Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA3479C2CEEA11EFB745D35D762E951A.roa
File: DA3479C2CEEA11EFB745D35D762E951A.roa (raw, json)
Hash identifier: TsE0pvkiOIJd+QFnLWGUVlLAy/+oPmT/z2NY7wVcXiY=
Subject key identifier: 9C:67:EB:B7:B3:5F:C5:99:CB:9D:4F:72:09:50:22:59:00:74:E0:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01045C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA3479C2CEEA11EFB745D35D762E951A.roa
Signing time: Fri 10 Jan 2025 00:35:55 +0000
ROA not before: Fri 10 Jan 2025 00:00:51 +0000
ROA not after: Thu 13 Feb 2025 00:00:51 +0000
asID: 395793
IP address blocks: 45.194.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66652 (0x1045c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 00:00:51 2025 GMT
Not After : Feb 13 00:00:51 2025 GMT
Subject: CN=67806b6b-eeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:31:0b:1b:a2:3a:b4:39:aa:50:a6:33:60:
30:5b:d7:c3:48:30:f7:12:1d:d2:14:bb:4e:54:ae:
dd:cf:e7:23:b6:4b:15:0e:30:88:3f:c4:8e:5e:1e:
2c:65:5c:db:5f:31:51:76:06:72:ac:23:7b:9c:a3:
44:94:d7:5a:f7:ac:4b:e6:d1:81:e2:31:7b:6b:2c:
b3:e5:85:43:03:d3:59:82:ab:0f:ca:62:a4:31:70:
51:65:6c:b1:f1:24:a5:6b:a3:dc:e4:4b:22:f1:2b:
ae:3d:bc:c5:b7:55:19:b9:e9:5e:f2:ce:03:32:75:
e9:a4:38:65:d0:2d:3a:cd:7d:20:96:99:7b:69:23:
b8:76:ec:62:c2:79:8d:70:1f:6b:13:9b:2d:a1:6c:
1f:6f:c9:f7:61:79:88:9a:01:14:a9:cc:df:25:d2:
cc:85:32:57:0e:43:f4:4c:ff:ba:85:4d:dd:b7:53:
64:df:7d:ca:31:30:23:fe:30:5c:fe:f7:88:7c:8a:
8d:02:07:0f:fc:0e:d4:06:d5:dc:6b:7b:0d:86:72:
ff:d1:df:ec:1f:ba:52:ae:8f:c5:90:29:5f:a8:f3:
13:3c:e2:03:7b:f4:02:47:9a:52:ba:1f:95:f9:86:
15:c2:80:61:ea:ae:cd:c3:8a:a0:87:89:8c:16:a5:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:67:EB:B7:B3:5F:C5:99:CB:9D:4F:72:09:50:22:59:00:74:E0:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA3479C2CEEA11EFB745D35D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.4.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:bb:be:de:5c:a1:21:e9:89:ac:06:d8:f7:d9:12:ec:56:30:
c5:22:5c:35:c2:5f:97:16:cf:ef:40:a5:51:1b:b9:11:36:0f:
3e:d5:ce:4f:5c:bc:96:a1:7d:21:64:4c:2a:51:c9:58:09:91:
08:e8:63:47:32:dd:31:39:67:41:1c:79:52:aa:3c:24:d7:fe:
6e:36:34:c9:74:5e:71:71:39:d4:3c:98:c7:4d:2b:0e:a1:70:
1e:99:07:32:61:4f:74:c2:f7:5e:c8:09:03:bc:99:e1:57:29:
63:b4:5a:f2:e4:90:48:44:13:51:e6:de:ec:2c:3e:c7:e3:6f:
98:d1:64:74:39:0b:9a:21:6a:2f:65:06:6f:4a:16:2e:9a:35:
1f:75:c4:26:a4:e4:b9:15:92:dd:a3:19:97:df:45:5e:d9:d2:
d8:a7:5e:de:d0:c7:a2:86:a6:9c:10:13:f8:5d:90:e1:48:4b:
f0:d4:4b:69:6e:82:b6:fb:e1:da:70:a1:a8:99:0b:6b:37:3e:
12:80:78:54:cb:92:d9:83:aa:5e:cc:b1:83:c8:58:4e:47:bb:
b8:5a:93:a7:f2:24:e5:0d:88:ba:75:7a:d1:4c:10:65:ad:4f:
1f:d9:bf:a9:cf:fd:49:42:0d:64:d6:b0:0f:14:60:5d:f7:81:
13:0f:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:51 2025 by rpki-client