Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D3CC52ABE8C11EFA95F5473762E951A.roa
File: 3D3CC52ABE8C11EFA95F5473762E951A.roa (raw, json)
Hash identifier: QwJLX/Hy08kUWZWdhjkpsX2FKHimdAKotLJqxMbc6T4=
Subject key identifier: F2:66:F7:87:F6:F1:AD:24:56:C4:B1:4D:16:E0:FA:EB:95:BC:36:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E6D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D3CC52ABE8C11EFA95F5473762E951A.roa
Signing time: Fri 20 Dec 2024 04:38:20 +0000
ROA not before: Fri 20 Dec 2024 04:38:17 +0000
ROA not after: Wed 10 Dec 2025 04:38:17 +0000
asID: 984
IP address blocks: 45.206.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59090 (0xe6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 04:38:17 2024 GMT
Not After : Dec 10 04:38:17 2025 GMT
Subject: CN=6764f4bc-0962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:50:00:5d:e3:0f:7c:7f:c5:f6:37:80:1c:
e1:46:06:89:4d:60:2b:e2:f6:23:54:21:b5:e6:45:
ab:07:6f:11:e2:33:61:39:2c:88:e1:71:d8:91:c4:
b5:5d:06:47:f7:bb:91:4f:e9:98:7e:32:d4:c4:60:
d5:7a:38:78:82:b5:46:a2:42:37:4c:67:3e:c3:28:
24:1d:71:ed:5f:02:b1:51:b5:5a:8d:cc:70:d1:98:
aa:61:cd:82:90:d7:51:5b:72:08:e6:e8:46:c3:f3:
ee:20:cc:4c:cc:31:2d:73:f8:ca:2f:6b:0e:7e:17:
29:4a:d8:54:78:a8:a5:54:5e:18:4a:9f:c9:f6:92:
e4:41:9c:f7:22:c3:aa:45:2a:33:d6:37:71:ec:2c:
85:78:46:f0:95:ce:53:57:0a:1d:69:52:0e:b4:0b:
82:c2:ab:ee:23:1b:d2:f5:66:be:0b:c6:3f:a0:19:
66:1a:af:f6:71:16:ec:78:a8:d7:85:1e:ca:3a:89:
ef:54:14:b1:4c:73:18:17:db:34:ba:cf:47:99:57:
7c:95:0b:f1:54:2e:0e:6a:8f:d3:07:1e:84:e3:26:
3e:aa:01:2d:bb:07:a6:3b:c5:78:16:8f:ed:c1:9d:
ec:c0:94:ef:9e:c1:8d:01:f2:4f:18:af:c9:c0:ed:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:F7:87:F6:F1:AD:24:56:C4:B1:4D:16:E0:FA:EB:95:BC:36:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D3CC52ABE8C11EFA95F5473762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.236.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7d:7a:09:5a:6e:b4:50:91:f2:f9:29:60:88:04:13:0f:87:
71:f5:fb:86:ff:06:5e:22:5a:0f:13:a0:c6:d4:05:eb:f6:a4:
f8:f4:d8:98:b4:8f:73:64:1f:84:82:1f:6a:dd:34:a9:ab:79:
2c:36:33:64:03:45:66:f5:e6:be:e7:6b:88:5c:1e:9e:e7:6c:
a7:a5:cc:84:fc:d9:f9:34:1f:63:ea:3a:2d:be:7e:be:37:38:
a3:3b:46:6f:55:41:39:b1:05:0e:86:a4:b7:5c:9a:41:31:02:
b0:87:78:62:05:21:ff:5d:10:12:d5:ae:62:94:3b:f1:8c:10:
d8:53:ca:04:2c:2e:f2:58:6d:8c:30:ef:c5:6a:e9:2b:23:b6:
6d:48:ec:76:8b:ee:14:27:42:21:e6:43:1a:d7:9d:5e:d2:c9:
41:ce:01:07:05:ea:f7:9b:bc:df:92:d7:3c:5b:f8:c5:48:bf:
43:6a:5b:04:5c:96:df:42:31:97:81:f1:4e:65:cf:d8:6f:8d:
87:81:03:99:e5:cb:c3:0c:cd:cd:f4:f4:99:9c:f8:6c:e1:e8:
48:56:52:16:09:16:63:34:e7:81:28:f1:13:4d:8e:20:80:48:
df:08:14:f2:75:9b:17:8e:2b:bf:49:83:38:4b:87:22:63:df:
10:a3:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:12 2025 by rpki-client