Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6404ACAABE8B11EFB1C53C6D762E951A.roa
File: 6404ACAABE8B11EFB1C53C6D762E951A.roa (raw, json)
Hash identifier: CDUOi9lET4wPhwMPWsOaR/0upsp2rqGq/I2w45J91dY=
Subject key identifier: 55:DA:18:F9:44:45:6D:75:90:2B:81:2F:63:90:46:91:D7:34:AE:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E6C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6404ACAABE8B11EFB1C53C6D762E951A.roa
Signing time: Fri 20 Dec 2024 04:32:16 +0000
ROA not before: Fri 20 Dec 2024 04:32:12 +0000
ROA not after: Wed 10 Dec 2025 04:32:12 +0000
asID: 984
IP address blocks: 45.206.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59080 (0xe6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 04:32:12 2024 GMT
Not After : Dec 10 04:32:12 2025 GMT
Subject: CN=6764f350-aa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f4:0a:3c:07:a9:56:60:6c:8f:44:d9:5a:90:
be:75:72:ac:c0:dc:35:c6:9c:e8:b5:c4:a1:16:92:
2b:43:da:d0:dd:e2:fe:b8:b7:6c:1a:77:b4:bd:bd:
c9:74:5c:01:5b:ba:1c:87:e5:dd:fa:9e:96:33:bd:
f1:c8:a3:fe:12:85:ef:52:01:4e:41:a7:a2:70:2d:
42:9c:91:63:94:cd:94:bc:61:6f:5c:9f:bf:17:b9:
40:dd:03:9a:ff:f8:3f:4b:93:23:f1:02:30:b8:3d:
a7:4e:b5:bd:a6:96:76:8f:07:92:bd:f1:4d:fb:3a:
2e:dc:52:43:2d:87:bb:ba:bd:67:38:77:8f:8c:51:
c2:de:b1:a2:98:38:43:33:8a:c1:be:c6:19:83:93:
39:23:27:47:c8:9d:b8:cd:4a:cf:8f:a2:1b:0e:a1:
4f:68:76:90:10:c3:7e:c0:79:24:e8:93:91:28:00:
9b:20:0d:b1:7a:3e:66:87:e2:e8:8d:cb:bc:fb:91:
df:22:90:d1:e0:a0:98:bd:30:3f:64:12:0e:16:81:
95:4d:d0:1e:8e:dc:94:a6:bd:f0:a6:c6:ea:09:3b:
dd:cd:23:c6:1a:4c:0e:5b:34:9d:1a:5b:26:cd:0c:
b1:23:ab:d8:b3:d0:e1:0e:aa:5c:f0:e7:25:32:fd:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DA:18:F9:44:45:6D:75:90:2B:81:2F:63:90:46:91:D7:34:AE:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6404ACAABE8B11EFB1C53C6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:77:4c:26:09:06:ae:70:a6:14:36:39:f4:6a:d1:6d:6b:a2:
7c:95:f5:85:11:44:d6:32:97:13:07:e1:79:e0:cc:77:bb:49:
7a:0b:80:da:9f:ed:3b:29:95:d1:4d:6b:47:0a:e7:0a:a8:c4:
08:58:fb:0c:5f:56:8f:7f:3d:18:24:99:04:95:87:83:9b:04:
78:21:a0:e1:f5:95:54:fa:e4:35:e4:fa:02:24:66:d5:f2:c9:
0c:15:88:1b:fd:c3:51:5a:f7:55:0e:c7:14:51:26:91:82:0e:
b3:ca:81:c9:bc:36:7b:6a:93:df:dc:94:49:52:5d:66:d7:09:
c0:7f:fe:20:82:5c:83:f9:a7:c9:6d:d4:b6:7f:bc:0d:42:2a:
fb:92:c7:3b:75:cf:b0:06:c1:6e:bf:b4:0f:5c:2f:10:81:62:
72:cb:8c:a9:3e:cf:d3:b1:db:d1:79:ad:38:48:21:d8:38:e4:
ba:17:fe:04:e1:44:50:6e:84:6d:29:78:e0:28:4c:16:29:9b:
5f:2a:52:6e:d4:c1:64:bc:61:73:1b:fd:14:cb:5b:3f:57:2a:
13:7a:dd:64:bf:58:91:c1:b2:e3:99:a1:6e:94:56:61:3e:e3:
47:f3:6d:90:2d:94:cf:4a:b4:39:53:64:c8:ad:4c:22:e7:bc:
ad:ca:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:59 2025 by rpki-client