Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5248428CEF011EF96CD1386762E951A.roa
File: B5248428CEF011EF96CD1386762E951A.roa (raw, json)
Hash identifier: xi0EuSfM4Pr24ZC2adxIUKMWDoefoxDJ5Swup02v6U8=
Subject key identifier: 1A:DA:93:2E:C6:09:85:5F:4E:0E:54:40:81:33:E0:70:21:DC:6B:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010471
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5248428CEF011EF96CD1386762E951A.roa
Signing time: Fri 10 Jan 2025 01:17:50 +0000
ROA not before: Fri 10 Jan 2025 01:17:46 +0000
ROA not after: Thu 13 Feb 2025 01:17:46 +0000
asID: 54801
IP address blocks: 45.202.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66673 (0x10471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 01:17:46 2025 GMT
Not After : Feb 13 01:17:46 2025 GMT
Subject: CN=6780753e-d374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:52:c0:a2:eb:3d:71:c1:16:07:d4:bd:21:
2d:f7:39:bd:81:52:cc:91:4c:3f:36:21:73:c5:fa:
15:bf:13:40:51:86:cd:d4:fb:a4:4c:2c:10:ea:99:
02:5a:14:fe:56:b7:0a:63:2d:2a:a9:36:c8:b7:f0:
6d:d9:8f:80:d6:f2:8c:d0:35:0b:bd:18:c1:9a:3a:
03:b7:88:0b:68:46:34:87:1c:c3:9c:d4:f3:b2:cc:
b0:22:92:f9:1f:6c:67:1c:86:c2:a3:d8:73:e0:da:
fa:8b:ba:42:39:03:9b:2f:c1:8d:b1:aa:ee:13:61:
67:da:28:8b:f2:9f:d5:c4:f3:e9:8b:c0:e0:da:41:
6d:50:8a:2a:06:fb:0c:ab:7e:14:e1:2e:82:e1:01:
73:5f:fa:06:c9:85:79:3d:2a:60:1f:f7:24:66:c8:
50:1c:8e:5c:a4:11:a1:32:ea:e2:65:7a:32:17:d2:
85:8f:dd:21:c0:cd:2d:92:3d:ea:19:0f:bd:3a:b1:
1f:1e:46:7f:cc:ff:f1:11:b0:40:4d:2a:d4:20:f4:
cc:38:4b:ae:f9:82:fb:ae:a0:a3:3c:d1:b1:20:00:
ba:08:f8:66:56:59:92:cb:9c:d5:60:36:d4:16:b7:
d5:7c:f5:c1:a5:1d:b1:c3:be:8d:25:06:f3:2b:4b:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DA:93:2E:C6:09:85:5F:4E:0E:54:40:81:33:E0:70:21:DC:6B:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5248428CEF011EF96CD1386762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.63.0/24
Signature Algorithm: sha256WithRSAEncryption
89:27:19:ef:0d:c2:38:e6:00:59:b4:57:94:d0:3f:69:1d:32:
d9:7d:3f:f5:1d:38:bf:35:0e:f4:ba:9c:54:4f:2f:f7:ce:92:
79:d1:e6:ca:6f:1e:57:6c:4f:bb:79:7a:e8:47:f4:61:90:5f:
6d:e9:85:ff:ec:77:ec:f1:1a:5d:05:92:c1:e6:6c:e6:ae:08:
4a:cf:d9:ba:9d:f2:32:4f:26:2c:f9:1b:57:37:ef:bf:56:cc:
10:f9:d1:3d:ee:f1:52:b1:a0:63:05:db:4a:ee:1c:20:e7:65:
5c:ea:1a:df:e9:fb:e4:c9:cb:61:5d:95:50:32:28:a2:c4:a7:
78:b6:18:bb:84:57:de:a9:4b:63:79:c9:ce:af:5b:23:7e:49:
48:38:fc:b1:90:56:8b:a9:81:dd:f3:49:fd:94:8a:d4:e9:97:
0a:36:a3:2c:b6:89:6f:a6:31:6a:ed:39:2f:3a:73:e4:62:92:
98:e2:02:1b:72:49:ee:b4:6a:96:b4:29:11:80:40:45:c2:d0:
6f:f1:3f:00:b8:7a:0f:b0:99:dc:ad:2b:9f:43:cd:38:2a:2d:
f4:61:72:49:89:35:58:23:7f:25:f8:36:ee:37:65:a6:6a:ca:
d1:cb:fe:58:6a:41:54:aa:dc:73:32:a7:b6:4f:52:bb:83:3c:
cf:9e:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:41 2025 by rpki-client