Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF91664D24911EF9F5E37BD762E951A.roa
File: ABF91664D24911EF9F5E37BD762E951A.roa (raw, json)
Hash identifier: UzR2yVKxxcJaeSmlKGJv2iMK98uWupyN7HUdckxMFcU=
Subject key identifier: 85:C1:8A:D5:69:8E:A9:42:D4:F8:37:31:42:6C:31:E6:EB:D5:8D:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF91664D24911EF9F5E37BD762E951A.roa
Signing time: Tue 14 Jan 2025 07:32:13 +0000
ROA not before: Tue 14 Jan 2025 07:32:10 +0000
ROA not after: Tue 18 Feb 2025 07:32:10 +0000
asID: 214413
IP address blocks: 45.194.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67304 (0x106e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 07:32:10 2025 GMT
Not After : Feb 18 07:32:10 2025 GMT
Subject: CN=678612fd-8569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:ec:c7:4f:c1:53:e9:13:e8:33:32:cd:85:
95:b0:e2:9c:b1:57:95:23:29:b5:7f:21:bb:90:94:
65:81:6f:48:b4:5a:eb:2c:ea:fe:1e:71:ff:a3:9f:
2f:d2:3f:51:21:f7:84:1c:a5:a5:b9:87:38:0b:d3:
b9:9b:9e:77:b5:e1:b4:64:e6:00:ce:b4:58:49:b1:
0d:e5:4a:62:c4:24:47:f9:fc:ab:96:48:b5:92:b3:
03:96:ab:b8:ec:ad:24:63:13:18:cb:22:bd:07:7d:
8a:fa:d7:ec:56:6f:5c:0e:87:3e:2b:70:2d:f5:ea:
aa:d3:8a:0a:58:81:06:07:41:9e:48:39:5a:3b:e3:
f7:23:c2:fa:44:82:0c:31:2b:d1:b6:9c:17:67:8e:
24:96:6d:a2:b9:5d:c6:b4:d6:40:f8:c0:80:b9:ed:
4a:5d:ef:59:a3:a7:31:08:78:cf:5e:95:9e:aa:9b:
6e:68:d9:4d:72:d0:b1:7f:68:1d:d6:fb:5a:b3:b8:
e2:34:82:42:a5:c2:34:8d:0d:38:78:a4:c2:e1:80:
b5:58:81:85:e3:a9:7e:ea:dc:95:1d:76:90:9e:7a:
7a:af:8d:1e:3e:28:fb:0a:56:a1:ff:6d:b8:24:8b:
a8:42:5e:5e:09:da:db:c7:b2:b3:75:65:c4:d6:f4:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:8A:D5:69:8E:A9:42:D4:F8:37:31:42:6C:31:E6:EB:D5:8D:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF91664D24911EF9F5E37BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:20:c6:0d:be:34:f2:e5:a8:2f:c0:5f:b5:1d:b1:df:a6:e0:
f7:57:04:71:97:d5:40:04:c4:27:48:b3:ac:0b:54:fb:3b:cd:
c6:ef:33:7d:ad:18:21:4a:eb:bd:de:df:64:0e:da:a2:e8:2b:
41:39:c9:03:3d:46:fe:f0:cb:9d:17:81:5b:c9:cb:ec:01:34:
22:f0:bc:08:82:ec:c4:7b:c3:e4:e6:22:3e:63:54:76:ae:72:
99:0f:93:6a:2d:2a:8b:07:8c:7e:81:9f:3c:10:92:f5:64:c3:
f5:a2:79:91:45:5e:a8:01:7c:ea:9c:87:23:71:60:c3:f9:f1:
f8:b2:4a:4b:f1:92:46:6f:32:08:b2:5d:5d:b7:48:69:a4:4f:
ce:aa:aa:4b:1f:91:0c:b2:a4:a0:f1:f8:d8:fb:7f:d6:c9:4e:
37:39:43:12:e2:ce:ea:65:74:3e:5a:d6:c0:7b:c1:4b:61:7c:
58:51:8f:c7:fb:ce:ab:84:fd:95:59:4a:cc:ad:95:3d:02:67:
5a:f2:e3:31:9a:23:68:da:34:ae:14:9b:9f:b5:c3:7c:f6:a9:
f9:bb:a8:fd:09:a5:39:00:a7:22:cc:57:ee:0c:d8:36:f5:1b:
73:dc:23:c6:b9:eb:37:e9:71:ad:1c:b3:74:c3:3d:7f:c2:a6:
48:00:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:07 2025 by rpki-client