Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D05A251CBDB711EFA49723B8762E951A.roa
File: D05A251CBDB711EFA49723B8762E951A.roa (raw, json)
Hash identifier: FJYd13YcAfm9IepBKwxOpWyvfqfBCmC61zcQjVhjSXQ=
Subject key identifier: 72:B4:D6:D8:85:3E:92:43:DE:10:BD:A6:18:37:E1:84:6B:B1:DA:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E507
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D05A251CBDB711EFA49723B8762E951A.roa
Signing time: Thu 19 Dec 2024 03:17:44 +0000
ROA not before: Thu 19 Dec 2024 03:17:41 +0000
ROA not after: Wed 10 Dec 2025 03:17:41 +0000
asID: 984
IP address blocks: 45.204.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58631 (0xe507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:17:41 2024 GMT
Not After : Dec 10 03:17:41 2025 GMT
Subject: CN=67639058-61d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:8b:8e:6b:c6:1f:ac:3a:fa:7d:76:b4:6f:
f1:b0:bd:e8:d9:40:48:8c:3a:e4:03:df:55:be:ee:
37:ed:1c:bf:84:af:e7:91:9b:36:96:9c:5a:00:6d:
b5:45:dc:d1:5b:d9:a3:8f:cf:88:9c:ff:08:b3:65:
fa:e9:b6:26:b0:6e:2a:99:39:ea:6e:69:a2:0a:12:
a2:51:b0:b5:ef:fc:96:14:cc:26:c1:9d:74:28:1c:
0c:a8:9c:81:41:e9:b3:e3:20:27:10:27:de:2e:5d:
b6:06:c0:85:ab:d7:fc:a3:a7:e7:e7:55:b1:5a:23:
5a:8a:49:91:d2:af:76:2c:65:d3:15:69:7c:d1:d3:
19:84:34:14:bc:70:56:81:6a:1e:09:16:0d:fb:a9:
8d:fd:f9:a9:79:7f:b5:da:f8:1f:76:fe:6b:fe:63:
6b:b1:90:8c:06:d6:0b:85:2a:26:1c:5f:03:2b:7d:
22:08:57:76:df:a1:2c:93:62:20:e8:8a:2b:87:0b:
68:c5:b8:db:7d:3b:4b:09:79:a9:00:8c:87:b9:58:
61:69:65:84:71:40:e5:fe:92:08:a6:11:a8:35:53:
53:4e:98:c9:80:d1:77:f0:97:4b:82:0b:19:62:c0:
18:42:d4:e0:87:02:87:44:86:f2:d1:1e:ca:3b:8c:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:D6:D8:85:3E:92:43:DE:10:BD:A6:18:37:E1:84:6B:B1:DA:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D05A251CBDB711EFA49723B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.178.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c8:82:e7:f9:34:fd:2e:18:99:2a:29:a2:81:29:ea:34:9b:
12:62:7e:4c:38:0e:68:9a:42:50:5c:4e:ce:47:19:15:a0:b8:
00:86:93:52:14:c1:1f:c4:b9:07:e2:08:af:85:c2:82:09:82:
3d:53:41:41:02:b0:e4:f5:a4:c7:8e:15:93:ec:b9:6d:47:f0:
1b:ff:0a:83:ae:5e:b3:77:e8:3d:b8:9b:f0:81:a8:b5:25:c4:
39:0b:07:b2:bf:7d:71:71:74:b8:b7:d9:00:44:75:7a:83:cc:
da:56:65:c1:de:3b:77:10:b7:a0:fc:e4:99:21:93:33:00:55:
5f:fe:36:0c:5d:2f:fc:40:5d:69:fd:3c:03:5c:90:de:61:f6:
05:dc:54:85:2b:42:d8:2c:1f:7d:7f:50:40:fb:0a:58:03:b3:
15:2a:04:f8:59:a2:17:49:92:02:be:d7:4c:b0:49:4f:7c:18:
07:41:bd:b0:7c:ba:31:f1:b0:32:ba:95:0e:cd:e7:87:56:ce:
8b:5e:bc:fb:ce:43:65:9e:85:6f:7c:13:24:a2:6c:f0:b8:6c:
b9:61:e3:d5:cf:c6:c2:8d:bb:00:bc:34:f9:65:d0:da:df:1d:
cf:11:09:9b:ed:87:8b:d6:cc:cc:a5:5b:aa:4b:b9:ee:4a:ec:
88:7b:88:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:27 2025 by rpki-client