Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4FE2290BE8A11EFB55EF768762E951A.roa
File: B4FE2290BE8A11EFB55EF768762E951A.roa (raw, json)
Hash identifier: CVXP/AtSD98cmg+ShyS9gOyKcBnZWY6C+j+ZsYr62Dw=
Subject key identifier: 1B:31:57:84:7D:4D:00:F1:7A:FB:13:7A:B3:A3:19:FA:24:EC:C5:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E6C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4FE2290BE8A11EFB55EF768762E951A.roa
Signing time: Fri 20 Dec 2024 04:27:22 +0000
ROA not before: Fri 20 Dec 2024 04:27:19 +0000
ROA not after: Wed 10 Dec 2025 04:27:19 +0000
asID: 984
IP address blocks: 45.206.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59072 (0xe6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 04:27:19 2024 GMT
Not After : Dec 10 04:27:19 2025 GMT
Subject: CN=6764f22a-22c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:3f:00:60:3f:a1:86:79:9b:43:2c:09:01:
b6:36:5e:c0:29:d5:77:ab:32:da:c5:99:c9:65:96:
e7:6c:8a:f1:e4:3d:be:42:0a:de:1a:57:7d:a6:3e:
b3:09:1b:ab:7b:50:ef:9c:50:e3:6a:70:91:91:ec:
81:2b:5a:7e:ef:04:1c:05:9d:d9:f8:2a:66:ab:5f:
c4:cf:3f:38:77:d9:23:e3:22:6a:bc:26:6f:33:8d:
33:85:85:65:fc:cc:d0:4e:ab:dc:88:b4:44:69:af:
df:84:88:65:19:79:63:a4:4f:e6:f7:16:30:18:39:
52:dd:57:4c:3b:7d:b2:b7:2e:ea:d1:04:cf:14:01:
d3:46:d7:e0:88:ab:b5:bf:07:91:ef:fc:e6:07:0e:
91:55:15:35:65:99:6b:58:5b:b4:5f:7d:d6:41:c2:
88:54:c7:d5:e2:cb:bb:4b:d5:4b:4c:01:65:45:52:
1f:33:2e:49:70:33:f7:e9:d8:e4:68:43:ec:ff:9e:
19:04:56:f5:9a:02:de:09:7f:85:65:a2:50:58:c0:
5f:c3:ff:6e:0d:5f:3d:5a:77:9e:a1:5d:a8:0e:f4:
84:0f:56:ee:83:a5:1b:e7:bb:a1:cf:31:65:aa:fe:
aa:75:2c:58:bc:98:60:8b:ba:14:7e:82:e0:f7:a4:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:31:57:84:7D:4D:00:F1:7A:FB:13:7A:B3:A3:19:FA:24:EC:C5:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4FE2290BE8A11EFB55EF768762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.227.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c9:70:0a:78:4d:62:4d:f7:c0:e7:d7:fc:8f:9d:fd:5d:bf:
52:01:04:02:5a:5a:64:7e:35:3a:03:36:bc:05:dd:bb:ea:94:
c1:ac:88:c5:d0:31:3a:f9:3d:e8:9d:2f:c1:a3:3e:b7:e6:17:
d0:8a:75:b2:d3:a9:c9:c6:a3:fd:e0:4f:0d:d7:34:eb:97:0e:
b9:37:48:2b:c5:f5:b4:5e:4f:aa:e3:88:59:22:0f:de:ab:45:
63:84:d6:f4:33:d2:b5:52:2a:7f:3f:c6:f9:2d:a4:90:4a:29:
51:57:8c:e0:ed:cb:d7:28:ba:4f:39:a3:01:2c:a7:22:31:e4:
b1:c0:e6:c2:eb:7e:1f:db:66:29:59:9d:62:ac:23:0e:d1:bd:
28:88:d6:4b:2c:5f:41:40:44:ae:6c:49:1b:74:65:86:a7:0f:
2b:78:38:86:3d:89:7f:2d:9f:6d:91:66:4a:6d:f1:7b:c8:0b:
33:d4:58:7a:e2:87:8e:82:fd:d2:94:0c:5a:af:2e:17:93:65:
1f:b9:bb:d8:19:aa:2f:7c:82:fe:4b:67:b6:6d:16:85:82:e0:
44:80:82:32:78:a9:3e:db:88:09:03:26:ba:d1:29:de:ca:29:
5c:27:e1:82:e8:44:1a:fa:30:40:0e:30:9f:66:32:73:e7:af:
66:ac:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:01 2025 by rpki-client