72:5a:3f:60:54:b5:3e:cd:45:a1:cb:ea:
56:0c:55:96:82:ca:61:f6:24:29:30:3f:b5:ea:fb:1d:b4:0a:
60:69:a7:04:e4:5f:07:22:11:ab:ce:11:4d:6b:0c:3d:15:6f:
4b:9a:bd:c8:5e:06:e8:67:3a:40:8b:98:9d:f9:26:fd:78:c9:
ce:72:16:c8:81:bc:26:4c:f3:53:26:29:db:1b:7b:fa:3b:cc:
7f:2d:68:d2:60:ce:2f:67:03:09:c3:88:03:01:98:49:8e:86:
9f:b4:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:04 2025 by rpki-client