Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48D43500BDB811EF8EF232BC762E951A.roa
File: 48D43500BDB811EF8EF232BC762E951A.roa (raw, json)
Hash identifier: /K5vfe7OkLLUfT/6VyvH/cVHwOPFxtgJ6mGICTUjs5s=
Subject key identifier: 62:42:A7:93:D4:F5:62:E4:6A:5D:F2:6B:7C:3F:7F:C4:73:98:3A:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E50D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48D43500BDB811EF8EF232BC762E951A.roa
Signing time: Thu 19 Dec 2024 03:21:06 +0000
ROA not before: Thu 19 Dec 2024 03:21:03 +0000
ROA not after: Wed 10 Dec 2025 03:21:03 +0000
asID: 984
IP address blocks: 45.204.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58637 (0xe50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:21:03 2024 GMT
Not After : Dec 10 03:21:03 2025 GMT
Subject: CN=67639122-e439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:50:66:ca:cd:d9:99:df:3f:73:be:be:da:
9f:46:1b:4a:93:44:06:7d:65:8f:86:73:a4:0a:74:
00:ca:01:06:b6:f3:4c:05:1d:ca:df:7e:52:81:dd:
ee:8c:b8:90:04:01:f7:44:91:e6:e7:20:2c:2d:bf:
07:a6:ce:4d:7b:28:19:28:49:e0:26:b5:55:62:4e:
a2:04:2e:bb:0e:b7:74:5a:4b:89:f9:6d:44:bd:1d:
f5:79:f5:52:dd:a4:ff:b1:4a:a4:b2:c9:74:ff:57:
ad:26:dd:48:90:66:26:3c:42:b0:fb:9d:88:90:57:
96:ac:93:f8:84:13:34:55:f5:e9:98:fa:da:bc:00:
34:a8:5e:fb:8b:e7:2f:ed:d9:9c:e3:3d:72:e1:c6:
8d:33:9e:45:e9:e5:68:5f:c4:b2:ab:19:c7:1e:3d:
2e:ff:02:49:ef:f5:44:38:62:64:97:1e:7c:ce:80:
d4:92:b5:39:e5:1d:14:a1:69:b4:f4:6e:9e:42:61:
13:24:cd:4a:63:bb:6b:7d:de:9a:09:74:e3:b1:19:
47:84:a5:a5:94:51:ef:f4:a5:7d:67:a1:06:9f:05:
7d:9c:0f:42:79:1c:56:f9:be:2e:c8:a1:b9:c3:f9:
e4:91:ec:21:09:3d:1c:45:28:e9:39:9a:d8:e8:5d:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:42:A7:93:D4:F5:62:E4:6A:5D:F2:6B:7C:3F:7F:C4:73:98:3A:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48D43500BDB811EF8EF232BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:6d:3d:90:26:ef:87:bb:3c:16:41:68:a0:7e:e1:cd:e6:fd:
ed:7e:6b:9c:f6:30:7d:20:fd:26:55:8c:41:c7:ad:1c:9b:54:
f3:f5:50:20:7b:80:ef:01:4a:06:b0:27:21:0b:7b:e5:77:ba:
3c:9a:bb:f6:76:9b:fd:86:b6:32:2e:17:38:d6:3f:ef:6c:20:
12:03:b1:34:97:06:e9:74:22:b2:c9:dd:04:79:52:84:5f:67:
68:69:f3:cf:9c:ef:59:b4:a5:56:ec:53:e9:c5:1c:4b:c4:38:
b5:d3:39:a7:b8:8c:5e:c6:db:fc:f1:2c:65:96:61:33:f3:1c:
36:12:c5:c8:d6:96:44:f5:00:1a:d7:73:a1:62:a5:cb:70:cc:
a6:fc:8b:16:3f:d9:d8:09:41:fe:f0:e3:74:e7:76:e3:eb:f0:
66:b2:4b:5e:8a:b9:cf:aa:b4:e1:de:e5:86:c4:90:b7:37:4f:
58:d4:1a:78:41:90:59:b8:a3:43:3b:ce:66:79:d1:d5:86:54:
12:ec:09:45:eb:c5:51:39:b9:14:84:07:07:73:90:a0:90:dd:
b7:37:4d:86:03:b7:eb:ef:c9:3d:ea:b6:43:87:48:f5:27:1d:
58:77:73:e2:10:b3:df:85:7b:15:03:01:a0:5b:80:a8:e9:8a:
a5:cf:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:49 2025 by rpki-client