Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65F21CD0C32411EFBD468F70762E951A.roa
File: 65F21CD0C32411EFBD468F70762E951A.roa (raw, json)
Hash identifier: IITtE6ypEDTxltQsj3mhAozVai+EJVn8OzhVerQDiro=
Subject key identifier: 06:48:DC:73:29:9E:85:44:9F:CE:ED:33:38:1E:8A:60:20:33:8E:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65F21CD0C32411EFBD468F70762E951A.roa
Signing time: Thu 26 Dec 2024 00:57:37 +0000
ROA not before: Thu 26 Dec 2024 00:00:33 +0000
ROA not after: Sat 01 Mar 2025 00:00:33 +0000
asID: 984
IP address blocks: 45.198.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60005 (0xea65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:33 2024 GMT
Not After : Mar 1 00:00:33 2025 GMT
Subject: CN=676caa01-1b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:48:ed:21:c1:c7:b2:f9:b5:09:10:d1:c4:7e:
c6:16:de:ed:38:82:0b:3e:e8:56:55:44:fa:59:a2:
76:fc:37:e7:b4:83:0d:67:cf:f8:88:68:8e:e9:c3:
47:02:cf:70:ea:f5:bb:8c:31:e8:1d:1a:ff:72:01:
a4:cb:6c:05:5c:ee:4e:3c:38:25:05:16:c9:c0:cb:
6d:88:c8:af:85:d5:17:59:3a:53:5d:13:e5:28:72:
96:d6:66:00:fb:ad:3a:23:3b:99:50:8c:76:5e:08:
fa:32:64:46:eb:15:ed:03:59:7e:f9:9e:3e:5d:14:
b3:24:f5:64:18:2b:32:40:2e:71:8e:df:79:59:72:
7a:11:b9:3c:c0:4a:28:2e:57:37:a1:e4:96:c2:8c:
d8:7c:20:88:1e:d7:ae:30:70:c5:18:d4:84:fb:d0:
e2:32:e2:6c:3e:5e:cd:80:f7:7c:b2:cc:2f:a7:ab:
2c:e1:f4:de:b0:1f:51:8f:9d:c3:be:5f:a4:82:88:
38:92:19:43:f4:77:64:d0:0d:ce:db:7e:d9:6a:ba:
6f:6d:94:d2:90:40:f5:55:ca:86:e8:88:57:d6:b2:
6e:d1:ca:48:c3:01:04:0e:d5:12:af:82:f8:60:84:
f5:99:90:7f:54:51:83:8b:68:3b:6e:32:3a:8d:e5:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:48:DC:73:29:9E:85:44:9F:CE:ED:33:38:1E:8A:60:20:33:8E:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65F21CD0C32411EFBD468F70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:4f:00:33:7a:56:52:99:93:f8:9b:69:26:e8:b4:07:64:18:
35:7c:e9:7f:f5:73:46:a9:4a:82:a1:10:5f:84:9b:b2:1b:ce:
a8:d0:a3:65:c7:1c:b5:db:ed:a5:3a:f0:7e:85:e0:33:af:e5:
e8:e2:ef:64:ec:1a:04:73:7f:d5:b3:29:62:63:4d:4d:87:70:
2c:3f:85:bc:06:c7:61:72:8e:8b:fc:34:76:c9:e7:08:24:7a:
eb:c3:ee:7e:1b:b9:ac:1e:75:ab:e3:c4:bc:ef:7c:e1:9a:cb:
c9:e6:1c:0e:3a:ec:75:7e:61:6c:c7:99:e7:3e:68:9b:a9:0c:
be:54:89:9e:9e:82:6d:6f:a8:58:a8:39:8f:00:df:d6:c7:dd:
0c:e7:13:30:dc:bb:ab:46:09:df:b7:7a:e8:28:b3:1c:28:3f:
c5:c1:45:f8:a6:58:46:6d:86:fc:d5:69:06:8f:85:38:82:0e:
db:bc:0e:5b:96:24:f9:b0:ce:a1:39:9a:15:5f:f3:e3:ed:79:
25:85:d9:5c:a6:fa:bd:57:ed:c6:1e:3d:6a:4c:ab:00:82:30:
dd:95:94:fc:ba:5d:f0:48:01:53:7d:d5:45:56:ea:37:b0:ea:
2d:69:df:8e:08:54:b7:1f:24:ab:f0:46:89:29:6f:60:d9:8a:
be:1f:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:46 2025 by rpki-client