Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE065C18C3B111EF9BF66A81762E951A.roa
File: CE065C18C3B111EF9BF66A81762E951A.roa (raw, json)
Hash identifier: fKEUHxkMtf6zJeZ8NzRfh9NbpglgsOI8hqSDpnKVr/Y=
Subject key identifier: E5:C9:66:2D:9D:0E:72:F1:48:B9:37:BE:AB:FF:B9:64:52:DA:A8:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE065C18C3B111EF9BF66A81762E951A.roa
Signing time: Thu 26 Dec 2024 17:49:50 +0000
ROA not before: Thu 26 Dec 2024 17:49:47 +0000
ROA not after: Fri 12 Dec 2025 17:49:47 +0000
asID: 984
IP address blocks: 45.203.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61001 (0xee49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:49:47 2024 GMT
Not After : Dec 12 17:49:47 2025 GMT
Subject: CN=676d973e-460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:ea:93:8f:86:2b:74:02:ef:27:3e:d4:31:
be:0b:5a:a1:0d:fa:5a:b1:b3:6a:c0:b0:c0:9b:f3:
06:a2:3c:5d:45:2e:ef:65:60:0c:f1:a5:01:c5:1f:
83:49:85:5f:d2:16:26:6d:85:ce:af:f6:70:4a:87:
e1:75:dd:c2:93:65:65:d2:53:9c:08:6f:6d:a9:5c:
02:9a:65:5c:a7:ce:61:29:e2:d3:f0:65:4b:2e:e2:
ba:f1:79:8c:64:10:c1:13:d9:de:b8:5c:10:a7:64:
d0:34:20:d5:a4:a8:0b:93:f5:b9:0e:4f:1e:b5:d3:
2a:12:66:e1:11:0a:b3:f7:1f:8f:91:5a:c2:4e:03:
38:42:40:c8:74:ba:07:24:d2:46:c7:59:c4:7e:da:
f5:91:d1:48:24:92:0d:da:27:56:b9:90:fd:fd:f5:
d3:1c:6b:a4:a6:50:f3:74:10:0b:24:46:8e:0b:fc:
61:cd:9b:ac:75:53:fe:e1:3c:74:f8:e4:b2:20:74:
c3:e3:e5:10:db:73:65:d9:c2:e8:19:e1:b5:89:bf:
3b:b3:ca:f9:c5:16:ac:45:45:0f:ae:c8:50:27:47:
14:18:37:f4:d9:7f:10:fa:83:40:b6:77:f9:24:89:
76:d0:a1:52:85:d3:3d:93:33:3d:85:51:6b:2f:f6:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C9:66:2D:9D:0E:72:F1:48:B9:37:BE:AB:FF:B9:64:52:DA:A8:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE065C18C3B111EF9BF66A81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
24:83:14:e5:96:1d:7a:b3:74:a4:c2:60:e2:9b:d6:ef:f0:ac:
8c:6b:2b:48:ed:be:32:d7:c6:c0:35:8a:5a:93:08:e7:34:09:
55:00:34:6a:e9:7b:23:d5:26:1a:25:08:de:6b:39:27:6a:0a:
7a:1d:5b:22:1c:58:e6:6e:30:77:53:17:05:05:06:82:a6:78:
af:90:04:0b:9b:72:72:38:84:db:4c:a1:3c:f0:f3:49:09:df:
74:8b:c6:85:4d:bb:5f:45:c0:7a:31:70:c6:b2:c5:dc:9a:39:
d8:1c:ef:5c:84:23:29:3b:bd:a4:88:41:a8:93:27:d3:fd:ee:
9d:78:97:11:12:aa:4a:6e:1b:6f:68:e7:d4:18:64:85:e4:87:
44:e9:84:79:ce:95:87:ae:99:89:ee:8e:d5:5f:dc:59:45:aa:
cc:b0:e2:ad:3c:bf:b6:18:be:2c:6a:b6:c4:c3:5a:16:1e:de:
05:58:1e:a2:d4:33:61:27:e2:cc:a1:7d:2a:02:39:fb:76:0b:
d1:37:bc:f0:d9:b3:27:65:8c:ea:4e:45:0b:55:22:b5:1f:3f:
2c:1c:b3:39:ae:11:42:85:8d:80:09:7c:86:ff:18:c8:9c:29:
ae:4d:7d:9f:ef:c4:bf:cc:bc:cc:c9:66:a2:14:ad:e2:2a:f5:
56:e7:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:15 2025 by rpki-client