Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1337DDACDCF11EFABB54D5E762E951A.roa
File: D1337DDACDCF11EFABB54D5E762E951A.roa (raw, json)
Hash identifier: IG7N+vHK6n5U0YVzz1n7nxYUcKtNDds85pYCl+XF7uQ=
Subject key identifier: E2:E3:1F:50:18:07:CD:66:BB:A4:70:7C:D7:0F:96:43:DD:F3:28:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010200
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1337DDACDCF11EFABB54D5E762E951A.roa
Signing time: Wed 08 Jan 2025 14:49:52 +0000
ROA not before: Wed 08 Jan 2025 14:49:49 +0000
ROA not after: Mon 03 Jan 2028 14:49:49 +0000
asID: 17561
IP address blocks: 45.197.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66048 (0x10200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:49:49 2025 GMT
Not After : Jan 3 14:49:49 2028 GMT
Subject: CN=677e9090-791d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:6c:aa:06:1c:78:63:94:b1:db:8a:3e:49:
01:fc:43:98:a9:46:85:a1:70:0e:fb:02:eb:f8:68:
aa:9a:3f:45:64:93:1e:0c:67:e1:fb:bd:4c:6c:6f:
40:b1:c0:31:55:2a:7a:85:3e:70:5c:9c:56:a4:40:
a6:23:6c:68:d7:92:5a:c7:49:80:b1:73:df:2d:95:
a3:08:e0:b6:9b:6d:6f:5e:ac:77:e6:fb:03:75:7c:
7d:da:9f:ad:7a:8f:a5:01:47:5f:f6:14:e3:03:cd:
08:d7:25:e6:80:1e:93:35:42:6d:33:54:39:d6:c4:
d8:b3:4c:7f:01:a7:38:f3:f4:ff:1c:ac:95:6b:37:
d5:91:eb:23:7f:08:8e:a5:e0:90:ad:32:6c:25:7d:
59:62:11:47:d8:4e:68:14:00:ba:3a:63:11:2b:e7:
81:44:5d:da:97:a4:12:e7:d2:69:4d:f0:1b:19:85:
5e:70:7f:a2:cd:ef:f7:36:8d:5a:b4:b4:4c:c0:f2:
22:4c:3c:20:ce:e7:d6:99:ae:af:0f:64:a5:5c:7d:
41:3e:31:dd:c9:14:7d:91:a1:51:ce:30:fd:99:45:
85:74:98:4b:9e:3d:03:08:a7:b3:e4:8a:38:fa:07:
89:cd:5d:fb:60:7a:9f:98:99:ad:1a:d7:9e:81:32:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E3:1F:50:18:07:CD:66:BB:A4:70:7C:D7:0F:96:43:DD:F3:28:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1337DDACDCF11EFABB54D5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.0.0/24
Signature Algorithm: sha256WithRSAEncryption
73:13:a9:3c:f8:1e:44:7e:c1:33:87:c3:a4:76:4a:07:87:56:
9c:a9:97:cf:f8:67:9d:97:55:2d:4a:1d:a4:82:58:07:cf:6d:
18:8d:c5:fb:45:c2:49:ef:e2:8c:8a:64:fd:b8:d9:e8:a4:52:
0d:94:42:d5:b2:29:76:5f:b7:79:fd:1c:dc:31:ae:a8:2b:f4:
d8:76:21:1d:7e:24:5f:0f:bc:b3:28:ce:5e:4b:fc:fc:14:b9:
1e:3a:fb:2c:97:16:1f:ad:d5:cb:24:ad:b3:47:61:b2:6b:f6:
c5:39:a6:9f:e4:eb:32:3a:68:2a:2d:3d:0a:ed:a1:29:8b:52:
3a:a1:33:42:ed:e8:cf:eb:3e:c3:68:0a:85:e0:53:1b:e6:fd:
0f:df:7f:57:c9:c2:2c:62:ff:93:7a:0b:f7:7d:f4:76:2b:00:
48:b0:23:96:92:89:0a:06:58:34:8e:0a:5b:42:60:76:6f:74:
b5:66:56:8f:c5:fc:9c:c4:15:59:56:78:ad:b1:55:a8:0d:d9:
26:cb:70:3e:c3:a1:7c:40:2c:1c:0c:78:f7:1e:75:54:db:4c:
26:05:f6:25:f7:5c:24:18:02:cb:29:ae:cd:9e:dc:58:40:87:
f1:81:4a:6f:03:76:ab:ab:a8:5a:d1:a1:d3:71:72:b0:0a:d5:
ed:39:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:42 2025 by rpki-client