Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4A3BBC2C39D11EFB3177082762E951A.roa
File: A4A3BBC2C39D11EFB3177082762E951A.roa (raw, json)
Hash identifier: 9H39fwpuh9+feZrBknLYiGZnFVfIGL8vUYbe8EBb9k0=
Subject key identifier: FD:A0:CB:59:29:CF:A1:4E:6E:6B:ED:D4:F2:D6:2C:F6:C6:5B:0F:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED73
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4A3BBC2C39D11EFB3177082762E951A.roa
Signing time: Thu 26 Dec 2024 15:25:31 +0000
ROA not before: Thu 26 Dec 2024 15:25:27 +0000
ROA not after: Fri 12 Dec 2025 15:25:27 +0000
asID: 984
IP address blocks: 45.199.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60787 (0xed73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:25:27 2024 GMT
Not After : Dec 12 15:25:27 2025 GMT
Subject: CN=676d756b-214c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:14:cd:a8:44:6e:aa:5b:58:30:22:01:a6:
67:cf:1f:69:f7:5e:19:52:cf:d0:d3:fd:37:59:49:
d7:57:27:d6:4e:e6:81:70:05:62:19:0c:98:02:f9:
a3:97:d6:a3:6d:a5:f5:a8:79:86:93:3f:93:54:22:
32:66:9e:90:56:7c:82:3c:10:a0:42:d8:64:fb:0d:
2f:4c:cc:5d:73:c9:e3:0c:ee:c9:ad:9f:36:df:12:
f2:7f:77:fc:e8:5c:09:4b:57:11:9c:68:08:5a:29:
3b:64:58:a2:c6:9c:49:c0:42:ad:22:91:49:c9:1c:
80:ea:21:eb:46:7d:fd:af:6e:10:96:44:e3:0f:fa:
74:c2:8f:82:b7:11:71:38:1b:aa:01:5a:15:fe:6f:
38:7c:fa:09:c4:0b:67:a3:b9:20:7b:3c:2f:e8:72:
d4:38:a0:00:63:f9:d1:fb:13:49:3d:25:5d:8d:19:
a5:df:57:88:20:8a:83:8a:5f:ba:17:f8:0b:e2:21:
e0:ea:f1:0f:61:08:59:63:ed:db:75:2c:8f:1a:05:
6f:03:3e:a8:4c:95:12:2e:75:07:b6:18:97:9b:1b:
b0:72:1c:9d:27:36:85:5d:7c:55:c4:20:9d:fa:38:
5a:f2:25:9d:90:f8:91:28:87:4e:6a:31:b9:67:93:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:CB:59:29:CF:A1:4E:6E:6B:ED:D4:F2:D6:2C:F6:C6:5B:0F:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4A3BBC2C39D11EFB3177082762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.141.0/24
Signature Algorithm: sha256WithRSAEncryption
77:40:e2:29:41:97:50:99:1a:33:96:bf:f8:17:30:75:a2:c3:
43:e6:ef:5e:4c:40:f8:30:89:c0:04:71:f5:3a:d7:a2:78:3d:
2b:bd:23:f6:13:4c:d9:e9:eb:06:f4:85:8d:14:87:f7:3c:c8:
98:25:1f:27:a1:0f:11:4c:03:60:04:f3:38:d7:03:60:7d:d3:
48:2f:a6:d9:de:78:91:8a:e8:ea:26:57:a6:fa:c0:43:a0:75:
2a:ee:80:f7:c4:02:67:f9:f0:41:73:e1:da:75:2c:e9:ff:c9:
7c:9a:4d:67:26:9e:5c:b9:99:b3:26:3d:2a:d0:3e:e1:bf:dc:
de:8b:48:10:c7:87:72:eb:28:bf:07:6a:92:4d:ed:48:92:6a:
02:27:f2:b7:0b:8c:9a:33:18:36:70:0a:07:a8:ea:aa:f8:59:
68:67:58:14:c2:e6:f6:4a:9c:ef:db:ab:f0:db:f8:90:19:ba:
b5:19:56:0d:52:1e:32:ce:ac:13:fa:30:ee:8e:60:7c:85:4f:
e1:9b:92:f3:58:2f:36:11:5c:ac:45:02:97:a4:7a:58:c2:73:
16:39:20:e7:ca:b0:37:0e:63:98:13:b1:53:02:18:2d:1d:24:
c6:f3:9c:8b:c0:28:78:a3:53:f5:7e:90:40:3f:c1:f6:eb:99:
16:55:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:35 2025 by rpki-client