Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92F6A34CCDA411EFAC437A4D762E951A.roa
File: 92F6A34CCDA411EFAC437A4D762E951A.roa (raw, json)
Hash identifier: 135VUR2+jPG0NUl7eXWGt3BwX5Vu/UMQM9/HJ7flOXQ=
Subject key identifier: 93:65:0A:FE:17:16:59:29:A3:71:F1:3D:DF:2B:88:06:FF:17:16:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010113
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92F6A34CCDA411EFAC437A4D762E951A.roa
Signing time: Wed 08 Jan 2025 09:40:20 +0000
ROA not before: Wed 08 Jan 2025 09:40:16 +0000
ROA not after: Tue 23 Dec 2025 09:40:16 +0000
asID: 984
IP address blocks: 45.202.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65811 (0x10113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:40:16 2025 GMT
Not After : Dec 23 09:40:16 2025 GMT
Subject: CN=677e4803-8bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:f5:57:72:3b:2e:1d:36:91:9c:1b:b9:23:
72:3b:84:99:01:70:bf:d9:fd:cf:2e:24:f3:a4:e5:
02:d1:a2:d8:f2:c6:2b:93:67:1f:e1:7f:44:81:ef:
97:fc:44:15:42:7e:4a:ce:75:18:13:2d:55:4e:6c:
6e:4a:af:55:1a:f6:3e:90:53:86:f2:3b:67:a7:16:
81:c4:62:6e:51:df:17:27:93:03:d2:da:36:77:90:
ca:49:e9:7d:aa:fd:ec:33:22:73:a2:f1:52:34:a3:
e1:e2:86:de:d3:f8:0e:c6:71:df:55:2c:a8:5b:04:
cc:aa:d5:8d:e3:b3:21:bb:26:aa:42:c8:9f:26:c7:
a9:64:0e:f9:60:86:cd:31:b5:70:61:08:e8:2f:1b:
e4:6e:e4:7d:1e:e4:53:51:30:03:0e:14:77:ff:8c:
d7:e0:09:e0:ba:43:99:5c:c3:91:41:de:69:59:1b:
cd:b7:67:d3:ca:b5:d0:be:1b:54:b0:1d:ab:ea:be:
12:e5:a3:f5:c5:c8:58:7a:a8:59:e3:33:ba:bd:a2:
b1:a7:4b:d8:e5:19:1a:e8:1d:5e:12:c2:18:59:a8:
c1:b6:75:3a:cc:83:03:4e:67:4c:3a:30:a4:ef:1a:
40:65:8e:1f:dd:49:22:e1:d2:f1:42:78:00:60:1e:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:0A:FE:17:16:59:29:A3:71:F1:3D:DF:2B:88:06:FF:17:16:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92F6A34CCDA411EFAC437A4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.205.0/24
Signature Algorithm: sha256WithRSAEncryption
58:03:7a:e8:31:27:48:e2:f0:f7:e2:31:cf:79:77:ac:4c:69:
4a:79:2f:4e:04:09:92:36:4d:84:89:64:28:84:56:68:07:c6:
20:75:df:0b:49:fd:ae:2e:46:2d:ed:23:90:88:da:47:12:45:
1e:de:b8:67:22:17:d6:e7:e5:90:f8:0a:fa:05:9c:d7:7b:03:
32:04:04:fe:53:b6:0f:b0:bb:72:d5:f3:55:82:5e:8f:06:c5:
22:df:52:ec:47:f8:86:ea:84:8d:d1:15:99:2c:34:ed:01:aa:
0d:a1:19:13:19:33:64:6c:eb:37:be:14:0f:a7:99:aa:c9:07:
84:41:f6:cb:34:8f:1f:a2:ff:d9:61:90:72:71:bc:ef:0e:a0:
40:9b:b6:15:90:ee:46:4a:94:5d:39:63:b3:9c:94:39:ac:8b:
b2:2d:81:cc:f1:e8:5c:12:77:16:1c:c5:e1:b7:59:6f:35:97:
f6:c6:ed:ff:f1:ba:bf:df:03:fa:6a:bd:d8:da:d3:12:a8:49:
84:4a:47:ee:d3:9c:3f:c0:7e:57:7d:76:e5:53:ec:e2:09:c7:
d5:79:6c:24:51:4f:dc:28:98:db:73:3a:ac:b8:54:b6:97:47:
1d:e8:f2:0c:29:22:d4:34:34:9a:de:30:f1:08:ed:0c:35:62:
5d:77:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:48 2025 by rpki-client