Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFDE83EEBDBC11EFAA2A405C762E951A.roa
File: CFDE83EEBDBC11EFAA2A405C762E951A.roa (raw, json)
Hash identifier: MiFsD/iVpIjcc9DtwWdbXxlvPNnjCiuVsSPev9YaIxE=
Subject key identifier: A5:80:EA:2F:4B:1E:29:CB:D0:7F:6C:CB:90:77:35:3D:54:06:D1:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E547
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFDE83EEBDBC11EFAA2A405C762E951A.roa
Signing time: Thu 19 Dec 2024 03:53:31 +0000
ROA not before: Thu 19 Dec 2024 03:53:28 +0000
ROA not after: Wed 10 Dec 2025 03:53:28 +0000
asID: 984
IP address blocks: 45.206.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58695 (0xe547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:53:28 2024 GMT
Not After : Dec 10 03:53:28 2025 GMT
Subject: CN=676398bb-fd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:9b:63:1a:c5:f2:b8:3c:ff:c5:87:92:8f:
84:41:29:4e:d4:9d:f4:e0:77:e8:89:b1:5c:9e:0f:
6d:e6:1e:82:7d:0c:84:0d:e5:c2:98:4c:81:b9:20:
ca:85:3a:21:3f:41:cf:fa:95:f2:b1:b9:7b:00:ad:
48:e7:8e:95:41:94:70:54:d8:9a:fa:a7:ba:01:01:
02:11:33:ba:b7:07:fe:d3:9a:2d:e0:a4:b0:69:ce:
a9:ec:20:d9:8f:d0:68:bf:a1:d5:69:b7:df:36:ee:
a2:31:5b:d4:b3:de:90:d9:ac:71:de:d5:d1:54:b6:
0a:28:12:05:cb:da:2a:21:eb:89:91:5a:e7:a0:a0:
b0:66:77:d3:13:bf:56:44:e8:f9:d3:d6:93:20:a8:
81:0c:4e:40:84:5d:d5:24:db:b6:02:84:de:90:cc:
ec:fb:76:66:94:31:a0:2f:cf:30:92:d6:bd:13:55:
06:8d:fd:ed:61:5a:44:ca:34:9c:4f:4e:5d:3d:c5:
03:04:b4:72:ff:02:52:89:6b:43:6a:7b:b8:45:c7:
ac:13:f8:6c:eb:b7:38:58:a5:ce:e5:f8:82:db:ed:
ad:df:e5:78:4f:60:1f:02:81:a3:28:4a:b9:df:c9:
47:d3:90:72:b6:72:2a:37:74:57:4c:68:90:3a:9e:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:EA:2F:4B:1E:29:CB:D0:7F:6C:CB:90:77:35:3D:54:06:D1:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFDE83EEBDBC11EFAA2A405C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:89:b6:20:a8:34:f9:14:b8:45:7a:db:67:48:71:16:a9:e9:
68:e3:20:a0:3e:50:f8:f3:76:c1:74:89:1c:9e:79:d6:d6:ab:
27:92:ce:b3:98:17:6d:60:0a:bc:87:ba:95:ad:27:6e:f6:da:
12:dc:0c:1a:a3:e2:39:53:6c:6a:6a:8f:26:a3:07:ac:5f:ea:
4d:ad:d9:a1:76:72:93:70:be:f2:41:58:b7:42:4b:74:b2:08:
d3:dc:22:39:d4:34:a1:0e:1f:8a:48:5b:9e:67:b7:e5:9c:0e:
9c:49:0b:17:85:f0:43:b4:f2:ab:84:bb:99:45:55:9b:20:b3:
d6:d6:37:b4:8e:a1:de:41:97:88:e8:89:86:e0:4b:09:4a:dd:
e3:be:f6:f5:8a:5e:ca:59:e4:3c:0d:9e:5f:0a:cf:c6:b5:f9:
4a:ad:e8:95:a4:6c:95:8e:f3:b7:a7:2f:1a:99:5d:91:a5:ab:
de:c9:87:15:02:5e:96:08:27:0d:88:f5:4d:9a:88:a3:c9:98:
2e:aa:ec:9e:5e:35:5b:31:5b:55:7a:a3:8a:0f:d5:1c:3e:3a:
23:3a:fc:d0:c5:98:99:76:fb:4f:32:24:42:6e:fe:dc:f5:31:
37:aa:79:da:ec:a2:7f:b1:ec:c6:99:9a:ee:89:c7:f1:2b:0b:
1c:97:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:09 2025 by rpki-client