Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3C3FB50BDAF11EF9C6A0081762E951A.roa
File: C3C3FB50BDAF11EF9C6A0081762E951A.roa (raw, json)
Hash identifier: 8cEEBS2BnFDU3wachlh7m0MdcbX9/Q57tGOu/NZHWqw=
Subject key identifier: A6:57:28:9E:16:4B:01:AC:8D:38:7E:B5:7A:E6:F5:58:FB:ED:18:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E49F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3C3FB50BDAF11EF9C6A0081762E951A.roa
Signing time: Thu 19 Dec 2024 02:20:07 +0000
ROA not before: Thu 19 Dec 2024 02:20:04 +0000
ROA not after: Wed 10 Dec 2025 02:20:04 +0000
asID: 984
IP address blocks: 45.198.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58527 (0xe49f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:20:04 2024 GMT
Not After : Dec 10 02:20:04 2025 GMT
Subject: CN=676382d7-0884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:b4:3c:ca:e0:14:4c:05:29:9b:b8:1c:e4:
f2:78:ec:71:b1:94:75:ba:51:1c:fe:35:3a:01:40:
cf:09:f9:67:eb:c5:ab:b8:17:25:f4:c8:35:66:d9:
09:70:21:f9:ee:7b:3c:97:66:c7:52:e7:ec:01:b4:
36:68:3b:af:89:d2:53:21:30:ff:9d:27:2d:fa:ff:
5c:b8:e3:0b:14:24:c7:67:d1:78:ad:a0:66:34:b1:
0d:8d:26:48:b5:0f:fd:91:4c:77:a9:7f:6b:d9:72:
33:f5:d8:f0:35:9b:9e:da:00:db:81:3f:26:c5:07:
fd:b9:4f:d1:d7:29:cd:f7:2d:a8:6e:92:86:6c:01:
06:fc:c1:94:4a:5e:d4:9a:1f:46:11:84:bb:77:88:
eb:91:b8:98:c8:5f:09:aa:ef:38:a2:18:c5:16:c5:
ff:ea:81:5a:fc:54:c1:98:4b:69:df:27:2f:df:35:
bb:4c:be:af:e5:62:db:60:d7:97:85:b1:24:86:09:
95:17:32:1c:28:df:1e:4c:66:99:40:0d:04:36:96:
69:87:03:73:02:95:0e:58:2f:36:c7:53:58:ca:6a:
e8:b0:40:14:b2:42:c1:2f:91:1c:83:d2:d7:33:20:
56:36:5b:1c:53:db:cf:cb:f6:17:2a:f4:f5:85:ad:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:57:28:9E:16:4B:01:AC:8D:38:7E:B5:7A:E6:F5:58:FB:ED:18:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3C3FB50BDAF11EF9C6A0081762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.231.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c2:46:74:97:b1:b9:82:0a:b9:6f:b6:4d:3e:7b:93:5a:ff:
f5:80:3d:97:81:32:3c:fb:4f:23:16:31:0b:10:5b:ab:9e:ed:
fc:2b:ed:25:89:5a:cd:84:b1:65:72:4f:58:51:0f:99:72:99:
a7:60:61:13:72:8e:92:74:9d:e8:ba:f3:8b:4a:7a:34:75:bc:
da:63:41:c6:b6:95:11:09:43:60:df:33:6b:34:81:25:eb:04:
ae:2c:8f:d8:36:9d:f7:c8:d9:77:88:a1:84:ad:ce:c1:41:ab:
70:a1:f3:c0:af:75:43:2d:7a:72:3d:93:07:f3:6a:b6:bf:6e:
8b:42:f2:21:62:c5:4a:91:f7:77:83:d3:d6:de:01:34:52:b6:
df:4c:e5:29:71:f4:0c:f5:6f:cd:d9:df:0c:49:dc:34:98:a3:
43:ec:31:08:cb:6a:c2:39:4e:60:a2:5f:97:09:a6:1d:60:88:
28:8c:ef:92:79:ef:6a:3c:aa:ca:b9:62:67:c0:2f:99:ee:ea:
5b:8d:02:71:c6:7d:61:5d:ef:33:da:59:0b:2e:3e:dd:74:f4:
98:5f:3f:a1:f9:5f:a7:71:b7:38:fa:93:b2:f0:6e:fe:20:3f:
8b:a6:a9:43:e0:e0:88:03:57:be:ab:84:aa:6c:30:89:da:df:
d8:2c:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:30 2025 by rpki-client