Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8987212BE7911EFAF454977762E951A.roa
File: C8987212BE7911EFAF454977762E951A.roa (raw, json)
Hash identifier: 0LsJkkFK4IoZpprvG/VkOc1xw28ZoM1tSxvoE//9E2g=
Subject key identifier: 28:F1:3D:79:2F:A4:51:B8:D7:19:AA:DA:9C:9D:A5:2E:84:AF:A3:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E654
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8987212BE7911EFAF454977762E951A.roa
Signing time: Fri 20 Dec 2024 02:26:14 +0000
ROA not before: Fri 20 Dec 2024 02:26:10 +0000
ROA not after: Wed 10 Dec 2025 02:26:10 +0000
asID: 984
IP address blocks: 45.206.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58964 (0xe654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 02:26:10 2024 GMT
Not After : Dec 10 02:26:10 2025 GMT
Subject: CN=6764d5c6-fa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:3f:75:19:be:fd:9b:20:c2:99:2e:64:e5:
e5:d4:82:b9:d6:1b:c7:9e:ec:79:cc:f4:82:7e:8a:
ec:0d:9d:1d:26:1f:cf:72:7b:3c:9c:7f:ae:a0:89:
d7:87:a0:8a:f5:5c:f1:63:c2:cd:9b:42:a5:a3:c6:
c1:95:11:f1:11:d1:7d:3d:fa:88:9b:b8:52:43:0f:
6a:0f:f8:45:34:5d:94:b7:b3:54:37:db:4b:9d:8d:
17:0f:99:fd:97:8e:08:21:61:a0:bf:b2:85:cf:55:
c0:f0:21:b2:35:30:27:e3:c1:36:77:fb:bb:93:b7:
c7:1c:b5:eb:f8:b8:59:ba:9b:e2:74:28:07:f5:d5:
3c:f0:3c:92:22:89:c3:15:af:df:ba:2a:56:cb:91:
68:c1:fa:b0:46:af:fb:96:66:c5:55:91:06:88:ea:
eb:48:60:31:a0:7c:2d:8a:ca:ca:0e:0e:25:16:5a:
3a:14:28:b9:09:83:07:cb:de:af:ec:23:50:73:6c:
f4:19:f2:27:ea:b6:39:02:36:af:08:ce:f6:ee:ae:
1d:6f:1d:72:96:85:03:34:64:be:49:04:e8:1e:be:
c2:aa:90:0c:39:26:06:17:de:b5:af:03:07:93:08:
f5:3f:f7:80:99:27:b6:73:20:29:e2:a7:a3:13:96:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F1:3D:79:2F:A4:51:B8:D7:19:AA:DA:9C:9D:A5:2E:84:AF:A3:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8987212BE7911EFAF454977762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.171.0/24
Signature Algorithm: sha256WithRSAEncryption
89:52:0e:5c:f6:a0:1c:5b:0f:81:4b:aa:16:db:ec:74:32:d6:
70:44:c3:2a:b8:07:82:c7:e4:3a:97:4c:66:fc:fa:25:fd:fa:
ed:58:54:10:c4:42:74:b9:0b:14:ed:56:03:11:db:a6:8d:bd:
40:d8:1c:d5:61:20:22:ac:4f:8f:33:0d:1a:b5:6f:14:a8:53:
0e:df:9f:e9:91:1d:8a:c8:fd:fe:fb:db:82:7b:a6:58:fb:31:
60:be:f3:51:54:9a:ed:1e:20:55:32:de:05:71:5a:7f:be:6f:
e9:ba:55:d5:0b:d5:7f:ba:44:7d:60:6b:d1:19:88:90:3b:03:
f8:ba:3b:28:49:66:60:e1:dc:4f:22:02:b9:bf:c4:11:62:de:
8f:38:ee:02:26:ce:09:37:08:a0:63:ce:3d:52:1e:a0:d0:d6:
ce:36:93:56:e9:e7:e3:75:c7:d9:12:e2:fc:e1:0b:31:5d:d7:
4d:82:e5:28:44:71:e1:d0:f2:00:fe:ea:e5:ed:8d:6f:9b:25:
11:34:a3:2a:8e:ba:4d:69:14:d4:76:c1:ed:5e:5a:4c:18:d0:
29:95:1c:8a:f2:c6:ce:5c:de:b7:6f:f3:4f:62:29:37:2c:5e:
74:9b:00:a1:c3:d9:f1:c6:78:82:c9:85:1d:a4:cf:d5:b5:3e:
be:77:69:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:35 2025 by rpki-client