Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F472FECEF111EF9AEBDD8E762E951A.roa
File: D3F472FECEF111EF9AEBDD8E762E951A.roa (raw, json)
Hash identifier: nT+XwnmQXkigwttpyFpOxjucd9IOmP7GaW3LSMRmBB4=
Subject key identifier: EB:2B:23:09:51:87:EC:A4:AE:2C:8E:53:17:87:FC:3F:23:D2:A9:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010479
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F472FECEF111EF9AEBDD8E762E951A.roa
Signing time: Fri 10 Jan 2025 01:25:51 +0000
ROA not before: Fri 10 Jan 2025 01:25:47 +0000
ROA not after: Thu 13 Feb 2025 01:25:47 +0000
asID: 54801
IP address blocks: 45.197.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66681 (0x10479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 01:25:47 2025 GMT
Not After : Feb 13 01:25:47 2025 GMT
Subject: CN=6780771f-111e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:13:2d:4d:fa:b5:09:ad:bc:ad:e0:a5:90:
c8:bd:1d:24:e3:e7:8d:2b:ed:00:82:5d:10:01:de:
c1:92:b3:cb:f9:6f:40:6e:bb:c1:10:ef:1b:87:bf:
4b:14:4a:46:18:93:3f:7b:cb:09:d8:51:9d:78:f4:
8b:18:2d:d2:4c:d4:22:98:62:8b:ac:06:67:02:57:
63:fb:db:c4:3d:7c:1d:81:d9:53:15:98:d9:41:fd:
3d:f7:5b:27:76:7a:f2:5e:b4:e7:bb:e3:e7:4b:a4:
ae:ce:a6:48:19:ca:12:e0:0e:f8:b9:cb:ac:50:8e:
60:03:b8:78:c5:18:be:64:2c:ae:47:cc:aa:33:53:
18:45:97:85:e8:54:26:f7:8e:a6:69:ca:0f:81:0a:
2f:89:e1:ec:2e:69:8f:8c:aa:18:62:51:5d:25:42:
6e:62:2e:b7:b3:e6:34:65:93:18:71:7f:29:a8:72:
75:b1:87:3a:60:47:c8:22:ea:1d:c0:67:3a:a0:d2:
6a:38:57:90:04:6c:dc:8e:7f:e4:b7:29:0b:9a:29:
7f:72:93:88:ae:4e:9f:86:c7:61:18:72:2f:e2:a0:
7f:05:34:ad:39:aa:da:2b:ec:e0:aa:33:76:f3:71:
c2:b5:29:48:24:62:f5:ed:c2:20:50:2b:a8:87:2e:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2B:23:09:51:87:EC:A4:AE:2C:8E:53:17:87:FC:3F:23:D2:A9:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F472FECEF111EF9AEBDD8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:89:1d:4c:53:0f:fe:8e:7c:24:f1:ae:56:f0:ca:3c:3b:59:
4e:21:84:ce:89:0a:75:80:b4:22:fd:15:c4:6a:99:6d:ad:76:
ee:c3:5d:ab:fc:46:73:e3:23:9a:aa:2c:21:37:79:b1:cb:8a:
dc:27:d8:0e:e4:d8:ce:2f:58:37:fb:80:58:6c:8f:71:06:9d:
fb:da:8e:c5:18:4f:9c:ff:60:77:ce:97:d2:20:8d:02:f6:81:
10:90:7a:3c:0f:ba:2a:41:89:27:34:a9:2e:8d:c4:1d:93:62:
92:c1:11:45:36:5c:a1:26:b4:80:30:19:6c:24:cf:3c:e0:6a:
6f:b0:6f:07:3b:f5:2c:18:3b:44:95:14:44:53:71:3e:5a:78:
21:7e:cc:f8:13:d5:ba:ab:e6:79:a1:e4:3b:bd:49:14:ed:bf:
76:0e:de:73:89:40:ad:a9:93:f2:99:3f:ba:2c:6e:07:21:1c:
f7:fa:db:80:70:1c:9c:6d:52:52:b2:f5:0b:e5:ce:68:45:be:
64:48:48:96:b0:e2:20:7e:af:c9:cc:b0:23:f8:a0:30:dd:72:
68:0b:38:2b:b2:03:f4:5e:11:85:09:60:be:3c:e5:94:24:a6:
b8:cf:76:79:25:3c:10:5d:7b:3c:f3:c8:d1:df:16:3f:66:17:
b6:9b:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:29 2025 by rpki-client