Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9274C26CBDB611EFA2CD6EB1762E951A.roa
File: 9274C26CBDB611EFA2CD6EB1762E951A.roa (raw, json)
Hash identifier: PwUdgzIStwvIqs69eCIi9/kTc/QXE29BdTFka9ZYtHk=
Subject key identifier: A8:74:FB:F9:F6:6C:CD:8A:00:12:1A:B3:E4:B8:D5:EA:1A:04:80:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9274C26CBDB611EFA2CD6EB1762E951A.roa
Signing time: Thu 19 Dec 2024 03:08:51 +0000
ROA not before: Thu 19 Dec 2024 03:08:47 +0000
ROA not after: Wed 10 Dec 2025 03:08:47 +0000
asID: 984
IP address blocks: 45.204.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58615 (0xe4f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:08:47 2024 GMT
Not After : Dec 10 03:08:47 2025 GMT
Subject: CN=67638e43-d4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:f6:2d:f3:f9:d2:5b:8f:1a:fa:0f:3c:68:
c2:20:26:4e:00:96:9b:67:87:85:61:86:a2:7b:44:
97:3d:df:69:ef:b8:af:ac:38:00:45:ea:a6:68:4f:
bd:cc:c9:78:28:7f:c8:d3:a2:17:4b:67:5b:7e:bb:
67:91:0c:2d:82:92:1e:92:91:35:0a:c7:d9:24:e9:
0d:99:71:54:28:d0:48:ec:6e:8c:d3:64:71:7f:80:
c6:c7:a9:85:47:8f:d8:09:0f:a2:bf:ff:8f:95:9c:
25:1f:79:31:7e:1f:03:8e:1e:0c:80:2b:1f:c1:c4:
3c:db:d0:f9:1d:c0:34:bb:e5:54:6b:40:d5:9d:a0:
cb:49:1e:ad:33:88:c3:54:9f:42:4d:fe:c9:fc:31:
69:f3:de:55:ce:8c:13:be:f8:12:a1:06:a5:90:e0:
68:3a:ab:5b:c4:79:f4:73:1d:8d:80:e7:55:e4:a8:
d8:68:83:82:32:7c:c9:d4:6a:3b:3f:4f:6d:5c:e1:
36:0b:e6:a2:a3:61:a0:65:0b:4a:6d:fa:f0:0c:0a:
89:d2:e8:36:e5:01:8b:02:07:b0:75:b5:c6:03:8c:
bd:35:6b:a0:1d:0c:59:ce:11:19:92:25:59:ba:bd:
cd:2b:d9:ef:30:1f:32:5f:a4:e0:7c:a0:b3:f0:51:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:74:FB:F9:F6:6C:CD:8A:00:12:1A:B3:E4:B8:D5:EA:1A:04:80:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9274C26CBDB611EFA2CD6EB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.168.0/24
Signature Algorithm: sha256WithRSAEncryption
20:82:95:6b:05:ca:3c:95:a1:03:05:1e:8e:d3:d2:c2:ad:20:
c2:ed:e8:a9:df:27:3e:12:30:3c:37:d2:1e:3b:06:f8:b4:8e:
68:7a:75:9a:20:10:e5:62:e9:24:2b:e0:c9:8e:69:e1:27:c0:
a5:84:75:25:42:b6:70:47:25:41:99:e5:4c:42:34:a6:4d:93:
06:d2:4b:92:25:94:c1:dd:73:3a:6a:15:80:66:2a:c9:a9:8c:
3a:eb:2f:74:af:3b:bf:44:37:f1:7b:95:64:0c:12:96:2d:c3:
0d:7b:40:9f:f5:15:8a:23:8c:fa:c3:0c:ab:7f:75:4f:ea:7b:
b0:11:a2:9f:2b:c1:e2:22:2e:df:e1:0a:21:f0:e1:7b:67:66:
ee:f3:4e:46:d0:8e:f7:91:db:4f:4a:a1:09:73:34:63:34:27:
5b:4c:0c:e0:44:08:36:07:ea:de:36:d3:fc:ca:dc:b0:7c:86:
d0:97:83:f8:d5:6f:d4:83:80:1e:67:6c:3f:03:1b:81:bd:fa:
b6:28:72:4c:07:07:5e:4c:0e:63:cb:d1:e2:8a:4e:42:9a:43:
16:64:a2:49:c1:0f:29:d1:13:99:e0:2d:de:20:9b:84:e0:54:
5b:93:fc:c8:35:ed:2f:c0:24:2e:aa:d3:6c:3f:18:de:06:d9:
c7:eb:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:10 2025 by rpki-client