Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B2A1650C3B111EFBFD46A7D762E951A.roa
File: 3B2A1650C3B111EFBFD46A7D762E951A.roa (raw, json)
Hash identifier: 5sQguFq1zhNOqOzfhgu/T/oWbCMpLjcFBnDjsOoQFHo=
Subject key identifier: 80:E5:44:65:3B:20:F4:21:9A:53:90:66:C2:9D:7B:EC:50:B3:FE:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B2A1650C3B111EFBFD46A7D762E951A.roa
Signing time: Thu 26 Dec 2024 17:45:44 +0000
ROA not before: Thu 26 Dec 2024 17:45:40 +0000
ROA not after: Fri 12 Dec 2025 17:45:40 +0000
asID: 984
IP address blocks: 45.203.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60995 (0xee43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:45:40 2024 GMT
Not After : Dec 12 17:45:40 2025 GMT
Subject: CN=676d9648-c3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:88:f9:54:e1:1b:e5:36:a9:35:9d:2f:84:
90:f9:c4:bc:13:85:e3:6d:7b:7d:22:bc:af:fd:3e:
a3:c1:d4:06:b0:37:c8:90:14:01:58:ad:63:86:22:
81:72:ca:e3:2d:32:ad:89:2d:08:8a:a0:6a:b0:7f:
cf:69:4e:e7:fa:6b:c0:d0:c3:fd:7a:9a:4e:bf:1b:
d4:73:1d:79:a8:2c:49:55:6e:a4:f1:55:48:1d:22:
57:29:78:61:e4:2b:7f:d5:c5:15:56:35:f8:39:e2:
4a:58:c7:5a:15:65:2b:fb:c3:d6:dd:93:3c:24:c4:
e8:b2:87:4b:21:83:71:f0:44:cd:c4:62:cd:58:e1:
46:42:6c:26:54:ea:80:dc:97:46:f6:2c:8b:90:bd:
12:02:59:ed:99:64:2f:60:11:28:c1:18:69:99:aa:
a1:49:4e:27:97:9a:39:1e:7c:ef:08:7e:c0:a1:c7:
8f:22:8a:6c:71:39:4f:3e:2a:50:cb:46:08:c9:be:
58:25:c3:78:e6:6e:6c:04:68:7e:0e:ec:35:a6:96:
23:29:b6:aa:6a:85:a4:5d:bf:24:90:6d:d5:d1:76:
53:ef:7a:d9:8a:41:45:ec:ab:57:ac:b6:6e:e0:22:
d8:d7:66:31:0c:8b:78:32:4a:b9:21:76:61:03:f5:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E5:44:65:3B:20:F4:21:9A:53:90:66:C2:9D:7B:EC:50:B3:FE:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B2A1650C3B111EFBFD46A7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.35.0/24
Signature Algorithm: sha256WithRSAEncryption
51:02:87:c3:5f:b6:52:c0:bd:d2:6f:2d:98:66:be:b5:ea:69:
b9:8b:63:57:1f:37:4e:7e:14:08:cb:8f:37:6c:e3:b6:5e:81:
76:db:6e:f7:d4:da:6b:71:75:5a:02:64:cb:16:41:f6:c7:31:
15:45:e7:a7:eb:ca:68:a3:16:79:d7:c2:cb:8f:89:63:8e:e2:
45:e4:15:d9:f8:43:10:cb:54:08:9f:a6:a1:73:2b:38:2b:19:
d0:7a:89:d0:73:e4:d0:e2:e7:37:56:ef:1e:94:d0:20:10:e9:
08:ff:57:45:59:3b:a6:6b:25:10:b4:89:8f:c4:d8:e7:ee:da:
35:97:62:41:29:69:80:c1:48:da:de:70:3a:2f:e8:06:ab:29:
cf:11:d2:e1:3f:2f:95:28:52:a2:40:76:d7:06:d7:06:06:e5:
64:f8:fe:1c:b7:6d:c0:19:ec:5a:82:fa:10:65:e7:fd:20:c6:
d5:51:63:08:34:8f:fd:3e:19:43:b1:97:9f:4b:60:40:21:5c:
15:db:b5:81:8d:95:08:ae:b5:ef:ee:39:8a:1d:d6:12:1f:c3:
1d:7c:c8:1d:cc:99:39:b2:24:c9:1f:03:50:24:cc:a4:74:f5:
cc:d2:b2:4f:ff:42:d7:f6:e0:4d:51:4a:9b:c9:42:5f:f3:97:
5d:1b:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:25 2025 by rpki-client