Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41E1EBBACDB311EFA3BD19A9762E951A.roa
File: 41E1EBBACDB311EFA3BD19A9762E951A.roa (raw, json)
Hash identifier: HxgrALr8EbSaGtyuAG3U//52PwxQ9W+wZZ7k0F0zWQg=
Subject key identifier: A9:98:5E:94:9B:96:DC:85:34:A6:DB:77:7F:4A:41:71:2C:CD:60:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010191
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41E1EBBACDB311EFA3BD19A9762E951A.roa
Signing time: Wed 08 Jan 2025 11:25:26 +0000
ROA not before: Wed 08 Jan 2025 11:25:22 +0000
ROA not after: Thu 16 Dec 2027 11:25:22 +0000
asID: 17561
IP address blocks: 45.201.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65937 (0x10191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 11:25:22 2025 GMT
Not After : Dec 16 11:25:22 2027 GMT
Subject: CN=677e60a6-f24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:87:70:f5:98:94:08:d3:a3:44:7f:cd:c7:
eb:92:2a:70:ea:10:35:61:b1:b2:a2:73:bf:91:77:
45:d6:3f:b2:16:eb:5e:92:e5:df:3c:0e:60:ef:9f:
05:98:30:69:33:e9:95:b8:51:a2:4f:42:c4:d6:a5:
cd:bf:cf:98:43:a4:38:92:5d:f9:12:8c:1d:09:e4:
12:d8:5c:e1:74:b9:31:ae:8e:14:a1:b0:18:cd:ff:
01:d8:f0:ff:2c:80:8c:6d:87:d3:3b:91:5a:a6:7d:
d3:3a:cd:7a:54:62:ed:ed:ea:d2:a8:80:51:23:a2:
64:91:1f:20:da:95:70:ed:ce:46:4e:0f:e1:1e:bb:
9f:c0:e1:5f:5f:26:79:d6:e6:cd:11:7b:64:bf:42:
95:d3:a9:a5:e2:c7:b9:70:56:8a:32:86:dc:22:7b:
3f:3d:6c:1d:2d:ad:9a:35:be:fe:40:ff:81:a8:7c:
14:8d:77:bb:ec:e8:95:1b:3c:32:a5:6c:b9:59:cf:
f3:17:f3:32:3c:fd:f5:7b:ee:23:e3:33:ff:8d:f4:
05:78:0a:9f:fd:9a:ba:59:6d:97:c4:0f:69:4e:31:
a8:c8:ed:1b:67:fc:8a:81:1d:87:7e:c2:56:84:4a:
c5:e2:db:73:48:45:d0:48:24:2b:90:ce:eb:72:01:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:5E:94:9B:96:DC:85:34:A6:DB:77:7F:4A:41:71:2C:CD:60:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41E1EBBACDB311EFA3BD19A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.233.0/24
Signature Algorithm: sha256WithRSAEncryption
73:77:8b:36:72:0d:17:c5:5b:67:8e:8b:36:07:64:22:1c:21:
1a:17:61:e2:4f:c7:2d:b8:9f:32:ac:81:fe:d0:95:e3:80:28:
83:68:2f:a2:55:31:f3:3f:6f:86:1e:04:8e:ac:93:a8:86:22:
7d:f6:43:5d:1c:9c:31:ff:3d:47:97:7d:f0:72:14:ae:ad:0d:
1d:c8:7a:7a:bc:95:6f:c1:5a:b5:cb:cc:f1:5e:be:22:41:4b:
b2:5d:cc:52:b4:ff:d2:dc:61:a2:b0:c5:dd:aa:04:e8:22:1e:
84:7f:bb:52:77:b3:8e:8f:27:96:7a:7e:cc:6a:6b:d0:f7:3d:
91:d2:f0:87:76:fc:a3:cc:d1:ef:30:46:b9:44:39:bb:40:27:
4f:36:be:d5:bb:c0:13:a4:34:d4:c0:c3:98:26:50:89:34:85:
d2:3c:b7:63:20:87:cf:f0:56:c6:56:58:af:0f:43:f9:92:c8:
72:16:a5:e4:59:e7:46:14:e4:d2:34:ef:c7:71:4e:3d:70:6c:
e5:91:60:b2:ac:72:e7:4e:d4:4f:49:02:cf:03:91:f3:b4:9d:
21:18:e5:ff:2c:45:9b:6f:1e:80:89:79:56:55:15:72:b9:79:
68:49:77:89:aa:41:29:68:4c:44:94:8f:e5:ba:ed:a0:df:15:
2f:65:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:04 2025 by rpki-client