Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAF4DD92BE7B11EFB2282E87762E951A.roa
File: BAF4DD92BE7B11EFB2282E87762E951A.roa (raw, json)
Hash identifier: FJig3H4DL+3kqPcbx9e3yCcN99zQ1sTRYEeb3s4tpog=
Subject key identifier: AF:85:B4:3D:80:36:CB:DF:DF:3C:C9:A1:9B:4C:D2:F5:12:DD:7D:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E664
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAF4DD92BE7B11EFB2282E87762E951A.roa
Signing time: Fri 20 Dec 2024 02:40:10 +0000
ROA not before: Fri 20 Dec 2024 02:40:06 +0000
ROA not after: Wed 10 Dec 2025 02:40:06 +0000
asID: 984
IP address blocks: 45.206.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58980 (0xe664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 02:40:06 2024 GMT
Not After : Dec 10 02:40:06 2025 GMT
Subject: CN=6764d90a-0e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:61:e7:f4:9e:13:79:6c:45:4d:58:e0:81:
34:67:b1:ee:56:3b:05:97:68:49:a4:07:6c:96:fa:
1f:f0:c4:fb:00:8f:26:24:7b:e8:4f:12:0f:47:6f:
8f:96:b8:f9:52:a6:77:6a:16:67:00:69:90:02:20:
62:e7:69:7a:89:8a:ed:ec:57:b0:c8:5a:06:bb:6e:
81:1b:fb:64:af:fa:72:e2:9a:99:b0:bd:e3:56:e6:
ce:e1:f6:d0:9d:95:51:6f:38:8d:94:22:b0:b0:70:
b8:76:f8:a8:5d:41:1f:9b:ca:d9:9f:40:2d:ce:20:
5a:d6:9d:6e:2f:67:ff:da:99:b9:99:26:b8:da:41:
bb:c3:a7:41:b0:d6:0d:76:46:dd:ec:6a:58:a6:67:
8e:ce:3a:8f:01:0f:bc:4f:5b:21:f0:41:e3:b1:5d:
56:17:21:a5:4f:ad:b2:e3:24:cc:65:62:34:f6:1b:
d7:6a:78:f3:b0:6a:74:63:73:16:53:88:c3:ae:e9:
9c:04:f3:5a:b0:90:ca:7a:86:eb:54:c9:22:57:9a:
a8:64:eb:10:31:df:ea:70:a5:46:e3:55:3b:3f:46:
16:a4:e6:0e:56:cf:df:eb:e6:ee:03:de:62:e5:c5:
b7:39:ba:4f:ea:bb:3f:f8:43:35:a9:dc:7e:70:f0:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:85:B4:3D:80:36:CB:DF:DF:3C:C9:A1:9B:4C:D2:F5:12:DD:7D:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAF4DD92BE7B11EFB2282E87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:eb:e6:87:db:3d:b1:ec:3c:e5:9c:f3:4c:42:2c:1e:5a:f1:
71:d7:7c:ee:63:da:c7:59:ea:e4:8d:38:27:21:43:fa:9a:a7:
83:cc:72:18:88:4c:22:c3:8d:c6:9a:80:b7:8b:e8:b5:30:51:
61:00:58:9d:37:89:cd:72:5c:bf:91:7a:8e:f1:8a:87:58:55:
3f:f7:54:0b:3a:f3:ac:32:d8:35:c5:64:68:0e:95:69:d7:d3:
57:d5:8d:92:f1:94:5d:1f:49:9e:d1:83:7f:c7:85:23:b4:5a:
82:11:63:92:21:0f:c5:eb:a6:20:80:06:3a:ed:ec:98:47:4b:
00:10:6b:9b:ab:2c:d1:0e:00:f5:5d:0b:9a:c1:04:f5:f3:d7:
f8:72:e3:7b:c0:25:b5:c1:ca:60:38:00:7e:df:d7:16:c0:2d:
f7:91:c6:95:9f:7b:e9:21:39:e3:45:40:5d:d6:da:6c:91:4f:
73:79:5f:5f:64:2c:52:19:df:f7:b2:bf:1c:69:5e:7e:01:03:
31:8f:48:7d:08:99:cf:49:6b:57:af:21:ee:d7:02:e3:31:fe:
9a:66:2d:e7:45:2a:28:d6:1a:f9:06:6c:03:7b:df:ac:c5:e2:
57:4d:5e:af:7a:ff:55:f5:5f:6a:93:1a:b3:de:42:b3:a5:e8:
e8:69:00:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:26 2025 by rpki-client