Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/948DC844BDEF11EFB55F0295762E951A.roa
File: 948DC844BDEF11EFB55F0295762E951A.roa (raw, json)
Hash identifier: kD5cYoeX68wKqA9emxhLnqP4Qqne1CJgrDlu+dxmSi8=
Subject key identifier: 9F:A7:B8:9E:60:05:A8:D0:40:0E:D5:16:2B:2F:C7:8A:EB:FE:0F:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/948DC844BDEF11EFB55F0295762E951A.roa
Signing time: Thu 19 Dec 2024 09:56:56 +0000
ROA not before: Thu 19 Dec 2024 09:56:52 +0000
ROA not after: Wed 10 Dec 2025 09:56:52 +0000
asID: 984
IP address blocks: 45.206.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58861 (0xe5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 09:56:52 2024 GMT
Not After : Dec 10 09:56:52 2025 GMT
Subject: CN=6763ede8-c5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:fa:87:b2:70:54:18:e5:b6:72:fc:9a:c0:
f7:81:8e:3b:35:70:dd:5a:8d:04:78:95:54:25:e8:
96:e5:ed:0a:a1:cc:e7:36:81:c8:ae:0e:2e:94:8b:
9e:de:2d:31:18:1c:a9:18:1e:e7:76:3c:11:ab:4d:
60:ef:e3:4b:ad:95:f3:f3:00:39:69:69:31:41:de:
b1:4a:82:44:0c:77:fa:d7:d4:30:c3:e1:ec:b7:dc:
a2:ef:eb:b4:f6:5f:9c:1b:0f:40:b5:c4:59:fa:3e:
74:7f:8e:e4:8d:55:7b:c7:22:4b:3f:e2:54:b0:10:
44:93:fd:78:e4:c3:a9:83:70:a9:07:f6:bf:13:24:
9c:bb:cf:2e:43:9c:54:1e:95:9f:59:93:32:40:5e:
d7:ea:42:04:9b:7b:81:e6:ec:89:36:0d:b5:c8:74:
c4:19:57:ef:18:52:cb:8b:45:0e:28:c4:56:42:a7:
f2:c6:c0:a4:a8:11:0b:47:2d:7e:d3:f8:e9:09:d5:
3b:cf:1f:46:59:b0:86:71:5b:5e:11:69:2f:1b:8e:
c8:76:2e:0f:af:10:6a:80:c5:76:0f:12:85:7b:4e:
ee:f6:67:37:c9:06:10:8a:e1:7e:e6:6d:76:61:20:
3e:3e:8e:c6:03:6a:89:58:69:e5:20:dd:1c:57:4e:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A7:B8:9E:60:05:A8:D0:40:0E:D5:16:2B:2F:C7:8A:EB:FE:0F:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/948DC844BDEF11EFB55F0295762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.119.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f3:69:be:6d:d3:07:87:7f:49:3c:e6:20:19:93:06:ea:c3:
2d:8f:4a:d2:b5:74:23:3f:ee:cd:03:2b:e5:cc:c3:d9:ae:e7:
6b:84:b1:59:2b:ad:00:bd:f4:3b:4d:00:53:2f:33:3b:fb:d5:
8b:d9:8d:87:70:95:e1:13:19:8a:40:9e:ed:45:fa:28:9b:c9:
4f:80:f9:c0:b0:2f:79:31:9e:b9:e0:17:a2:41:0b:ee:dc:bd:
a7:1d:9e:41:29:4f:61:a9:62:4e:66:ae:2a:a9:23:82:76:72:
53:c6:48:48:04:0a:b8:dd:4d:76:ee:e1:d3:63:4e:2c:8f:ed:
b0:1b:29:1f:35:c6:68:1a:87:b1:14:f6:6b:8d:55:8f:31:7a:
28:38:3d:bb:21:af:4c:f4:17:d6:23:35:bb:d3:a1:12:0d:11:
93:42:cd:45:73:90:42:f3:e5:c6:63:78:c5:00:05:66:6c:2a:
cd:33:83:aa:4e:cd:89:fc:90:66:6d:28:65:4a:5c:bb:01:0d:
e0:02:55:81:88:dc:5b:4b:d3:ca:3b:d4:3c:a0:7d:54:5c:6a:
42:5e:ce:84:9f:3c:c9:bf:fb:7d:08:02:40:5a:37:00:0d:65:
30:c9:9f:e1:9f:6f:9f:7c:92:8b:6c:40:eb:81:c6:37:24:62:
54:a4:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:31 2025 by rpki-client