Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38DE74A4CEF611EFAAA652AD762E951A.roa
File: 38DE74A4CEF611EFAAA652AD762E951A.roa (raw, json)
Hash identifier: Ecx7iqh/O/PvKpHcPvxTdHZdJ7X2BHFoi06p18RzQSU=
Subject key identifier: 2C:CA:FC:CA:6F:72:C0:DF:EA:9B:35:59:EB:2A:ED:A0:19:DB:A5:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010491
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38DE74A4CEF611EFAAA652AD762E951A.roa
Signing time: Fri 10 Jan 2025 01:57:18 +0000
ROA not before: Fri 10 Jan 2025 01:57:14 +0000
ROA not after: Wed 12 Feb 2025 01:57:14 +0000
asID: 20473
IP address blocks: 45.200.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66705 (0x10491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 01:57:14 2025 GMT
Not After : Feb 12 01:57:14 2025 GMT
Subject: CN=67807e7e-a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:ce:73:ef:6f:f8:72:7f:80:a3:f8:6d:6e:
c2:0e:a2:51:df:05:75:b5:55:dd:ae:aa:9b:ac:fb:
89:ef:33:3d:20:be:9c:ce:27:21:2a:e7:68:5c:d9:
9d:43:47:69:c1:08:84:44:fa:7f:d2:2a:7e:75:ec:
6d:94:9b:d1:76:44:c5:57:b8:07:82:ff:b4:cf:09:
70:33:d9:43:2b:62:e7:e5:e0:e5:e8:fe:78:18:12:
72:88:3d:1e:95:9c:b0:2c:e7:ac:b3:25:a9:5c:fd:
59:32:06:d2:37:bc:e1:49:35:1b:c3:d0:7e:ca:7c:
d1:57:87:ea:c2:01:e5:22:c7:5c:e5:b7:71:18:2d:
87:36:83:80:54:6f:6b:df:a6:01:51:1f:9d:3d:e4:
40:e8:ab:89:d0:6a:e4:8c:83:bb:ce:c2:59:80:94:
72:18:7b:0a:05:5b:1e:8c:88:b0:7a:8b:2b:fa:ab:
db:ca:0b:b0:ac:52:bf:93:93:64:e2:94:4f:c7:29:
43:a0:45:c7:9a:0f:3b:76:07:22:69:e7:8c:3d:5f:
71:74:a2:bb:f7:5e:0c:a0:d9:03:06:a9:e3:14:60:
37:c9:42:3d:42:59:47:ab:bf:34:a3:ec:41:ad:b0:
35:36:a0:f9:2c:df:00:26:0a:40:9e:54:d0:d6:93:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CA:FC:CA:6F:72:C0:DF:EA:9B:35:59:EB:2A:ED:A0:19:DB:A5:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38DE74A4CEF611EFAAA652AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.121.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:0a:3c:ee:3b:f2:b7:b6:82:fd:21:9d:42:da:ea:8e:91:40:
2f:43:d3:9a:5d:3e:83:6a:af:90:b7:6a:e6:af:f6:14:3c:90:
fa:3f:d1:d5:e2:95:e1:15:75:ed:49:22:39:7d:4f:c7:de:c1:
73:06:ff:f3:fd:d9:3a:77:e9:a3:43:19:ed:84:7d:50:40:19:
bd:64:cc:7f:c2:8a:d4:3f:6a:81:9c:bc:4d:ba:40:3f:b6:7c:
11:4b:b3:73:b3:fa:1c:92:33:47:be:90:b0:01:48:5e:4c:c7:
c3:b8:c0:4c:9b:94:b2:12:b3:6f:15:2c:3a:e5:ad:e3:61:ef:
4f:75:7e:f8:44:cf:fa:36:92:8e:83:90:ea:14:56:af:f3:eb:
ae:2b:1b:f4:b5:96:25:8e:93:ea:d0:93:98:fa:f1:09:45:87:
7c:9b:93:91:a3:86:2b:2b:70:0c:eb:a4:62:0e:6b:1c:73:84:
35:19:3e:18:e1:b8:07:75:5d:b0:bf:33:be:78:67:c0:c2:04:
1b:ff:38:46:1b:68:77:b2:17:a6:ce:30:ae:9a:df:6d:ef:36:
c3:4c:e3:38:d7:8a:21:2f:03:3f:a7:d1:90:85:bf:82:b6:72:
42:a3:0a:1e:02:bc:7e:f0:43:99:d5:a3:a2:99:7f:1b:0a:70:
e0:1e:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:43 2025 by rpki-client