Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46E5ADCECADC11EFBB3AFB8A762E951A.roa
File: 46E5ADCECADC11EFBB3AFB8A762E951A.roa (raw, json)
Hash identifier: AxnxgTvbxQ2EQbSaGNElIlnpD3msKPTqk0EFQZ0PemM=
Subject key identifier: 93:3C:6D:2C:CE:88:E5:96:7B:5D:D9:40:AF:F5:F6:00:02:41:A6:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46E5ADCECADC11EFBB3AFB8A762E951A.roa
Signing time: Sat 04 Jan 2025 20:41:30 +0000
ROA not before: Sun 05 Jan 2025 20:41:27 +0000
ROA not after: Sat 08 Feb 2025 20:41:27 +0000
asID: 395793
IP address blocks: 45.201.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63392 (0xf7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 20:41:27 2025 GMT
Not After : Feb 8 20:41:27 2025 GMT
Subject: CN=67799cfa-957b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6b:2c:bf:82:7e:ab:77:48:fb:3b:b8:39:6f:
d8:ea:48:24:87:e2:28:77:b9:e4:22:7b:57:e3:0b:
fa:a7:9e:0f:4f:ec:3a:64:ae:29:b1:be:e1:5a:12:
ce:f5:41:18:4f:d2:a7:ae:c5:ba:89:c6:a1:7c:48:
5f:11:65:b7:c7:d0:0f:bb:09:c0:0a:2e:b7:c3:22:
b9:a4:0e:4c:51:df:35:ef:68:37:0e:1e:fe:28:96:
22:ef:3c:ea:78:a9:05:a3:77:98:6b:50:b6:1f:d5:
6d:4e:33:9e:6f:48:65:67:6c:12:e1:c9:f8:cc:04:
76:0e:46:5a:cc:4a:61:77:3a:c2:8e:dd:7b:5d:c3:
07:da:94:b2:8f:8f:01:5d:ff:29:ea:08:1c:c6:5e:
bc:3a:2b:cf:ee:74:bd:96:e3:16:82:44:d1:00:35:
d1:00:e5:5f:c7:c1:7c:0a:2c:7d:71:1f:83:c7:e9:
37:30:81:6d:77:c3:4e:7a:56:4f:ed:a8:32:5c:a4:
a0:6f:b5:b8:33:50:07:ec:69:90:36:b4:86:5e:a8:
ad:42:38:7f:22:5a:f8:36:71:4f:91:22:98:4d:ff:
5d:61:77:51:d8:18:dc:30:e7:fb:34:ff:24:9d:26:
6f:89:a8:83:41:86:3a:56:4b:d5:06:f1:87:0c:16:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:6D:2C:CE:88:E5:96:7B:5D:D9:40:AF:F5:F6:00:02:41:A6:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46E5ADCECADC11EFBB3AFB8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.30.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:26:17:c4:0d:70:4a:8d:82:de:06:f7:36:c0:1b:08:95:1b:
25:d5:bc:c9:42:90:b6:7e:58:bb:c2:f7:c6:6b:98:be:81:34:
27:6a:fd:d8:c4:28:e0:23:68:ec:08:77:18:aa:2e:53:b9:d8:
92:9d:33:5c:8b:61:2d:ad:2b:84:60:f2:c8:c3:b0:e3:8a:69:
9e:99:ff:6c:14:43:93:7c:2a:27:60:16:2d:d2:90:c0:8a:6a:
3b:a4:94:a3:b5:03:97:f5:f4:c3:67:61:73:9d:e8:af:4d:1e:
6f:b7:a7:b7:42:0e:16:14:95:6a:e9:ef:d5:f7:8f:5b:ba:f4:
8a:ca:99:76:20:c2:01:00:d0:f8:62:a9:dc:76:85:28:88:f3:
d8:75:18:31:54:fb:8d:46:cf:6b:3c:0c:01:9e:31:95:54:05:
77:57:0f:7a:07:53:a5:ac:64:c2:c8:ab:a6:a6:fd:9f:17:61:
c4:ae:6c:e0:5c:f1:b6:c1:cd:c5:32:a7:4d:80:45:11:57:fb:
0f:74:84:e2:91:2a:c7:39:14:5d:46:c9:e6:78:4d:a6:bf:ec:
4d:68:6b:1b:eb:28:e8:32:b1:4a:0a:c5:fb:38:62:3d:a8:1a:
17:08:35:56:6e:ca:79:c0:67:63:c2:e0:00:61:54:a5:8a:13:
e4:14:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:18 2025 by rpki-client