Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/399432D6C3FB11EFAA12585F762E951A.roa
File: 399432D6C3FB11EFAA12585F762E951A.roa (raw, json)
Hash identifier: QX9Jg7zhwbyKhIiKdIqSMoattFthxcmQQcQYLr2/6Jk=
Subject key identifier: 89:24:21:E8:02:9F:09:63:28:C9:50:81:3F:DF:5F:42:8B:FD:01:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/399432D6C3FB11EFAA12585F762E951A.roa
Signing time: Fri 27 Dec 2024 02:35:24 +0000
ROA not before: Fri 27 Dec 2024 02:35:20 +0000
ROA not after: Fri 12 Dec 2025 02:35:20 +0000
asID: 984
IP address blocks: 45.194.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61346 (0xefa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 02:35:20 2024 GMT
Not After : Dec 12 02:35:20 2025 GMT
Subject: CN=676e126c-60da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:0f:e3:30:64:8e:9a:8b:f2:c9:37:30:47:
e5:ec:07:d0:7a:96:79:95:1b:a8:88:a1:5b:4e:b9:
ef:7d:8e:53:d6:de:de:06:5c:d6:d0:e8:e7:88:e7:
ab:56:bc:58:77:d1:b9:fa:0b:55:ae:86:7d:42:22:
bc:d7:be:61:fd:bd:76:54:81:e2:3e:69:b6:d8:cf:
28:76:24:86:e0:7a:2e:12:b1:2e:23:6c:40:28:bf:
61:54:59:9d:14:d2:cc:b6:e6:25:69:9e:b9:c3:56:
6c:5c:53:2c:79:3c:e1:82:c7:ee:06:5a:a7:57:89:
19:98:ed:0b:39:d0:8f:3c:a0:ee:ec:68:41:3f:44:
2e:f9:65:c0:98:e3:29:a8:1f:9b:12:f9:4b:fb:9b:
b3:14:1c:7b:85:b8:1f:df:25:cb:4d:4f:6c:f7:a8:
1f:f3:16:a1:e4:9e:96:f8:df:54:8f:50:03:08:2a:
3f:39:c4:e7:a8:9a:74:80:24:8c:9c:b3:53:75:9a:
93:2b:fb:0a:42:ac:8c:2f:e1:b9:a9:eb:44:99:c0:
89:77:07:07:36:d5:a6:9a:80:65:06:f5:00:87:71:
d3:35:be:df:6b:4e:65:12:f7:11:b3:f7:c4:4e:53:
f6:7a:54:41:24:ff:06:46:1a:7a:af:08:45:6b:5b:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:21:E8:02:9F:09:63:28:C9:50:81:3F:DF:5F:42:8B:FD:01:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/399432D6C3FB11EFAA12585F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.125.0/24
Signature Algorithm: sha256WithRSAEncryption
55:45:b8:47:81:98:a6:1e:a6:d9:bc:0b:25:e0:ac:d4:b6:e4:
8b:a8:00:d3:ef:0f:b0:8a:b7:47:b1:d2:9a:49:65:eb:35:42:
9d:1e:dc:9e:38:a2:e7:40:ac:f2:ac:dc:68:3f:e3:ce:d0:42:
f5:dd:a2:fa:50:eb:2c:31:5f:39:a3:1c:ba:ee:70:48:8c:85:
18:e0:ca:23:de:f3:5f:0f:d3:d4:54:31:cd:be:46:1c:91:97:
b5:3a:24:8e:3f:4f:96:a2:a3:75:20:f1:39:37:71:f4:ba:88:
38:aa:7b:73:ce:41:16:06:8c:ca:87:2c:57:c0:3a:89:e5:5b:
d8:b2:a2:84:8b:d4:77:36:5f:13:40:73:07:8a:fe:10:26:19:
09:20:c0:09:bd:af:c7:85:04:16:df:f1:4a:a5:d8:d7:ac:34:
1c:37:f3:14:81:e7:da:49:e7:5e:51:7e:cb:6c:c4:03:c6:93:
b9:0e:f6:2d:77:c3:62:7d:a0:6b:7e:92:bc:43:1e:31:e9:a3:
dc:9a:73:27:f8:89:63:8e:4f:27:e7:46:ac:3e:ce:6c:c5:7e:
cf:3e:c8:6d:a9:fd:bd:bc:65:6f:cd:e3:8b:8e:6c:ba:d4:8b:
63:c3:c8:17:36:6d:de:90:b7:8f:a3:c4:83:ee:5f:e7:3d:c4:
27:95:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:52 2025 by rpki-client