Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A024FBC8BEDA11EF81BB5A59762E951A.roa
File: A024FBC8BEDA11EF81BB5A59762E951A.roa (raw, json)
Hash identifier: sQ9qZFe39dx8X9bDWaNo8d6OOymDLRdvYwOJjKu8Pr0=
Subject key identifier: 1B:1B:A2:1C:60:94:83:F1:DE:53:A5:DB:15:1F:9B:5F:FC:55:B8:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E76F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A024FBC8BEDA11EF81BB5A59762E951A.roa
Signing time: Fri 20 Dec 2024 13:59:27 +0000
ROA not before: Fri 20 Dec 2024 13:59:23 +0000
ROA not after: Thu 06 Feb 2025 13:59:23 +0000
asID: 42831
IP address blocks: 45.198.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 13:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59247 (0xe76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 13:59:23 2024 GMT
Not After : Feb 6 13:59:23 2025 GMT
Subject: CN=6765783f-d7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:3a:20:30:17:78:bf:6b:c8:02:c9:07:00:
34:a1:4b:f1:7b:a1:a5:eb:98:07:67:76:6e:eb:a1:
18:3c:a7:be:fd:87:5e:fe:e6:0a:46:ba:3c:4c:11:
4a:fa:2f:7d:4d:2e:51:b8:5e:19:25:8b:81:17:93:
9f:f8:e2:1e:46:82:0f:dd:47:1c:e9:61:81:27:60:
06:ea:c1:01:60:50:5d:03:0d:ce:ea:18:7e:2a:dc:
04:55:d9:eb:e2:60:2e:58:ec:e3:7b:21:55:bd:12:
2b:0f:a3:93:89:41:3a:44:9a:c8:6a:a5:3e:eb:bd:
32:d3:f0:96:40:67:2c:8a:89:d0:a1:b3:a6:c6:03:
df:bb:78:0e:b3:7b:ca:23:da:14:a1:6e:68:80:95:
c6:e5:cc:07:7b:f5:af:a2:c3:9e:5f:d4:3f:0f:0b:
45:84:f6:c8:a0:8e:37:da:6c:80:ae:08:c2:ca:8c:
31:f1:ad:eb:41:47:1e:90:4a:6b:6e:46:9a:f7:f4:
13:8f:0c:9c:ad:04:4d:11:48:de:c7:2b:a8:b3:bf:
11:c3:7c:c5:6a:74:35:a0:94:e1:c7:aa:dd:62:17:
b9:99:26:fc:7a:dc:ef:86:74:b5:94:74:0c:87:99:
80:05:5a:76:f3:b1:8c:a0:94:f8:24:16:64:74:1f:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:A2:1C:60:94:83:F1:DE:53:A5:DB:15:1F:9B:5F:FC:55:B8:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A024FBC8BEDA11EF81BB5A59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:f9:38:53:06:96:33:6b:a8:94:f0:6b:67:83:82:8c:26:aa:
e5:44:4b:31:a5:4b:82:8a:26:c9:6b:d6:ae:c7:4e:eb:5c:79:
d0:bd:5a:5d:2b:f0:66:7d:de:41:9e:9d:fe:24:10:5b:dc:63:
9d:85:2a:36:08:b4:5d:e5:0e:69:96:15:c7:fc:3c:d8:22:27:
ea:75:f0:cd:86:c0:6f:50:62:4f:05:59:8c:c0:bf:1f:7c:6e:
94:ee:77:2a:2f:37:e8:33:6a:be:57:14:c2:cd:c4:cc:fb:35:
91:64:92:7f:73:98:54:cf:9f:ce:82:02:36:8e:80:32:b0:de:
87:6a:75:35:a3:40:4a:7d:fd:ab:bf:a9:9b:1b:fc:a6:de:04:
21:81:1e:09:38:b1:50:06:33:32:9f:b4:48:54:6e:a0:05:33:
aa:26:87:9c:df:06:65:70:ca:ec:51:6d:dc:4c:35:68:bd:31:
f0:e6:a9:54:1d:8e:ea:84:df:d8:a5:d7:cf:10:ce:07:30:cc:
3d:f4:4a:62:8e:8f:3e:60:90:94:bc:18:4e:dd:c9:60:63:fd:
ef:21:dc:7a:c2:e2:ab:d1:59:7f:1f:bf:0d:68:52:81:a0:91:
2e:64:df:07:14:e1:e2:07:47:41:77:28:09:ee:0e:cf:f7:83:
81:0b:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:25 2025 by rpki-client