Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7380106CF3811EFB015195E762E951A.roa
File: C7380106CF3811EFB015195E762E951A.roa (raw, json)
Hash identifier: iYUNvWbzWn7VCvYiCnDU8r2lFnfzTqsxDBF2TpXEs0o=
Subject key identifier: 13:BE:70:95:58:E6:AE:26:7F:C6:2A:44:36:E2:8E:7A:90:88:F7:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010541
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7380106CF3811EFB015195E762E951A.roa
Signing time: Fri 10 Jan 2025 09:53:44 +0000
ROA not before: Fri 10 Jan 2025 09:53:40 +0000
ROA not after: Fri 25 Apr 2025 09:53:40 +0000
asID: 10753
IP address blocks: 45.199.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66881 (0x10541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 09:53:40 2025 GMT
Not After : Apr 25 09:53:40 2025 GMT
Subject: CN=6780ee28-c6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:df:0e:9b:91:09:11:56:04:56:86:4a:80:
5f:4d:75:35:6f:db:6a:1f:de:53:eb:b8:2f:2b:ab:
7c:50:ef:1f:04:67:ab:5e:7c:d2:f7:92:12:6e:48:
5c:2e:0d:f0:55:8b:e7:45:94:f0:49:5a:e2:5d:29:
56:24:a2:31:53:8d:3a:2d:87:5a:06:7a:62:cd:3a:
8d:d7:99:61:61:80:d1:ed:bf:7e:78:24:89:a9:48:
d0:9c:a9:21:3a:46:b0:ec:69:e5:91:a8:9b:d7:92:
8c:c8:eb:90:5b:39:c7:99:61:d7:97:66:ed:1a:65:
d6:e9:7c:8c:bb:ba:9f:2b:46:7a:fb:ab:64:17:b7:
71:7a:b9:cd:9a:50:ce:44:ed:c1:81:7f:b1:88:8f:
1f:e4:fa:54:cd:d5:31:79:2a:57:fa:62:e2:97:20:
e7:a1:76:47:45:42:99:10:4c:4e:f6:cd:a7:7a:2b:
eb:d7:3d:41:36:de:c0:90:f1:87:c6:91:0a:6a:c2:
ac:15:94:6c:73:c2:70:58:7a:bf:ff:e7:d9:2a:78:
67:b5:cc:b7:82:10:b5:0b:b0:41:4c:97:47:da:04:
1d:35:b6:92:68:b9:1e:37:e8:cf:32:04:1e:cf:e4:
d2:ff:f9:20:0e:c1:cb:21:1e:a4:bd:25:1a:42:c4:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:70:95:58:E6:AE:26:7F:C6:2A:44:36:E2:8E:7A:90:88:F7:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7380106CF3811EFB015195E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.149.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f4:e3:7d:05:89:97:61:e7:01:7c:68:e8:03:72:a1:6d:17:
df:9e:12:96:7b:3e:ec:b5:7e:1d:e9:89:d3:ed:59:9c:4a:6f:
47:fa:6a:e8:45:43:61:ea:3a:28:69:0d:1c:4e:7c:f6:d2:e0:
a7:05:7f:a4:92:fc:e7:e4:f0:87:ee:c1:a0:b6:b7:6f:45:60:
8f:ba:f1:f5:fa:2a:75:a4:6c:01:20:6d:8b:da:57:66:43:f3:
47:5e:15:f1:84:27:53:6e:25:a9:1f:a4:10:31:b1:41:11:3e:
35:7c:be:34:6a:83:b8:01:c3:d2:5f:98:bb:3b:2b:67:94:7c:
18:72:cf:20:98:23:9e:4a:20:b1:f2:ef:4d:8d:83:cd:76:2e:
0b:16:cb:9f:cc:68:7d:cc:77:b3:1f:3a:b7:8a:17:ac:ce:e1:
c4:34:ec:1e:08:e7:f1:01:ef:bd:34:2b:9f:32:b0:22:1d:ea:
c2:03:f9:95:fc:59:c0:0e:a4:9c:a6:2f:c9:3d:9b:9f:76:11:
fc:03:53:b9:d3:32:5a:8a:58:01:c8:17:34:37:9a:a8:fd:86:
3c:ac:8e:48:4f:7f:6d:29:2c:20:68:3e:0e:3c:23:13:13:89:
7a:0d:24:b3:18:ba:eb:70:6f:4e:7e:da:05:d0:dd:b1:a8:f1:
f0:ff:ed:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:36 2025 by rpki-client