Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE273572D17811EFA80D3992762E951A.roa
File: BE273572D17811EFA80D3992762E951A.roa (raw, json)
Hash identifier: 2fKrB9V7k3g0rxBbTzy6xrlE64IYaXj8GHW78WK7U18=
Subject key identifier: A8:83:2D:12:F4:DC:E6:ED:6F:3A:6A:36:36:9C:B0:C4:EC:29:D4:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010664
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE273572D17811EFA80D3992762E951A.roa
Signing time: Mon 13 Jan 2025 06:36:39 +0000
ROA not before: Mon 13 Jan 2025 06:36:35 +0000
ROA not after: Sat 15 Feb 2025 06:36:35 +0000
asID: 273222
IP address blocks: 45.194.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67172 (0x10664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 06:36:35 2025 GMT
Not After : Feb 15 06:36:35 2025 GMT
Subject: CN=6784b477-7d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:e7:73:95:36:21:97:d7:b7:fe:ec:3a:55:
d4:8c:a3:1c:86:87:7b:92:70:bb:48:b0:70:58:1c:
83:ab:9c:1e:af:b6:e1:f3:5a:88:7b:81:ed:d1:22:
6a:1d:04:c0:7a:f6:9f:a0:fc:0c:fa:27:ff:31:57:
ac:d4:d6:3c:59:84:04:0d:2a:0c:75:5f:0f:f0:80:
82:de:33:a9:4a:04:3d:1d:35:f5:b9:65:47:ec:d4:
a8:7e:31:35:87:61:f4:22:01:d2:68:09:9b:25:db:
ba:13:d5:76:dd:6e:82:90:be:db:4c:fd:c4:d0:e8:
1c:33:77:6f:2a:e5:56:d7:84:03:09:90:1d:ab:bd:
05:22:34:2c:24:ee:7c:57:ae:a1:55:55:ef:d9:df:
80:f2:8d:84:88:e4:6e:d3:fe:97:48:02:36:d3:59:
ba:e7:96:f6:c3:0e:f7:70:0d:1b:4c:a7:57:b9:ef:
7b:58:f7:f9:fe:59:6b:4c:92:4d:84:93:4b:f7:77:
f6:be:37:01:19:19:19:b5:fc:6a:11:bf:9b:0c:42:
df:54:0c:03:47:96:3d:e4:ca:16:3e:68:a4:27:99:
08:1b:a8:68:68:54:2b:80:82:0f:c9:fc:8a:fe:0d:
f5:54:67:00:54:be:f3:eb:8c:c5:db:4a:94:d8:86:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:83:2D:12:F4:DC:E6:ED:6F:3A:6A:36:36:9C:B0:C4:EC:29:D4:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE273572D17811EFA80D3992762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.10.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fe:92:2a:21:5a:0b:f2:b1:2d:39:b1:a5:8c:85:27:a7:e4:
c2:03:ab:41:3c:64:b4:03:bf:db:3a:c5:f0:e3:24:df:5f:66:
2c:65:a3:ae:35:03:6d:27:99:15:a5:d9:39:e1:07:16:f4:2f:
b2:08:79:c8:11:26:ff:e5:4e:59:d7:b5:3b:4a:cf:78:52:d5:
a6:b7:18:34:2e:0d:51:06:58:4b:05:9b:1f:69:8c:cb:27:9e:
27:db:12:fc:e8:4a:ea:71:a8:14:eb:26:1b:33:8f:e1:02:63:
7f:42:59:9c:9e:ee:16:5d:ca:cc:2b:17:00:b6:0f:03:0d:23:
ec:7d:f0:85:9f:80:3e:87:d0:83:ba:e6:3a:6f:20:ea:7a:a8:
69:e5:10:82:d2:24:5e:7e:7f:eb:e3:4b:ef:ac:52:fb:07:7c:
14:c2:c6:87:3a:35:f3:a7:d3:8c:35:f9:13:4a:53:3b:71:9d:
e9:e9:9e:be:69:f4:42:82:81:7a:3c:99:6e:22:f6:c6:58:4c:
d9:60:cc:ab:f0:e8:5d:94:81:b1:ad:03:2d:5c:16:61:2e:4f:
88:d6:a4:5f:3a:69:cf:af:8d:5e:ca:c0:07:13:fb:12:69:d0:
b1:45:c8:72:b1:2a:e0:d7:59:19:c7:b5:ba:3f:70:a7:a2:24:
04:ab:5d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:00 2025 by rpki-client