Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/547F31F8C81611EFBCEED463762E951A.roa
File: 547F31F8C81611EFBCEED463762E951A.roa (raw, json)
Hash identifier: fpjxWsNd/UW9ukV+F1YGTFxUpIEtlSPt3+eZxL+urhw=
Subject key identifier: C1:8E:DC:AB:2D:53:40:68:AA:87:F0:C2:EA:7A:56:81:76:9C:AE:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F2BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/547F31F8C81611EFBCEED463762E951A.roa
Signing time: Wed 01 Jan 2025 07:59:30 +0000
ROA not before: Wed 01 Jan 2025 07:59:27 +0000
ROA not after: Fri 07 Feb 2025 07:59:27 +0000
asID: 205125
IP address blocks: 45.194.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62138 (0xf2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 1 07:59:27 2025 GMT
Not After : Feb 7 07:59:27 2025 GMT
Subject: CN=6774f5e2-436e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:06:2f:75:9d:5f:ee:34:05:3e:54:53:bb:
b2:07:df:81:7e:5f:1f:81:c3:99:c2:d5:4b:45:b9:
0f:e3:07:04:3b:bf:64:df:f5:ca:52:21:7e:d5:cc:
71:f9:b0:9d:37:4c:33:bf:ce:81:53:23:71:e7:1b:
c2:77:60:6d:c6:65:fa:63:d5:8a:31:b1:18:ed:b6:
f2:4a:5c:98:39:0c:4b:f9:87:24:47:d2:2f:44:ff:
81:e9:d6:1c:8c:ae:a7:65:30:ec:a5:a7:5a:6e:cc:
83:01:fe:12:38:b9:3b:5e:23:d9:ad:b5:bb:5e:70:
e7:71:f1:0b:ca:f4:63:f4:7c:48:1d:62:f9:0c:c6:
10:42:ee:02:8a:fe:11:d2:48:ce:b2:ae:25:2a:59:
10:fc:e8:71:10:65:ac:98:b2:89:f5:1b:6e:9b:9f:
bb:7b:7e:c4:73:ec:1e:89:a6:28:0b:27:62:a4:66:
a3:50:8a:e9:8f:b2:54:ec:71:67:45:7c:66:e6:79:
9e:c2:f9:60:db:a0:ce:2e:8b:35:03:79:58:bd:82:
f6:f5:a6:42:b1:8d:03:12:d3:40:55:ee:19:ea:9c:
e5:92:b6:d9:32:29:26:c2:4f:6c:a2:d7:04:d5:db:
7c:24:9c:93:5f:1c:1b:80:e9:bd:35:c1:4b:2f:33:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8E:DC:AB:2D:53:40:68:AA:87:F0:C2:EA:7A:56:81:76:9C:AE:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/547F31F8C81611EFBCEED463762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.2.0/23
Signature Algorithm: sha256WithRSAEncryption
44:3c:3c:49:fd:5e:73:cb:7c:c5:be:55:51:92:76:29:00:98:
a5:20:e6:f8:bc:3a:5d:6c:6b:ce:90:41:bb:18:b9:3d:a7:4d:
8e:58:c0:f3:6c:36:a7:8e:62:b6:fa:c7:f5:b6:82:26:ac:08:
aa:34:ab:0b:fd:ca:03:69:4d:2f:59:69:19:a9:97:88:d5:72:
51:54:c2:f5:3c:42:35:99:d5:13:84:bb:f0:48:e3:61:a9:39:
3b:80:97:a8:84:a2:1e:0d:54:13:8a:d9:7a:55:ba:44:a4:67:
76:91:68:20:90:15:62:26:96:1a:27:9d:67:6a:bd:04:9d:97:
fe:4c:b6:38:9c:ee:de:ff:29:c1:52:aa:42:52:2d:98:3b:43:
f6:76:8d:bf:73:b0:5c:e7:c5:58:1c:85:22:5f:b2:fc:92:06:
da:d7:97:d8:49:6c:07:5b:3f:ca:3d:4e:b1:16:e6:60:a4:df:
36:e2:ff:b9:d0:f2:f7:56:5e:a3:0a:89:b7:24:3f:1d:36:2b:
22:34:86:1a:1a:2b:d9:7e:f7:c6:f4:0a:74:22:5a:81:b9:91:
2d:83:57:96:10:18:88:10:44:39:c9:f6:8e:08:4d:57:79:35:
25:10:8b:6b:98:11:5d:ca:3f:14:9f:75:7f:ad:11:ba:f8:29:
50:7e:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:30 2025 by rpki-client