Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D2E7C80CADC11EFAFEBF48C762E951A.roa
File: 7D2E7C80CADC11EFAFEBF48C762E951A.roa (raw, json)
Hash identifier: LghlTsrCZ4bWjYGa6aXHN9HuxxzV7wzd/jm1tNeRBC4=
Subject key identifier: F7:11:A4:20:55:E9:98:9B:52:DC:36:3A:A5:0E:60:28:30:60:F5:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D2E7C80CADC11EFAFEBF48C762E951A.roa
Signing time: Sat 04 Jan 2025 20:43:01 +0000
ROA not before: Sun 05 Jan 2025 20:42:58 +0000
ROA not after: Sun 09 Feb 2025 20:42:58 +0000
asID: 9304
IP address blocks: 45.204.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63394 (0xf7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 20:42:58 2025 GMT
Not After : Feb 9 20:42:58 2025 GMT
Subject: CN=67799d55-686d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:cb:0a:89:41:8f:9c:57:18:61:6b:2a:2a:
21:4f:54:4c:d1:7c:b8:89:26:8a:b8:7a:ff:f5:f6:
f2:20:72:d5:28:ef:22:a1:b3:4a:5c:74:60:88:37:
bb:ac:f3:ec:26:3e:5f:09:2f:5c:41:10:3d:63:6a:
d9:25:f3:36:96:53:c4:7c:cc:46:7a:9a:26:4f:c7:
f6:ab:97:ca:d7:2d:fb:d3:cb:d8:37:cd:50:e9:49:
e7:2f:92:c9:a0:c1:fa:5a:b8:39:1e:23:f2:c1:98:
09:ce:ea:f5:10:54:5c:24:60:3e:f6:34:cf:17:0b:
d0:12:f1:a3:06:c0:bd:7b:7b:41:c9:93:88:8d:d0:
07:b4:43:70:23:23:97:ae:6f:35:bb:a4:b4:d6:0a:
c1:a9:4d:c3:50:5c:af:27:9a:72:c9:89:f1:3b:c3:
fe:85:38:74:31:45:29:33:d8:ba:53:73:43:19:6f:
25:36:df:7e:70:a6:50:3d:da:1c:15:f2:17:9d:98:
a2:c9:16:c1:10:43:62:cc:3c:bd:85:40:cf:74:e7:
cb:3b:da:ec:fb:33:9a:24:db:c8:5f:b0:45:a5:ca:
d4:ab:ae:ce:94:16:c5:26:b0:ec:2c:a1:4d:5e:2e:
44:37:a0:bb:28:eb:a9:27:dc:9a:f8:cf:0f:ef:d6:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:11:A4:20:55:E9:98:9B:52:DC:36:3A:A5:0E:60:28:30:60:F5:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D2E7C80CADC11EFAFEBF48C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.142.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0b:2b:da:b6:d9:8f:56:e5:78:5e:4d:50:14:cb:07:be:08:
f6:47:29:12:2e:28:13:ce:37:d7:cc:4e:da:f6:d6:50:3d:df:
63:8e:08:c6:cf:0a:b1:e2:0d:63:8c:4d:1f:a0:4c:32:c1:72:
c4:19:85:38:da:eb:0d:f8:ff:de:a4:c5:2d:aa:91:ab:7a:3b:
2f:9b:1c:3b:5c:9a:db:25:dd:27:53:04:95:65:c0:cd:7a:c7:
56:e4:2b:1e:2a:0d:f4:ff:ea:fd:c5:51:bb:3d:a4:1d:09:14:
7a:a3:0e:85:02:69:15:62:ed:69:16:20:76:10:8b:a2:fa:d6:
09:4f:8f:4d:aa:1f:eb:9f:aa:e5:e2:48:44:ee:13:73:a9:88:
3f:75:8a:5f:3c:64:de:fd:49:cc:32:ef:7c:d8:90:97:56:b6:
06:43:fe:69:ec:00:0d:bf:60:78:12:a2:33:60:66:ea:88:f9:
97:ac:7a:ff:b5:70:bf:81:56:86:83:80:30:0f:95:50:db:76:
30:8e:a1:90:75:ff:70:fa:dd:99:40:6a:d0:56:97:e5:9f:5b:
7c:d0:4d:f2:6b:ce:86:13:21:73:0a:2e:a0:1a:0e:ef:5d:a0:
fb:b2:70:cc:2b:3a:fe:15:f4:34:2a:77:44:fb:37:6a:70:69:
99:68:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:12 2025 by rpki-client