Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ECE85A8BDB411EFAC3312A3762E951A.roa
File: 5ECE85A8BDB411EFAC3312A3762E951A.roa (raw, json)
Hash identifier: ydhQrSCsplFD5QD1puCEOmpMnc1P804RiGmjUsG/Wic=
Subject key identifier: 4A:7C:0E:21:BF:96:00:49:C3:1C:14:35:87:2F:E2:98:9A:80:FB:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ECE85A8BDB411EFAC3312A3762E951A.roa
Signing time: Thu 19 Dec 2024 02:53:05 +0000
ROA not before: Thu 19 Dec 2024 02:53:02 +0000
ROA not after: Wed 10 Dec 2025 02:53:02 +0000
asID: 984
IP address blocks: 45.204.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58587 (0xe4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:53:02 2024 GMT
Not After : Dec 10 02:53:02 2025 GMT
Subject: CN=67638a91-71e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:bc:4d:18:25:f2:9d:5d:5a:f9:d1:e6:22:
7c:c2:c2:b2:4b:03:c8:6c:5e:22:f7:ef:89:35:2f:
95:e8:ae:99:48:f9:3d:27:b2:9f:9c:be:f1:2c:74:
e3:15:1d:ee:a2:9f:32:22:9c:e1:3f:02:bf:73:60:
c1:cb:52:66:4f:4b:97:35:46:ee:41:40:f1:72:19:
92:76:b0:1f:f9:16:f7:bc:42:81:0f:6b:9f:61:60:
c6:47:d0:20:e1:45:7d:02:a2:ca:6c:3b:fb:bd:03:
16:67:b5:b1:0d:e0:ed:d7:3b:ef:45:51:4d:46:66:
27:02:d5:f1:c1:08:57:8a:4c:94:f8:9d:c1:30:91:
da:50:f4:e8:f1:93:a7:80:83:91:8e:85:d3:c3:f7:
3c:90:cc:9c:ef:a4:1a:a1:6c:1b:25:c7:81:72:81:
a4:e9:95:30:0f:43:8d:ae:cd:ed:a8:70:8c:db:95:
6e:4e:ec:1d:29:ca:bd:6f:79:c8:79:fc:e9:e4:1a:
3d:8f:b2:02:3b:da:b6:e7:9f:6f:89:0c:96:b9:8d:
e1:39:bf:53:9b:58:44:67:44:5e:69:aa:a9:03:50:
1d:ac:ef:e9:77:28:f6:63:04:93:6a:e4:75:c3:e8:
2f:ff:24:12:c7:fb:22:4e:4e:b9:06:db:38:4c:da:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7C:0E:21:BF:96:00:49:C3:1C:14:35:87:2F:E2:98:9A:80:FB:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ECE85A8BDB411EFAC3312A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.135.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:aa:f2:02:8e:3b:3f:20:b5:d4:7b:e1:2e:70:6b:5b:9c:43:
f2:01:83:dd:b2:7b:9d:1b:9f:04:13:d2:a6:3f:56:16:34:34:
24:26:32:74:98:83:d2:4b:12:6e:45:bc:55:20:b5:43:27:b4:
99:d1:9e:4d:32:4a:1c:19:5f:a4:49:c6:10:a4:a1:bc:fb:96:
9d:2f:97:85:44:dd:09:0f:36:3b:9a:6a:c6:76:21:40:7c:f0:
b6:18:69:10:9c:cd:90:05:86:e5:b6:55:26:70:41:27:66:e7:
ac:5e:9f:a4:a0:9f:e0:c6:d8:ea:92:47:c7:78:15:e5:3d:c7:
ab:cc:d3:33:f3:8a:f1:90:1d:f6:8e:5a:ac:dc:68:dc:c7:4f:
d7:10:1c:da:5f:98:78:49:7f:8a:61:2c:f2:72:ab:11:18:41:
2d:ef:b8:7d:c2:97:13:c9:d7:25:1f:5a:36:a3:7a:71:d6:8a:
b5:d1:ea:89:c1:f8:0e:29:84:98:4e:a8:36:50:70:9e:c3:4c:
a8:d5:cf:5a:08:35:fb:5c:c8:14:7f:77:f4:59:6f:34:c0:48:
e7:60:f2:b3:1c:05:0d:de:3b:82:93:dd:5e:f6:9d:69:98:d9:
88:55:3f:de:52:7b:f2:74:4b:93:3c:f2:d8:29:6d:2e:8a:ed:
2c:ed:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:34 2025 by rpki-client