Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E102E3C6BE8A11EF88C8CA6A762E951A.roa
File: E102E3C6BE8A11EF88C8CA6A762E951A.roa (raw, json)
Hash identifier: 986M58G6xaJN/D/IoV3w+gKYp62nHb4kQKwyz83WymI=
Subject key identifier: 33:41:7A:6E:97:A4:B1:F5:AA:E9:31:B6:BD:7C:E9:43:2F:13:D1:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E6C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E102E3C6BE8A11EF88C8CA6A762E951A.roa
Signing time: Fri 20 Dec 2024 04:28:36 +0000
ROA not before: Fri 20 Dec 2024 04:28:32 +0000
ROA not after: Wed 10 Dec 2025 04:28:32 +0000
asID: 984
IP address blocks: 45.206.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59074 (0xe6c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 04:28:32 2024 GMT
Not After : Dec 10 04:28:32 2025 GMT
Subject: CN=6764f274-5c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:8c:fa:58:99:87:02:b6:3c:16:01:64:01:
4b:8c:fe:e9:00:54:07:ce:91:fb:12:fb:86:1d:dd:
42:f4:1e:81:e6:29:32:de:b9:54:db:83:d4:c2:ea:
dc:c9:23:c8:59:b5:b2:28:8d:c8:7c:05:63:cb:fa:
a6:11:f5:f4:55:82:0f:cb:67:ea:2d:f4:ae:8a:cc:
ff:2d:ca:8f:1e:fe:78:1d:8a:9e:a4:cc:d1:b6:e2:
a3:35:72:22:c9:7d:ab:5a:07:46:91:f6:f0:0d:fb:
b8:22:0c:25:0e:2b:b0:eb:51:42:6b:19:aa:e2:27:
35:dd:9e:28:c8:b7:fd:f9:db:b7:13:98:75:e3:78:
c5:51:29:b2:07:10:31:c8:cc:5e:d9:8a:38:52:80:
25:fb:16:8e:02:d1:b6:21:7b:e7:69:83:00:76:b0:
00:ae:03:63:b9:d9:4f:6b:0c:05:47:03:32:b2:0b:
85:94:e9:6f:b2:00:7a:d4:de:5d:94:0f:26:62:01:
ac:0a:7f:cb:4c:3b:13:f1:95:6b:47:b7:ad:41:93:
a2:ff:8d:3c:18:12:4c:0b:ae:b9:75:ce:ec:33:2f:
01:fd:26:11:39:e7:68:3e:af:8a:7f:2b:25:01:50:
c5:ea:03:a4:cf:75:ba:83:20:fe:cc:79:2c:65:58:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:41:7A:6E:97:A4:B1:F5:AA:E9:31:B6:BD:7C:E9:43:2F:13:D1:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E102E3C6BE8A11EF88C8CA6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.228.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fd:18:65:4b:0e:4b:d3:8d:03:f8:fe:29:e3:a0:ca:1e:28:
2c:7d:f8:bd:b8:44:e3:d6:de:de:7d:b5:17:75:d1:11:bf:96:
be:c7:17:2a:60:06:a1:78:93:e2:66:1e:2c:d9:5b:20:1b:03:
f2:95:1e:26:1c:b2:5d:f3:2a:35:52:69:8e:e6:77:e9:a1:d3:
97:c9:f0:00:3a:c7:dc:a6:4f:46:90:6c:82:e2:64:31:ec:47:
45:8e:dd:2d:db:f9:5e:32:61:25:10:29:e8:0a:da:61:b8:46:
90:5d:23:e4:11:bc:2c:c4:f3:e0:92:d4:0d:3c:df:11:7b:b1:
84:83:6d:79:2d:2e:0a:d7:a4:69:f7:9f:56:ed:22:2d:3d:ee:
e7:84:19:84:54:f7:f1:89:1d:71:a9:98:63:df:f6:97:f3:ea:
fd:b8:38:43:ed:6f:cd:56:54:3f:bb:17:75:88:02:ac:31:a1:
4b:a4:f9:05:9e:7b:26:d2:5e:a0:a8:ac:3c:f6:b5:2c:26:5c:
cd:78:fc:de:9d:0a:a2:21:31:62:5e:7e:92:14:9a:50:5d:3c:
6f:e4:39:ac:d6:5a:9e:17:32:f6:73:42:04:c7:e2:f1:19:5f:
6f:9d:e1:e7:51:e4:14:8e:9d:ca:f1:4f:7b:06:27:9a:55:e3:
87:7e:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:35 2025 by rpki-client