Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D3E8C4CBDB911EF94593044762E951A.roa
File: 5D3E8C4CBDB911EF94593044762E951A.roa (raw, json)
Hash identifier: 2mWJZFmFdSf11u+TLcV1avOsAXotazdO+p/uauPd30k=
Subject key identifier: E5:E8:97:74:89:87:83:F3:73:66:BB:A0:83:5E:42:73:5E:7A:A6:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E51B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D3E8C4CBDB911EF94593044762E951A.roa
Signing time: Thu 19 Dec 2024 03:28:50 +0000
ROA not before: Thu 19 Dec 2024 03:28:47 +0000
ROA not after: Wed 10 Dec 2025 03:28:47 +0000
asID: 984
IP address blocks: 45.204.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58651 (0xe51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:28:47 2024 GMT
Not After : Dec 10 03:28:47 2025 GMT
Subject: CN=676392f2-9c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:c4:a3:22:ae:1a:a4:51:c2:26:21:a5:2d:
26:32:01:6e:ba:27:6c:81:27:49:00:9d:f7:d5:32:
f5:91:40:4c:74:46:0c:bc:4e:b4:60:06:b9:40:71:
a2:f5:be:86:1e:bb:5d:93:6c:d4:28:5f:a9:f6:8a:
89:61:3d:8c:5c:d0:61:8c:a4:2c:1d:a1:79:17:ea:
11:73:24:f2:28:f4:93:00:e2:4e:4a:c0:26:ff:de:
86:6c:b5:3e:27:16:f1:4a:e4:ce:b7:1e:e6:95:b2:
d7:be:99:6d:2f:85:61:a8:62:86:71:8c:b2:5f:0b:
c0:c8:e9:e3:7c:68:a7:a5:99:df:d6:52:d1:e0:10:
a7:38:a7:3c:24:8d:97:ea:98:78:fe:8e:09:05:b2:
16:84:ee:39:a9:8d:e2:4b:8a:41:9f:b4:3b:81:e4:
49:72:b4:d3:90:1f:61:90:0c:bf:73:17:0f:cd:d5:
49:05:cc:4a:ad:fc:b5:21:b3:ac:f1:c6:5e:8a:64:
bf:4a:ff:43:14:1d:60:17:72:dd:36:82:ed:e6:da:
55:88:75:16:9b:83:f6:77:84:1a:b5:49:c7:d9:c0:
e5:40:5f:c9:2a:b6:8d:66:22:25:ba:84:32:a1:c8:
62:f1:2f:d4:82:83:f3:a9:ae:23:47:45:b3:a0:31:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:97:74:89:87:83:F3:73:66:BB:A0:83:5E:42:73:5E:7A:A6:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D3E8C4CBDB911EF94593044762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a1:6f:63:d5:76:cc:9f:46:96:68:2e:71:39:e1:60:34:f2:
af:cd:54:52:02:18:06:8f:4a:9b:c3:a7:c7:d1:ae:99:e4:e4:
f5:55:63:bf:15:c1:ed:9d:aa:22:ea:7e:61:23:52:8f:39:f1:
83:79:26:b9:12:78:90:0b:f8:fc:09:fd:a4:2b:8d:b6:dc:0d:
e9:8d:2c:7c:53:14:50:25:84:f9:59:ad:ab:e6:55:d9:d3:c7:
04:3b:ab:b1:56:7e:72:4e:94:67:5c:26:f9:10:17:c8:50:ee:
fd:12:db:c6:af:44:71:f6:41:e6:73:99:6e:39:09:20:2d:eb:
c1:38:45:fd:e4:80:89:94:8f:41:77:56:85:e8:f4:10:47:70:
a0:cc:8d:3f:e5:a9:fd:8c:ac:7a:6f:ac:0a:1a:b2:6c:0d:62:
85:5e:3b:78:f2:22:fc:5b:5c:37:37:7f:72:0b:c0:73:df:16:
06:44:73:4e:e3:1f:e5:89:fa:76:e0:e7:05:8e:0f:04:90:d8:
ca:6a:a5:0b:ef:98:29:16:4b:0c:80:ec:f7:5e:f2:68:ac:c1:
33:aa:b4:9d:4d:89:ea:02:62:82:4f:f3:ff:68:af:cf:ed:d3:
69:d8:5b:e9:0e:fa:4a:0b:55:6f:1a:44:12:5a:5f:07:66:ee:
f9:c4:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:45 2025 by rpki-client