Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35E56ABCCEF311EF80D0B698762E951A.roa
File: 35E56ABCCEF311EF80D0B698762E951A.roa (raw, json)
Hash identifier: DWxeW1CLJfpKMQXGfKAC9HDRA634U6rky0HeT7ypyE0=
Subject key identifier: D3:7D:DA:A4:6F:78:07:80:CF:7F:08:36:AB:BB:E1:B1:5C:60:FD:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010483
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35E56ABCCEF311EF80D0B698762E951A.roa
Signing time: Fri 10 Jan 2025 01:35:45 +0000
ROA not before: Fri 10 Jan 2025 01:35:41 +0000
ROA not after: Thu 13 Feb 2025 01:35:41 +0000
asID: 54801
IP address blocks: 45.194.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66691 (0x10483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 01:35:41 2025 GMT
Not After : Feb 13 01:35:41 2025 GMT
Subject: CN=67807971-3248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:93:c4:6f:29:bb:c6:0d:b5:e2:b7:cb:46:
1f:89:30:ef:b6:4d:f1:47:49:bf:11:93:9e:a6:4d:
60:a5:9c:af:7b:fe:28:0d:5b:8f:5f:f3:1e:ac:16:
7c:27:87:24:62:16:76:15:1e:d5:c0:91:9f:11:5f:
a7:33:9d:b9:60:53:ab:9a:1c:54:c6:b5:df:df:78:
50:0c:6c:f1:2d:30:d8:a4:da:c6:bf:c5:eb:60:9c:
7c:de:1e:4f:e0:ef:94:92:5d:53:b2:4b:f8:07:7b:
07:47:a1:87:c0:ce:1c:ca:a7:e3:d6:b3:6d:1b:02:
c4:c6:81:c0:42:c8:6e:3c:b7:05:5f:9f:00:8f:98:
07:57:df:33:69:99:44:61:43:53:ff:a4:3d:9a:19:
00:56:e3:60:5a:94:b1:58:62:b2:ee:78:37:50:f0:
97:67:b0:af:7f:4b:d9:d4:3c:b9:4a:ac:c7:3c:f4:
1b:c3:42:fc:cf:99:f4:42:f4:60:fc:2c:1b:18:10:
01:38:e3:c5:79:fd:ec:69:c5:f2:67:cb:44:19:78:
06:22:91:93:28:5e:e7:3f:70:80:30:47:e9:30:28:
7b:2a:07:11:83:4e:2e:94:c1:bd:f0:d1:02:18:61:
2e:5e:46:a5:7d:3d:84:ad:39:0e:0e:8b:d8:d8:28:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:DA:A4:6F:78:07:80:CF:7F:08:36:AB:BB:E1:B1:5C:60:FD:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35E56ABCCEF311EF80D0B698762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.85.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:66:c3:ec:20:b3:3f:62:53:a4:d5:7a:e2:ab:c6:e4:cf:ca:
d8:21:86:da:0a:a3:49:d3:f5:80:6c:40:28:b1:4f:74:49:00:
b6:cf:17:cb:1b:b4:cc:8b:6b:da:db:a3:48:8f:40:1b:9c:86:
30:e8:32:9d:6e:fe:5a:3c:42:33:14:bb:92:9f:80:c1:dc:a4:
85:2d:b7:a1:59:f2:a6:97:26:6e:ff:dc:b4:26:a1:66:64:e5:
21:df:a5:2a:d3:c9:0b:4b:fd:59:84:e4:18:b3:59:46:da:58:
23:d1:04:29:7b:6b:64:69:fc:b4:a6:ad:d8:f6:a1:b5:9f:06:
aa:fc:01:87:51:c3:f8:5b:c2:d4:4f:ba:e3:37:90:75:68:63:
75:8e:64:1a:63:49:37:09:e5:22:14:c4:e1:5e:3d:98:08:d2:
c0:12:b9:a9:8a:f0:b4:8f:7e:9d:e0:0d:08:a2:4b:43:88:5c:
b0:e1:ea:47:41:c8:3a:a6:8b:d9:1d:21:ab:01:66:fe:ad:a2:
80:63:16:6c:97:ce:c1:1a:45:75:43:91:e6:c7:c6:af:08:92:
3c:d0:24:c9:e4:6d:20:51:d5:bb:d1:cc:9f:80:eb:f7:9c:22:
b3:e2:23:db:5a:c5:5c:4a:7f:56:db:67:a4:76:32:a1:32:e0:
32:c6:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:42 2025 by rpki-client