Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B88DE12BE7211EFA0734EBE762E951A.roa
File: 4B88DE12BE7211EFA0734EBE762E951A.roa (raw, json)
Hash identifier: GejUX/cP72F+4sEm9wpQtqhPjUsJfw237pvrCyonMe0=
Subject key identifier: 90:18:B7:8D:5E:B3:1A:A6:CD:61:52:CC:2D:EB:50:90:27:E6:75:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B88DE12BE7211EFA0734EBE762E951A.roa
Signing time: Fri 20 Dec 2024 01:32:38 +0000
ROA not before: Fri 20 Dec 2024 01:32:34 +0000
ROA not after: Wed 10 Dec 2025 01:32:34 +0000
asID: 984
IP address blocks: 45.206.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58874 (0xe5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 01:32:34 2024 GMT
Not After : Dec 10 01:32:34 2025 GMT
Subject: CN=6764c935-6df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:bd:58:16:35:42:fe:22:3f:7e:e1:e1:73:
bc:44:da:79:f1:02:fe:bd:64:3b:db:44:a9:4f:32:
86:f2:b3:22:49:38:10:34:e3:f6:cb:86:ff:c0:5d:
51:92:cf:83:7e:5f:5b:da:dd:bd:99:42:4a:48:14:
bc:79:56:32:9e:21:c0:1f:f6:d3:7e:49:e2:e3:ff:
df:49:f9:14:0f:cf:61:3d:90:f0:a2:b3:88:44:fc:
58:58:ee:b4:32:13:42:9e:d1:9c:35:d4:c9:80:e3:
9c:1e:c3:38:e8:3b:61:81:5f:6d:be:99:03:4b:27:
ad:23:53:48:0c:69:3f:e9:a2:71:fc:ed:6c:aa:7d:
d0:e1:f9:67:af:4f:07:65:9c:fd:35:44:da:b6:47:
0e:ec:d1:d5:e6:a4:89:21:c5:a2:18:06:94:48:bb:
d4:1c:7a:5d:ea:0a:8d:c4:4b:35:f3:e6:39:97:0a:
1b:1f:e2:41:74:bb:7f:30:2e:2f:55:57:3c:ba:e4:
5b:a3:ca:b2:97:3f:b0:43:66:56:38:a6:2c:30:4b:
44:ea:21:5b:20:66:d5:a8:ac:46:61:dc:5a:2c:81:
f2:a9:99:1b:1a:cb:79:c4:62:d1:c5:9b:32:47:78:
4c:7f:b4:18:8c:33:9a:2c:4b:c2:49:0a:37:41:e6:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:18:B7:8D:5E:B3:1A:A6:CD:61:52:CC:2D:EB:50:90:27:E6:75:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B88DE12BE7211EFA0734EBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.124.0/24
Signature Algorithm: sha256WithRSAEncryption
14:0e:1d:69:7a:8e:85:e7:6d:7e:e4:5d:f1:fb:44:7e:4e:36:
3a:b3:fd:ef:7e:e9:9e:d7:f0:89:80:f7:24:cd:ac:4c:71:e7:
c4:63:91:4d:97:b4:4b:4f:8f:bc:03:93:45:9c:54:ce:dd:8b:
55:ac:5f:28:ce:9a:8a:50:de:4c:69:85:1f:3a:42:be:da:47:
c8:34:f8:89:71:aa:76:bd:d5:68:8a:03:15:16:a2:67:b8:37:
aa:f6:30:e1:04:89:21:63:da:79:ad:84:38:8d:5f:d8:e1:63:
c5:ff:f2:1d:50:41:f4:f9:04:4a:1b:ee:cf:c1:79:e4:2a:f7:
f4:bc:3a:2e:c5:d7:a2:b7:39:62:8c:bb:6a:ba:12:8d:84:0b:
b0:fe:3f:ce:a1:b0:d0:e7:6a:9d:ee:33:db:39:98:08:d4:74:
34:83:c0:6c:05:45:91:8c:51:8e:ee:d3:de:af:5f:e6:ee:ac:
74:0b:7a:bd:d7:d6:c1:95:88:6a:ce:4c:34:d3:b2:df:f2:5b:
88:90:29:24:f3:63:7f:a5:6a:f4:98:51:9d:f8:d2:72:5d:ba:
15:f9:f0:ca:1d:12:7d:d5:46:e2:87:df:8e:c2:9d:35:f5:51:
d9:32:e0:dd:40:f1:08:55:c4:ca:61:23:d5:90:c4:78:59:19:
b4:d9:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:32 2025 by rpki-client