Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58137A36BDB711EFBA08BEB5762E951A.roa
File: 58137A36BDB711EFBA08BEB5762E951A.roa (raw, json)
Hash identifier: k4TtsfFekAC7jQn5VWxOvhpBbtUNxBLdV1O4HPQQBmg=
Subject key identifier: 87:8E:8B:E5:9E:BC:43:4B:CB:C8:67:14:DE:85:D3:0B:E3:D3:78:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E501
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58137A36BDB711EFBA08BEB5762E951A.roa
Signing time: Thu 19 Dec 2024 03:14:23 +0000
ROA not before: Thu 19 Dec 2024 03:14:19 +0000
ROA not after: Wed 10 Dec 2025 03:14:19 +0000
asID: 984
IP address blocks: 45.204.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58625 (0xe501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:14:19 2024 GMT
Not After : Dec 10 03:14:19 2025 GMT
Subject: CN=67638f8e-58c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:f2:cc:39:92:6a:51:c8:97:54:02:41:97:
dc:e9:0f:aa:34:f6:fb:08:8c:aa:43:3e:d4:9b:b7:
4a:1d:09:a3:eb:65:78:a6:f9:f9:00:4f:69:6d:cd:
9d:67:5d:0f:92:4c:23:c9:f9:b1:f7:f5:cc:92:df:
9e:74:c3:e9:3f:03:1b:7d:e2:f2:a6:cc:81:0e:05:
c7:c5:ec:10:ea:e2:69:36:c0:ad:21:d5:8d:bc:82:
b7:cc:f6:cd:8a:f1:2f:d5:0b:0c:c1:83:01:4a:ed:
ec:20:cb:a9:cc:97:75:f3:9e:53:98:4a:58:a4:78:
d1:19:58:94:96:9d:64:8c:c4:2b:67:03:a1:d7:8c:
02:3e:35:d0:6a:ef:6d:da:4b:b4:55:32:48:75:63:
31:f3:83:20:89:ff:77:b2:10:7d:66:6e:fe:95:76:
ce:27:e3:ba:bd:74:75:86:b9:53:7b:f0:3f:9a:a9:
26:4a:0a:80:96:0c:98:51:63:cf:e5:d5:f0:22:f1:
0c:52:17:4d:0d:17:2f:23:77:51:12:c3:ee:7f:ff:
19:46:d8:6c:2b:f3:bd:62:b0:78:78:a9:18:18:9a:
43:4a:1a:6c:01:a8:06:eb:4d:ba:76:a6:2b:3f:18:
38:6f:b2:41:12:bf:1d:7d:4e:21:52:d4:26:6e:9a:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:8B:E5:9E:BC:43:4B:CB:C8:67:14:DE:85:D3:0B:E3:D3:78:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58137A36BDB711EFBA08BEB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:90:f4:4d:2f:dd:cd:25:12:8f:05:ff:a5:5e:6d:96:8a:d3:
9f:eb:4c:a5:12:c0:5c:d5:ce:59:07:2e:67:c8:88:d4:57:fe:
e3:40:35:0b:21:23:07:59:db:1c:98:6c:5b:d8:20:4d:b6:c2:
1b:99:2b:4c:1e:bf:bd:30:3d:b2:30:dc:6e:14:6f:56:21:1d:
a5:7a:88:27:76:2d:b1:1b:96:48:ca:81:cc:5e:3b:c0:5f:8c:
30:9e:cc:e4:a5:f4:fa:5d:8a:30:1b:df:ce:ef:23:73:ce:e5:
fe:f3:03:d0:eb:0a:5d:46:e2:63:57:29:ba:f4:a6:e8:12:34:
f4:91:94:bd:29:dd:02:0b:32:f1:3c:12:80:0d:fe:d2:a8:c8:
9e:ed:14:32:c9:09:7b:f7:a2:c6:26:bc:39:7f:77:ef:c3:fa:
a8:b5:4b:49:ea:93:bc:88:17:b0:fb:65:91:64:b0:d5:f2:dc:
1c:34:3e:de:e0:8b:20:46:82:f4:96:a8:9b:c1:2b:a3:a9:5a:
82:91:7f:18:a0:58:cb:92:2d:df:37:23:00:56:dd:55:be:ba:
ed:72:47:96:4e:8b:c1:10:76:4c:69:8f:cb:bd:dd:cd:74:1a:
e9:b9:34:a6:ac:ca:a3:4a:d0:c9:78:a3:47:51:b4:de:88:a8:
c9:13:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:26 2025 by rpki-client