Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2306F38BDBF11EF9440506F762E951A.roa
File: D2306F38BDBF11EF9440506F762E951A.roa (raw, json)
Hash identifier: WfPZE9CT8dVVfVBu0l4AD3sbUamF7+eVDOHVUyThtIY=
Subject key identifier: D9:CB:05:47:84:53:63:D4:31:9E:4C:FD:28:FD:CF:38:82:57:3E:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E56D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2306F38BDBF11EF9440506F762E951A.roa
Signing time: Thu 19 Dec 2024 04:15:03 +0000
ROA not before: Thu 19 Dec 2024 04:15:00 +0000
ROA not after: Wed 10 Dec 2025 04:15:00 +0000
asID: 984
IP address blocks: 45.206.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58733 (0xe56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 04:15:00 2024 GMT
Not After : Dec 10 04:15:00 2025 GMT
Subject: CN=67639dc7-1188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:32:a0:97:41:87:5c:66:f5:12:75:34:d8:
9b:1b:9d:22:b1:07:19:92:0d:38:2a:e7:62:7d:d8:
c0:26:c3:89:3f:ff:47:db:5d:3f:66:8a:72:3c:72:
23:15:6c:67:28:03:87:1f:f1:5a:ff:28:62:68:84:
5c:6a:94:30:d6:c0:0d:7a:18:0c:c7:92:f9:01:d5:
1e:fc:0e:47:8c:42:39:c0:5f:cb:f9:48:d4:10:71:
e6:94:55:7e:80:64:00:a1:97:07:a0:05:55:2d:ee:
02:04:43:77:bc:52:cf:99:9a:84:30:34:41:34:be:
c1:e7:46:49:94:40:6c:15:70:bd:18:18:1b:60:7e:
a5:43:85:d9:85:78:02:8b:9b:64:b2:ce:5b:fe:9e:
3f:67:07:64:9a:ff:98:d1:4e:7b:73:73:1b:9e:4c:
e1:9c:39:7c:e6:90:43:a5:d1:4c:4b:ff:54:84:eb:
e5:bc:e9:a8:d0:b8:72:f6:6c:67:a5:fd:0d:e2:32:
1d:f5:d9:57:b3:c1:8b:47:b0:a2:36:98:52:60:2f:
30:29:c6:4c:c1:5d:69:19:0b:fc:15:a5:39:ea:88:
9b:6a:06:d3:34:4a:5e:d1:94:10:a8:63:d8:31:15:
b8:fb:65:2b:e0:60:15:00:60:3c:1b:b4:55:30:68:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CB:05:47:84:53:63:D4:31:9E:4C:FD:28:FD:CF:38:82:57:3E:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2306F38BDBF11EF9440506F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.89.0/24
Signature Algorithm: sha256WithRSAEncryption
28:49:e5:3a:ab:93:16:75:1c:48:67:85:8b:3a:bd:80:a2:23:
a6:1e:02:60:87:d6:fc:01:90:43:27:08:a1:c4:3e:49:d1:2c:
8e:03:cd:66:15:6c:ab:90:62:21:35:be:77:86:23:d3:66:75:
cd:96:9e:6d:a6:f9:df:11:d8:dd:6a:04:c9:73:94:3d:0e:45:
62:30:02:f4:af:9f:32:09:db:99:c0:37:7d:7a:ec:eb:9c:f7:
4f:50:5b:aa:af:fd:16:eb:ee:fb:af:07:b3:75:40:a3:d7:17:
c6:31:a6:73:74:93:09:ae:cd:25:cd:ce:c8:ef:dd:54:dc:8b:
34:20:23:84:1b:14:58:24:82:5e:cf:3c:90:66:0c:e0:e8:9d:
b0:ed:80:b5:c6:0d:62:72:1d:63:bd:55:a8:83:33:3b:59:ef:
cd:9b:28:71:07:04:12:da:dd:40:47:dc:5d:60:01:75:f7:59:
33:35:22:01:23:65:8a:0f:12:44:30:6b:01:7a:e9:c5:34:5c:
ce:2b:ac:88:5a:6d:e9:77:f1:09:02:6c:50:19:c6:14:43:62:
54:d4:b9:fc:6f:98:eb:c5:3d:01:8b:27:fc:85:07:b4:8b:5d:
f1:a3:8f:52:53:de:57:bb:bd:d7:3c:b9:e0:4f:08:73:64:cf:
49:46:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:00 2025 by rpki-client