Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/874689BCCDD211EFB7FDAE6D762E951A.roa
File: 874689BCCDD211EFB7FDAE6D762E951A.roa (raw, json)
Hash identifier: VaNZvczZA0WSW+nKocV5cVeJi4wjHxbR5s7lnsBD2RQ=
Subject key identifier: 59:8D:43:72:50:34:DA:3A:02:F8:12:5F:FF:81:BE:D5:09:2D:29:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010214
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/874689BCCDD211EFB7FDAE6D762E951A.roa
Signing time: Wed 08 Jan 2025 15:09:17 +0000
ROA not before: Wed 08 Jan 2025 15:09:13 +0000
ROA not after: Sat 03 Jan 2026 15:09:13 +0000
asID: 984
IP address blocks: 45.205.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66068 (0x10214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 15:09:13 2025 GMT
Not After : Jan 3 15:09:13 2026 GMT
Subject: CN=677e951d-10e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:30:57:fe:48:ee:a9:70:e7:4e:26:c0:48:
81:c7:c4:c9:a4:a2:0d:21:b5:87:a8:e4:3e:35:1d:
04:d7:89:c4:a1:40:e4:9f:10:4d:ed:b1:89:11:19:
10:01:c3:a8:13:3b:aa:f1:57:2c:e3:1b:0e:6d:f9:
20:cc:93:38:66:84:e7:a6:80:60:75:19:9d:b6:b9:
a5:0d:21:d7:bf:2a:19:51:5b:08:0e:f8:57:f6:12:
f4:ed:cd:21:9d:27:a5:ce:87:bc:56:4d:51:c2:c4:
3d:1b:fc:77:d6:45:6b:50:49:e7:8c:8f:3d:a6:3a:
b4:65:2e:7c:59:35:67:ce:09:70:c1:b0:88:b5:69:
b1:b2:3e:fe:9e:91:68:ca:3f:68:55:99:a7:e0:0a:
de:8f:c8:2a:49:f9:5f:88:1c:98:2c:ee:a2:26:5c:
2b:0e:1c:63:85:b1:07:0d:dd:73:68:76:38:cc:ef:
5e:30:c5:fd:1b:9e:fb:90:d2:0c:05:eb:39:cd:53:
77:72:c2:05:ff:6f:21:36:07:ef:37:57:29:91:7f:
8b:f5:8b:f9:42:2f:c0:84:92:91:9a:e4:0c:16:ec:
f8:c8:e1:70:a4:82:08:27:fe:7a:15:12:6f:96:d3:
62:5c:1c:2d:1f:82:c6:83:95:76:7f:14:11:c2:cf:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:43:72:50:34:DA:3A:02:F8:12:5F:FF:81:BE:D5:09:2D:29:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/874689BCCDD211EFB7FDAE6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.4.0/24
Signature Algorithm: sha256WithRSAEncryption
97:64:0b:6a:12:03:14:02:2c:c6:9a:b6:a3:a4:21:e5:01:26:
6b:0f:e4:a9:5f:2b:7d:44:68:34:d1:f9:45:c0:e7:2b:b8:dc:
ed:21:16:7e:6e:c5:b7:a8:a8:b1:e5:6f:2b:01:5d:72:1f:6e:
fa:40:34:3b:d6:02:65:21:cf:a5:05:f7:ef:44:47:77:ab:ac:
b3:0a:22:0e:b5:ea:0f:8a:cc:72:9f:c7:61:24:5e:c8:e3:36:
f2:8c:fe:29:85:82:ab:3f:32:7f:68:d1:1a:a2:62:1a:52:8b:
d1:10:48:3d:2c:11:5a:33:9b:6f:e3:91:b2:1a:b4:c6:2d:b4:
b8:56:95:69:86:5f:c4:b7:31:e6:6c:8b:dc:46:73:d2:92:33:
51:6e:bd:3c:46:da:4d:5d:2b:84:88:87:a6:e1:70:f5:a2:c7:
76:ac:9d:dd:d4:09:fe:fc:e7:04:e0:aa:2b:64:ff:e1:1c:7d:
1e:3c:19:05:cd:18:73:85:f4:70:e2:ab:b3:12:56:10:9f:fa:
03:e1:13:f0:ab:de:c9:1f:bd:17:67:6e:54:9f:3d:60:5f:df:
2a:36:e0:3d:c6:6f:5d:5d:46:82:53:22:a3:82:4a:9b:ab:5b:
b5:ed:14:cb:6e:89:3e:68:32:88:ff:bf:5f:34:d1:38:71:2b:
20:ba:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:13 2025 by rpki-client