Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D48C7CD8CDA311EF8C20B848762E951A.roa
File: D48C7CD8CDA311EF8C20B848762E951A.roa (raw, json)
Hash identifier: HAxY4itdYYwp2mrCknX3VjD1DkJSDTDf6wVIX5HAH8s=
Subject key identifier: 78:80:9A:B4:5E:22:E5:24:7F:F5:3C:C9:8A:49:19:B5:A1:E1:0E:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010107
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D48C7CD8CDA311EF8C20B848762E951A.roa
Signing time: Wed 08 Jan 2025 09:35:00 +0000
ROA not before: Wed 08 Jan 2025 09:34:56 +0000
ROA not after: Thu 23 Dec 2027 09:34:56 +0000
asID: 17561
IP address blocks: 45.194.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65799 (0x10107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:34:56 2025 GMT
Not After : Dec 23 09:34:56 2027 GMT
Subject: CN=677e46c4-fec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:5f:2c:20:1d:5d:f8:6e:a9:39:51:57:d1:
f5:a1:5b:01:bd:81:38:a4:39:90:42:14:03:b7:26:
9d:58:43:57:a8:06:9a:03:ea:e0:a6:2f:39:6b:87:
fa:a9:88:63:3c:9e:66:fb:a8:b2:77:d7:ba:28:e4:
fd:59:2a:c7:57:32:8d:e3:02:7f:b6:25:71:9e:d2:
fd:c9:33:2e:09:79:56:49:61:e0:b9:e8:81:a2:51:
ae:2a:aa:25:9a:e4:c8:71:37:29:fa:8f:82:93:e7:
2b:a4:cf:06:27:73:48:4d:ca:bb:80:09:f4:6a:83:
6c:98:5a:54:19:12:c0:4d:e6:d0:41:9b:74:81:62:
cc:b0:91:34:1f:13:6e:1e:07:7c:7a:fb:55:27:cf:
be:51:05:a7:e5:bc:2f:ae:af:43:42:3b:88:05:1b:
06:10:5d:d0:89:41:0c:ed:9f:e6:bd:ae:c2:4d:80:
40:1f:22:f2:8d:8f:d8:73:68:11:04:34:03:f5:72:
0a:25:6e:22:e2:a1:9f:81:5d:44:79:15:db:f1:c6:
40:09:4b:ce:87:dd:9f:1c:96:f9:9e:8f:9c:6e:d4:
3d:23:63:64:5c:5c:3d:0e:cd:0d:a5:c7:4c:fd:af:
41:db:74:81:d4:f6:b7:6c:f1:aa:2b:c4:b7:07:88:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:9A:B4:5E:22:E5:24:7F:F5:3C:C9:8A:49:19:B5:A1:E1:0E:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D48C7CD8CDA311EF8C20B848762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:14:f6:93:3c:17:14:9a:2f:f7:d7:f7:ba:45:81:96:9a:a9:
68:42:20:7d:e9:1b:18:11:9e:2f:bd:e7:53:8f:ce:cf:5a:d9:
b8:c5:5f:86:93:66:30:25:b3:c2:ff:97:8d:ea:f7:49:66:52:
f4:f9:73:de:11:f8:10:1b:7d:fa:77:2f:6e:8d:f3:32:3c:58:
a3:bf:ed:20:aa:43:1d:65:75:55:08:0a:65:93:a9:05:50:b5:
fd:78:48:63:2d:56:ff:6c:7f:3a:d5:30:bd:be:82:6d:2b:27:
4b:5c:da:28:3a:dc:d1:6a:56:0f:5e:19:24:a1:44:f4:c7:f5:
c6:89:6d:a0:cb:da:85:1a:cb:eb:d9:10:8b:5b:55:af:6d:97:
4f:9b:2f:55:7f:99:7f:5c:d4:53:7c:e0:11:02:5f:17:ff:46:
52:af:0b:fe:2d:74:48:e0:46:70:2c:a4:54:a5:5f:20:e4:ca:
1f:40:37:c9:01:95:76:06:70:85:2b:70:76:5c:34:27:6c:3a:
16:83:70:3b:10:12:28:87:3f:78:ef:c5:f9:10:90:57:e7:f1:
eb:c7:29:b0:70:46:2f:55:50:6e:25:9f:22:88:80:a1:12:e3:
bb:18:8e:55:8f:b7:28:a6:18:7a:72:4f:16:fa:aa:34:e5:1b:
49:e6:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:25 2025 by rpki-client