Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12ADE02CDD011EF864CDF62762E951A.roa
File: A12ADE02CDD011EF864CDF62762E951A.roa (raw, json)
Hash identifier: UfiikbBSbxkA6yIkOQJEhu/PhEKH3y9Aid/3KGDaZK0=
Subject key identifier: 59:AD:C0:7C:72:EC:93:78:1C:31:E8:70:A1:2F:97:A7:42:DF:2E:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010206
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12ADE02CDD011EF864CDF62762E951A.roa
Signing time: Wed 08 Jan 2025 14:55:41 +0000
ROA not before: Wed 08 Jan 2025 14:55:38 +0000
ROA not after: Sat 03 Jan 2026 14:55:38 +0000
asID: 984
IP address blocks: 45.197.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66054 (0x10206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:55:38 2025 GMT
Not After : Jan 3 14:55:38 2026 GMT
Subject: CN=677e91ed-8560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:d3:ed:be:5c:6e:17:02:60:a8:6e:9c:65:
30:dc:11:a8:d6:c9:1c:5e:8c:92:fc:9c:28:06:8d:
41:c2:7d:b5:82:7e:b3:a8:5e:9b:26:c6:8c:c8:9c:
0e:e3:85:6f:67:ec:48:80:09:c4:e5:db:49:1b:57:
fd:ef:da:e6:09:ac:09:a8:1d:7f:ae:ca:11:55:7b:
40:c3:90:93:9b:e5:a0:4f:f2:0c:4f:09:75:e1:e5:
a6:ce:3b:69:91:20:13:2e:8d:96:a8:15:ba:a1:5d:
67:b3:82:bc:ba:4c:c8:70:a3:a8:06:b4:4e:76:6e:
4c:ff:57:04:2d:94:5b:4b:60:c1:b1:c3:88:7a:c8:
c1:3a:2f:fb:85:59:f8:5c:e4:15:c9:ad:76:77:39:
83:95:5b:7e:a6:2b:a0:72:9d:6f:56:d9:43:36:f5:
aa:b9:8a:ce:6e:5b:41:cd:0c:37:bc:c3:8f:a3:51:
f6:b6:d0:47:b3:4b:4e:9e:12:c6:60:81:ef:49:80:
5f:55:01:be:26:ba:e2:3a:e1:ff:9a:13:71:68:76:
4c:b6:9b:9f:1d:89:41:b7:cc:51:61:de:8f:f7:70:
a9:cb:17:ae:f1:d0:f3:bb:04:83:ee:c3:af:0e:c3:
ca:2f:c9:0b:cb:48:ab:d4:e3:6a:80:b4:7d:ee:b1:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AD:C0:7C:72:EC:93:78:1C:31:E8:70:A1:2F:97:A7:42:DF:2E:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12ADE02CDD011EF864CDF62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.4.0/24
Signature Algorithm: sha256WithRSAEncryption
93:81:c3:b3:20:0a:7f:29:44:e4:3e:62:70:4b:f0:16:3a:2b:
6b:36:02:ed:9f:85:80:67:a8:04:06:f3:85:cd:00:6b:e9:83:
e5:42:69:41:af:15:ee:2d:17:82:7f:6c:47:10:37:10:f8:83:
25:5e:97:a4:55:84:1a:16:11:6d:e9:04:13:d0:fe:19:e3:e1:
85:37:33:15:dc:ab:f8:58:b1:76:96:0e:85:db:77:cc:55:7a:
e8:31:83:de:83:2c:5e:1c:ad:49:b7:d6:c4:f3:21:10:8a:5d:
fb:51:3f:07:8c:d2:d9:fb:4f:ce:ba:1c:59:42:fe:97:48:ae:
c9:69:31:c8:36:4b:3c:42:28:59:bf:43:2c:60:51:8f:83:ac:
7d:c3:bd:4e:24:cb:02:ba:22:3c:e2:31:a7:65:bd:b6:40:d4:
8d:63:0d:e6:b7:fe:08:2f:28:ba:ba:4a:65:31:ef:f8:0f:67:
0f:8f:34:1d:30:0b:0a:18:02:d0:39:e8:70:f5:d4:99:ce:0e:
36:7c:65:c0:17:7d:c7:aa:13:4d:12:be:27:34:0d:9f:22:c0:
82:f4:cb:ee:be:bf:98:d4:5f:aa:61:f4:4b:4d:b9:d5:98:de:
a9:cf:66:74:dd:9e:f5:c8:fb:0b:1e:86:f4:e8:59:e0:5b:0b:
03:54:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:59 2025 by rpki-client