Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D32A7FD2BDB011EFB157F887762E951A.roa
File: D32A7FD2BDB011EFB157F887762E951A.roa (raw, json)
Hash identifier: qvA6gwoh8mGrc7xNA2Q2tKpZYa0qVGX+cvvr4eN98fE=
Subject key identifier: 6A:E6:74:A7:F2:97:D1:F2:65:B6:E1:6C:55:CC:85:32:4E:0C:E4:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D32A7FD2BDB011EFB157F887762E951A.roa
Signing time: Thu 19 Dec 2024 02:27:43 +0000
ROA not before: Thu 19 Dec 2024 02:27:39 +0000
ROA not after: Wed 10 Dec 2025 02:27:39 +0000
asID: 984
IP address blocks: 45.198.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58541 (0xe4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:27:39 2024 GMT
Not After : Dec 10 02:27:39 2025 GMT
Subject: CN=6763849f-dc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:53:b7:86:95:06:90:da:1f:1d:18:04:6b:
1f:c4:09:9a:c9:e7:29:e6:4d:d1:a2:9f:ce:04:23:
ad:b5:88:d6:0c:5b:13:67:66:90:25:ac:c2:c3:9c:
f2:fb:58:bd:b1:7f:06:7a:4a:54:de:87:e6:97:28:
f7:48:b0:67:b0:b1:63:c0:88:6b:30:82:c6:c0:e9:
93:fb:98:52:7e:34:af:79:0b:45:60:f8:71:6f:98:
6e:8b:85:b2:1b:74:9d:2b:9b:5f:74:33:08:0f:43:
fe:2a:e6:f4:64:87:26:8e:27:d7:83:2f:35:2a:ab:
d6:fb:04:82:cd:e5:f6:a9:7e:70:52:06:9f:6e:db:
c9:2a:ea:4b:c5:7c:a7:53:22:d4:cd:6b:95:d5:1a:
bb:bb:32:c7:3d:d8:f8:e5:62:3c:4b:3d:2e:a7:8a:
0f:14:f3:c3:9f:36:3e:ed:b4:bf:c3:f2:9e:a9:63:
66:19:67:0b:1e:12:8a:eb:de:c1:ed:d2:ee:95:fa:
4d:a9:9f:59:9d:44:e0:2c:b0:ec:b5:d0:f4:7a:75:
c1:ea:b7:45:a9:0d:0e:e3:ea:dd:c6:d6:c3:74:ee:
a0:4a:30:d8:db:6d:ea:16:91:b8:e6:46:2d:cd:bd:
ad:12:9e:c6:fa:01:b2:05:f7:45:7e:a5:7e:50:ef:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E6:74:A7:F2:97:D1:F2:65:B6:E1:6C:55:CC:85:32:4E:0C:E4:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D32A7FD2BDB011EFB157F887762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:98:4c:66:96:df:7c:36:15:6c:4d:41:fd:4b:5a:6a:b7:b4:
63:33:f1:81:ad:d4:be:1c:3a:b5:40:19:12:f8:ba:cb:f6:d1:
cb:ce:ef:22:79:90:cf:b6:a6:66:8d:32:4b:ca:2d:3a:4c:26:
c5:9b:ff:ae:4b:ad:39:53:9b:99:ec:ab:2c:8a:dc:57:19:e8:
c0:87:1a:2c:18:19:d0:bc:45:06:bf:2d:60:82:c7:b6:4e:cd:
5c:5c:37:71:d7:a6:b9:79:b2:81:a4:1f:56:0a:01:66:c0:d1:
eb:74:28:0a:e5:34:20:00:3c:aa:11:76:9e:40:15:fc:bd:8a:
2a:18:34:89:b8:52:ad:25:e7:67:f3:06:99:02:12:dc:d5:b1:
93:4c:0d:a9:b4:ab:ac:40:90:da:1b:82:15:f2:95:b4:5e:a3:
5a:5f:63:b5:68:1e:62:de:73:a6:4e:bb:ea:a8:c7:78:65:fb:
1e:67:66:35:c9:7e:40:74:0b:bd:a1:5e:a1:91:cc:a8:7c:f9:
5d:9c:48:e6:57:15:a2:23:8f:d4:fa:13:46:9d:e1:dd:f6:5e:
d5:02:45:e5:0b:75:94:c0:a7:00:c8:b5:60:6a:76:fd:03:16:
2c:88:98:10:23:ad:5e:43:67:10:44:e3:84:a1:7f:a5:48:fe:
1f:66:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:38 2025 by rpki-client