Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1E2F4ECBE8611EF997BEA52762E951A.roa
File: E1E2F4ECBE8611EF997BEA52762E951A.roa (raw, json)
Hash identifier: D6GxWtyAFq+jKcBqaUDOOodFWIPXj1jj/0Q+FupIdjA=
Subject key identifier: 56:92:50:97:DD:28:A1:1F:02:55:B4:31:95:29:84:B3:5E:90:5A:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E692
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1E2F4ECBE8611EF997BEA52762E951A.roa
Signing time: Fri 20 Dec 2024 04:00:00 +0000
ROA not before: Fri 20 Dec 2024 03:59:56 +0000
ROA not after: Wed 10 Dec 2025 03:59:56 +0000
asID: 984
IP address blocks: 45.206.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59026 (0xe692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 03:59:56 2024 GMT
Not After : Dec 10 03:59:56 2025 GMT
Subject: CN=6764ebc0-c4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:59:61:17:1d:23:ea:91:5e:75:e1:16:b9:
8f:b3:4e:ab:e2:6a:29:d0:63:62:22:1d:1e:db:39:
c4:ff:28:1d:3e:8b:79:c0:f8:eb:6b:95:4a:c4:39:
00:6c:50:d5:8a:dd:e6:44:eb:82:3b:fb:5c:0c:0a:
39:bb:dc:af:f5:ad:d1:90:bc:3d:04:04:e4:9f:cd:
2f:50:ca:0b:57:c3:77:38:de:a9:bc:04:00:25:93:
7b:1f:a3:c7:96:b4:45:c8:73:f1:21:7f:7d:08:38:
23:d1:3a:10:23:0d:7b:85:6f:01:a4:69:0e:b3:05:
05:69:f7:a8:42:b8:04:48:e6:01:22:a4:79:07:dd:
85:a7:ec:62:7b:ec:3a:a0:ca:f6:10:ab:b4:cc:ef:
1f:87:8f:82:38:06:d1:fe:89:21:e8:7b:7a:4e:fb:
9f:50:1c:fe:70:3e:13:86:72:f3:74:95:44:26:00:
c3:62:2b:07:5a:d4:eb:90:34:0c:50:cf:f5:7c:2e:
f1:5d:00:5f:2a:fb:dc:fb:61:52:86:ce:c6:07:31:
2a:5b:23:78:f1:d1:10:90:66:ba:60:35:24:27:30:
54:58:1a:11:9a:cf:97:1f:49:12:42:1a:3d:ac:3a:
d3:62:ab:15:1a:72:8d:e0:92:b5:12:71:e3:9f:23:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:50:97:DD:28:A1:1F:02:55:B4:31:95:29:84:B3:5E:90:5A:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1E2F4ECBE8611EF997BEA52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.204.0/24
Signature Algorithm: sha256WithRSAEncryption
33:1e:b5:51:6f:2b:bd:b2:67:92:38:b5:05:13:4f:8b:64:ce:
5b:c0:c2:e0:c8:16:93:05:69:1a:f9:a8:f8:7b:0a:f6:af:75:
12:8e:dc:a1:2a:a9:89:2e:5c:43:4a:36:a5:48:66:6c:ec:21:
15:0d:09:61:c8:ba:77:be:31:88:44:1a:96:3f:bc:e7:c3:3c:
77:ee:44:ae:f4:51:8b:0e:3c:4d:8d:0a:e9:04:6b:2a:45:33:
5c:3a:5c:8d:bf:4a:43:91:6a:f0:dd:28:e2:5a:06:df:bd:0b:
d3:e9:e1:36:60:99:8f:4a:5d:ef:44:6f:02:55:1d:6f:d7:6d:
49:c6:43:bd:3f:d4:34:6c:d1:84:41:91:f4:76:a3:48:a2:99:
d1:1e:f9:6c:f9:7c:3f:0f:86:5f:f6:d2:ab:54:a2:a0:ed:71:
7b:25:1c:a2:50:35:9c:c1:02:81:02:86:fd:5f:03:d9:d3:95:
14:77:45:2c:3d:11:bc:98:11:55:ad:f8:45:a7:1a:e1:3f:ba:
40:2a:7b:a1:1f:98:a4:f3:ea:96:b7:43:e6:a9:65:0e:9e:3c:
2d:f9:3b:17:4f:e9:b7:09:2b:67:ed:cc:9c:ea:fc:97:dc:fe:
f2:84:92:07:7c:35:c3:d7:2e:2b:03:04:c2:c8:68:00:8d:28:
01:00:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:12 2025 by rpki-client