Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AA71E16BE7511EFAC294C56762E951A.roa
File: 4AA71E16BE7511EFAC294C56762E951A.roa (raw, json)
Hash identifier: BRHt6AbfEQq0/Jmxxyib7krc8Rdwa/VvoW/cSqEsq+o=
Subject key identifier: 5C:E5:1C:4C:6B:3A:DF:19:0F:F0:E0:9A:8C:34:4A:FE:FA:69:B4:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E61E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AA71E16BE7511EFAC294C56762E951A.roa
Signing time: Fri 20 Dec 2024 01:54:04 +0000
ROA not before: Fri 20 Dec 2024 01:54:01 +0000
ROA not after: Wed 10 Dec 2025 01:54:01 +0000
asID: 984
IP address blocks: 45.206.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58910 (0xe61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 01:54:01 2024 GMT
Not After : Dec 10 01:54:01 2025 GMT
Subject: CN=6764ce3c-8d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:65:f8:4c:ad:f2:58:b7:44:48:20:65:37:
1e:ee:f5:c1:92:d4:cb:4f:18:37:14:a0:d4:f4:03:
41:fd:83:ca:c1:3a:5e:9b:5b:5e:33:91:4b:27:49:
5b:8b:a6:e0:e6:20:8c:df:89:98:ec:49:cd:26:07:
0b:65:c2:a9:d4:7c:ef:14:39:03:79:2b:4d:15:34:
4c:68:eb:c3:55:b5:8f:72:e2:47:f2:2e:9c:8b:a3:
f1:42:cc:70:5f:b3:79:dc:1d:d8:0c:44:d4:b8:15:
4b:4a:e8:39:30:1a:85:53:72:40:46:d4:fb:6a:f0:
ae:eb:8c:e4:6d:de:a2:3d:2e:3d:64:20:e1:89:df:
e5:ef:10:91:03:ef:6d:fa:c8:98:79:ca:b2:a2:d6:
57:14:10:ed:96:18:26:ea:29:73:e0:76:85:5c:30:
5b:5c:f3:83:75:a5:07:02:05:37:d9:9f:4e:0f:fa:
97:66:3c:1c:db:6a:8c:3b:84:6b:a9:34:fc:f5:42:
55:99:98:ed:01:65:cb:9c:75:48:6d:a7:64:36:bd:
ca:a7:9b:4d:a9:60:4a:57:09:24:11:01:50:05:11:
1f:34:b3:44:dd:a1:e6:2d:10:5c:4a:a3:8c:3b:54:
29:5c:b0:b3:f1:44:eb:a5:8e:f7:6a:17:7c:b5:5c:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E5:1C:4C:6B:3A:DF:19:0F:F0:E0:9A:8C:34:4A:FE:FA:69:B4:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AA71E16BE7511EFAC294C56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:55:a9:5d:09:35:ce:d5:f7:ba:cd:e0:a9:2b:f8:57:76:99:
84:dc:b5:7d:d6:68:c9:97:ca:78:75:04:b9:8d:75:79:81:bd:
9d:c4:aa:ce:6a:c8:23:cb:2c:69:6d:80:7e:6a:d6:b6:72:9f:
5b:f5:19:46:53:5c:b7:76:74:36:fc:2c:c4:77:14:fa:a7:e5:
1d:7c:e0:c2:6c:d4:35:98:6b:60:bf:b7:ab:5e:13:83:a4:82:
b6:82:e3:26:6e:b0:e6:65:ff:3c:ad:8c:57:cc:77:c1:96:15:
45:94:d3:46:5f:0d:06:97:22:e1:b6:b3:12:18:2d:3d:54:4e:
78:29:31:e0:61:af:cb:55:31:1f:5d:4c:8e:13:b9:66:dc:75:
3c:68:91:9d:dc:af:49:0a:7a:fb:de:fc:0d:6b:cc:42:0e:ec:
31:4f:28:2c:8b:31:79:05:0a:d7:c7:5d:4b:a7:54:56:33:f9:
a6:69:58:cf:25:b9:07:84:f1:2e:02:c5:e9:35:3b:1a:3c:50:
77:09:fc:e9:f2:ca:34:30:99:50:1a:b6:c1:54:fa:3a:cf:d2:
b1:be:0b:8f:07:38:5f:d8:07:ed:6a:eb:37:fe:89:fa:1a:c8:
2a:f5:69:b9:20:37:f2:2c:80:af:56:98:d5:c5:99:87:6d:c2:
b2:a7:64:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:32 2025 by rpki-client