Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CE7C934BDBB11EF9693D651762E951A.roa
File: 3CE7C934BDBB11EF9693D651762E951A.roa (raw, json)
Hash identifier: ncR84nGYiTBouxd3zK3FtFpNPD7l/qQC5ZS0pCSGe34=
Subject key identifier: 37:BE:5A:D1:31:54:D2:86:AF:98:94:80:1A:FA:44:1F:17:F9:89:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E533
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CE7C934BDBB11EF9693D651762E951A.roa
Signing time: Thu 19 Dec 2024 03:42:15 +0000
ROA not before: Thu 19 Dec 2024 03:42:11 +0000
ROA not after: Wed 10 Dec 2025 03:42:11 +0000
asID: 984
IP address blocks: 45.204.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58675 (0xe533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:42:11 2024 GMT
Not After : Dec 10 03:42:11 2025 GMT
Subject: CN=67639617-cbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:37:97:29:2f:4a:2b:3d:7b:9a:ac:5c:0d:c7:
5d:d5:ad:09:b9:63:ef:38:a2:dc:35:b2:77:ef:47:
0e:59:17:63:e0:f0:93:c2:93:c5:85:f4:93:d1:dc:
20:db:75:d8:b6:83:4a:1e:7c:98:28:fa:08:a7:28:
57:f1:c4:dc:be:09:ce:9e:b1:92:96:02:03:a9:11:
6f:ea:14:cc:ce:f7:29:a0:96:4f:0a:a3:3f:4d:c0:
62:cf:71:0a:55:44:e0:5f:84:ad:88:4a:46:62:42:
23:34:e5:ab:d3:7f:75:0d:34:65:6d:1b:6c:88:85:
67:43:0c:76:a4:17:f3:54:c9:97:be:eb:c7:13:31:
9c:a4:d1:fc:33:b5:2f:ff:22:52:86:0e:ec:52:08:
e4:86:60:67:77:7b:df:eb:94:a8:55:97:a6:cc:08:
fe:b9:d0:c1:3f:da:e3:fd:80:24:e8:96:2b:8e:2a:
4d:1d:a9:d9:1b:bf:f1:fb:67:40:b4:cd:5d:0f:7f:
dc:4c:78:b5:55:f9:fc:13:5f:ba:f8:5e:1d:4b:12:
e0:eb:c4:b1:07:04:5f:48:ea:50:c0:1c:11:bb:fd:
d4:0e:07:1c:55:67:ba:19:53:cc:97:e5:31:3f:b7:
fb:b6:d2:ac:47:09:60:4b:a2:b4:ff:bf:32:e9:47:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BE:5A:D1:31:54:D2:86:AF:98:94:80:1A:FA:44:1F:17:F9:89:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CE7C934BDBB11EF9693D651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.255.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cd:1d:36:13:ef:a9:dd:cc:a7:a2:26:75:74:e9:67:43:15:
f9:f5:b1:fc:7e:25:b3:25:79:30:d6:3b:bc:cc:2d:51:1d:51:
72:d5:e7:71:91:f8:76:d6:34:00:ed:8e:e2:25:fe:0c:31:23:
78:99:33:fe:b9:87:ad:14:3d:7d:65:0a:31:11:91:1a:04:15:
0a:57:a9:68:54:fa:b6:bc:32:94:1b:70:29:01:75:1e:be:d7:
4d:df:21:39:7d:33:e8:5a:b5:21:3a:9e:26:8b:47:48:2c:fd:
66:54:be:da:18:e3:d0:22:b3:8e:59:5a:30:1b:3e:bc:11:30:
02:82:05:58:cb:a0:24:78:a4:16:52:3d:e9:d3:27:b5:c3:76:
35:85:51:8a:b1:03:28:b4:21:bd:87:20:a3:19:0b:db:cf:38:
9c:99:c6:97:ce:57:30:a7:af:13:87:4e:81:6f:f8:36:37:86:
85:3c:7e:9a:dd:e8:9a:f7:4a:cf:83:89:c2:ed:c1:7b:55:ae:
9f:b4:83:43:2a:b8:59:a4:93:fc:a6:eb:6f:c1:c9:f7:2d:6e:
dd:22:47:03:f8:3e:02:5c:65:18:94:41:11:35:47:fb:c8:18:
62:04:63:aa:62:3b:5f:ae:f8:64:2e:95:22:d4:75:96:05:13:
92:95:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:26 2025 by rpki-client