Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1833FB8D30911EF85A90987762E951A.roa
File: B1833FB8D30911EF85A90987762E951A.roa (raw, json)
Hash identifier: 319JoHzPyI7weaI3HntUryCCqNq5j3A7On2053bnM9I=
Subject key identifier: 5B:5F:C2:ED:30:62:B1:4E:B2:5C:3E:52:E0:29:C0:56:17:B8:97:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010823
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1833FB8D30911EF85A90987762E951A.roa
Signing time: Wed 15 Jan 2025 06:26:46 +0000
ROA not before: Wed 15 Jan 2025 06:26:41 +0000
ROA not after: Wed 19 Feb 2025 06:26:41 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67619 (0x10823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:26:41 2025 GMT
Not After : Feb 19 06:26:41 2025 GMT
Subject: CN=67875526-609b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:2a:90:c1:16:1f:86:cf:71:9e:aa:1f:8a:
43:a0:d8:94:13:85:c5:7e:80:9c:ce:f3:de:6f:0b:
1d:78:a0:f5:2e:37:34:15:7d:ef:13:49:d7:d5:67:
26:c9:d7:07:9a:14:7f:db:c6:a6:f2:18:1f:7d:42:
88:58:84:f0:f6:b4:15:72:ee:d8:4e:ec:7c:da:83:
8f:d8:6c:ed:a7:f7:c7:e3:ed:38:e3:4f:e6:db:dd:
53:d4:95:50:cf:b2:6a:3c:60:5f:a8:08:d7:cf:28:
dc:e8:93:d4:20:69:76:69:16:27:5b:a9:c6:0f:bd:
b1:04:84:67:70:3b:cf:13:a5:df:63:ef:b0:3a:2d:
06:46:69:07:c8:e3:1b:f6:1a:f6:9c:d1:e5:4c:3f:
8a:5a:a4:3c:d3:b5:85:eb:18:93:53:b4:7b:cc:20:
f7:54:62:02:68:b8:a7:82:8b:13:36:e3:46:e4:ed:
cc:dc:33:f7:b8:7f:7b:f7:1f:83:66:19:83:6d:59:
5b:5d:11:d8:e9:96:37:fb:07:b1:27:67:13:67:69:
00:5d:74:42:33:7c:56:4e:d7:68:87:70:72:09:33:
c2:fb:6c:24:42:cb:38:e1:28:fc:20:fa:0b:c2:39:
43:c5:c0:f0:aa:70:89:07:b0:09:5c:90:22:49:8a:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:C2:ED:30:62:B1:4E:B2:5C:3E:52:E0:29:C0:56:17:B8:97:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1833FB8D30911EF85A90987762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
82:14:8a:9c:df:4a:9e:3d:05:d6:6c:15:e5:8b:62:61:6f:5a:
9e:08:fa:23:70:ed:0d:49:ce:a2:64:75:0b:af:dd:36:36:0a:
00:b5:b1:da:b6:32:a5:b3:ea:13:72:af:bb:34:f3:b4:2d:28:
19:fd:ac:96:83:c8:44:db:e7:d8:8f:07:77:cd:27:51:5f:df:
b6:a7:88:21:33:18:7a:a6:b7:5f:87:f8:8f:92:da:4e:99:55:
80:39:5d:73:2e:39:ca:33:1f:00:f4:17:8e:2a:58:93:9c:33:
0d:f8:b8:af:05:8e:e8:73:86:95:e3:29:44:78:ef:af:b2:8a:
fe:d7:7f:e0:eb:c3:85:a1:6c:64:50:18:ce:eb:77:c4:2b:82:
76:9f:60:1c:66:ea:69:c9:09:6e:0b:7e:16:a5:32:69:aa:1d:
97:4d:a0:90:7e:40:d2:9d:f8:ab:07:1a:24:7f:36:1d:ea:5a:
ce:30:71:f2:13:2f:5f:aa:e0:2e:f6:c8:85:77:bc:58:5b:72:
7c:34:e0:5f:22:11:34:58:c8:3e:15:67:52:ef:55:28:d5:37:
71:48:a1:2c:75:04:88:93:be:13:ab:9d:c2:22:88:78:a2:ff:
fe:6b:6e:81:77:bf:4e:80:ef:bb:b5:7b:2e:d4:47:90:6a:28:
f4:6a:39:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:55 2025 by rpki-client