Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F05638ECF0211EF83112E88762E951A.roa
File: 5F05638ECF0211EF83112E88762E951A.roa (raw, json)
Hash identifier: 44t7DM9VDj0R4oso9x595n8uHKJYvZbpChuSrGpLp5M=
Subject key identifier: 1D:21:6F:EF:FA:0F:D1:27:08:55:79:52:AD:E9:80:04:BD:3B:E5:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F05638ECF0211EF83112E88762E951A.roa
Signing time: Fri 10 Jan 2025 03:24:16 +0000
ROA not before: Fri 10 Jan 2025 03:24:13 +0000
ROA not after: Fri 14 Feb 2025 03:24:13 +0000
asID: 984
IP address blocks: 45.195.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66781 (0x104dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 03:24:13 2025 GMT
Not After : Feb 14 03:24:13 2025 GMT
Subject: CN=678092e0-5bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:af:68:91:15:c6:2f:73:a9:a8:3e:bf:2b:
57:23:4d:f2:d7:6b:f1:95:f0:08:e2:a9:71:92:50:
ca:8b:a0:d7:a0:04:29:1f:17:12:fd:9f:ef:e7:d6:
4c:f8:67:eb:58:76:21:46:1d:cc:b4:36:52:2a:17:
bb:36:bc:df:60:3d:16:d7:87:af:4e:7a:70:63:3e:
b8:f2:c3:d0:d4:8a:73:f2:6c:70:62:7b:8f:2b:25:
04:dd:0a:d1:41:f4:f1:f2:42:db:b0:4b:bc:67:ee:
23:c8:03:4d:0b:29:2b:a0:c8:1d:c7:4d:1a:ca:98:
25:a6:da:57:dc:53:a0:e1:e6:24:52:13:0c:7c:41:
33:d7:94:14:3e:23:23:15:6a:fb:b3:00:44:16:62:
85:1c:63:2b:f5:5c:bf:a3:a7:13:e6:5f:cf:9d:df:
00:d5:49:ee:e0:cf:d6:e4:24:2b:98:03:c7:38:af:
d8:7a:14:be:ac:5c:e9:c8:3c:3c:ee:35:c5:b5:fc:
5f:bc:ad:a5:b1:02:f6:16:53:73:ab:f9:3a:7f:27:
2b:e1:31:02:6c:4a:78:22:15:65:f6:1a:aa:4d:c8:
b9:bc:ec:9c:bf:52:36:09:44:d2:01:8e:ba:a1:a0:
cc:1e:5d:20:64:88:c3:77:4d:91:d3:b7:33:de:32:
4f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:21:6F:EF:FA:0F:D1:27:08:55:79:52:AD:E9:80:04:BD:3B:E5:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F05638ECF0211EF83112E88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.242.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:00:6c:e9:58:a0:5a:34:1e:b0:6e:2e:76:44:e8:42:5c:b9:
5a:de:14:17:3c:06:b8:0c:95:7f:84:ec:e8:c2:3a:17:fd:68:
8c:8e:6d:7a:b1:8c:8f:d8:66:d9:9e:4d:84:07:16:f8:53:fd:
93:52:ff:fc:ce:25:d8:62:cd:7e:f4:70:65:b6:4a:f2:b2:d8:
d6:7b:a4:ad:ed:8f:61:e3:9d:ad:16:a9:15:0b:55:2e:0e:fe:
fb:db:b2:1c:14:a3:16:6c:96:ae:62:0f:cf:59:56:68:d7:ca:
d9:f3:10:df:f5:f0:53:7d:ff:ea:3e:17:34:60:af:08:ed:89:
2a:00:b9:b9:d7:2d:ab:09:3c:3f:3b:f1:f4:c7:97:3b:3f:ac:
dc:80:8f:a1:36:cb:f5:35:3c:74:fe:e0:eb:79:9d:d9:ed:16:
7a:14:3d:f5:e5:88:2f:b5:a4:42:bc:0d:7a:8a:87:59:d5:fa:
63:0c:91:00:d2:fa:c6:0d:d8:fb:47:88:ba:12:f2:02:ad:9a:
3e:02:29:ab:e5:c4:dd:a9:04:b3:db:42:e0:3d:e7:3c:0e:5e:
a6:07:a6:78:aa:99:98:95:9b:fa:a7:65:05:87:0e:5d:cd:b2:
73:d5:3a:56:93:77:60:ec:b7:f2:bb:c0:4c:42:c0:b7:da:14:
74:73:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:42 2025 by rpki-client