Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8F94818BDB711EFA3C713B8762E951A.roa
File: A8F94818BDB711EFA3C713B8762E951A.roa (raw, json)
Hash identifier: S48Y+a0w9+wnpU6OfmUlGNuGe3l1PfN58fekP4uspH4=
Subject key identifier: BD:F1:1E:D1:39:D7:3C:D9:9F:FE:48:ED:2C:86:5F:68:08:F6:14:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E505
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8F94818BDB711EFA3C713B8762E951A.roa
Signing time: Thu 19 Dec 2024 03:16:38 +0000
ROA not before: Thu 19 Dec 2024 03:16:35 +0000
ROA not after: Wed 10 Dec 2025 03:16:35 +0000
asID: 984
IP address blocks: 45.204.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58629 (0xe505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:16:35 2024 GMT
Not After : Dec 10 03:16:35 2025 GMT
Subject: CN=67639016-0036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:26:92:50:9b:1b:3b:5e:92:93:57:b5:f3:
95:ea:8c:f8:73:8d:1f:76:29:52:7a:0d:32:e3:71:
68:f7:82:b6:2b:24:49:4d:53:ce:f6:b2:0d:15:e1:
3d:75:00:bb:24:6a:24:03:8e:62:82:21:d6:26:5e:
b1:fb:f7:18:40:80:08:66:84:37:e3:36:ef:04:fe:
9e:51:c1:8a:79:db:2a:35:7f:74:36:fc:4e:96:89:
0f:16:ac:48:c5:13:70:d6:cd:ad:e4:42:da:9d:4d:
b7:9d:eb:49:42:a3:28:5c:15:c0:87:1e:0a:f1:0a:
12:d6:20:5a:fe:c7:80:3e:65:44:6f:2e:1d:51:7b:
fe:79:b7:b4:27:22:0b:54:2c:64:9a:3f:9b:bd:70:
f8:9f:42:57:47:fe:e1:6e:0c:04:0e:8b:e6:2c:3e:
67:02:6b:8c:52:69:c0:77:25:8a:a4:e5:1d:73:3f:
4c:e2:8e:12:05:fe:1c:5e:ca:35:c9:6e:6d:3c:a4:
77:41:3c:24:3e:31:59:d9:f0:2e:9b:8a:94:14:ee:
c1:d7:86:eb:54:23:38:ae:cc:59:77:6b:9e:75:c2:
a0:e6:6c:01:76:cf:14:d8:1f:90:3e:98:76:7d:6e:
04:29:66:8e:cd:25:ba:54:01:a7:e8:33:ca:85:27:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F1:1E:D1:39:D7:3C:D9:9F:FE:48:ED:2C:86:5F:68:08:F6:14:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8F94818BDB711EFA3C713B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.177.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7a:5a:2b:6e:9d:7c:c8:19:d6:8a:74:cf:0c:03:da:e2:7b:
0a:3f:8c:3d:a5:b2:86:24:6d:55:69:7b:d1:57:1d:17:2c:6f:
9c:54:94:5c:e6:f0:0b:8a:57:11:00:7d:ad:c5:b9:b7:ec:19:
dd:cd:50:a2:d2:c2:67:2d:88:38:62:d4:b7:8b:91:e8:6b:12:
a6:a3:76:d2:f3:a9:43:8f:46:bc:9d:59:55:bc:e4:73:eb:cf:
ea:8d:e6:2e:49:fe:18:3f:ba:0e:c8:69:ba:d7:29:89:a4:de:
2c:a0:51:d7:11:82:3d:f3:84:65:c2:26:5b:ac:6e:e8:8e:42:
34:ba:32:0c:87:7f:d3:f7:d0:c8:9b:e9:f1:26:3b:db:99:5d:
82:9e:b5:a7:25:17:4b:32:72:e2:37:27:32:f5:ea:71:40:34:
c2:3b:e0:2f:95:e5:9a:8b:9f:7a:55:89:88:89:16:d2:e3:54:
41:d1:a8:d3:52:d6:71:4b:5a:59:2e:d7:38:2f:24:98:0d:f1:
da:ce:a6:86:ef:05:13:e4:b6:c6:6d:be:db:c9:53:20:58:73:
f4:9a:02:3c:a8:4a:5d:11:11:80:0e:38:58:08:15:ad:4a:c3:
2f:5e:8f:d1:b3:94:83:0d:6d:45:94:38:83:c1:95:fa:92:b7:
e0:22:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:09 2025 by rpki-client