Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5F54BB2BE7B11EFB1AA9287762E951A.roa
File: E5F54BB2BE7B11EFB1AA9287762E951A.roa (raw, json)
Hash identifier: HpGi5CSP9V31XhXo6W8cRHNwX/VQbVgkLJZpgnNw54o=
Subject key identifier: B3:5F:F0:72:D9:4B:50:58:40:00:5C:D9:13:C7:D2:19:D7:80:E7:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E666
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5F54BB2BE7B11EFB1AA9287762E951A.roa
Signing time: Fri 20 Dec 2024 02:41:22 +0000
ROA not before: Fri 20 Dec 2024 02:41:18 +0000
ROA not after: Wed 10 Dec 2025 02:41:18 +0000
asID: 984
IP address blocks: 45.206.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58982 (0xe666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 02:41:18 2024 GMT
Not After : Dec 10 02:41:18 2025 GMT
Subject: CN=6764d952-6264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:9e:85:0f:8d:c8:f2:e6:31:a6:c5:21:2b:
34:9e:a0:93:75:33:d1:c2:f3:72:f2:a6:cb:63:3d:
60:0d:77:7c:b8:1c:f1:73:3c:c5:58:a4:af:ab:b9:
8c:a8:04:02:87:00:d9:d2:a8:e6:22:1f:39:8b:60:
1d:ea:3f:79:af:81:2f:50:e3:bf:3a:82:41:03:ce:
c1:4a:e3:ca:30:90:86:68:5c:a1:3e:e9:83:82:44:
e2:a3:75:24:cc:e9:a9:a3:9e:5b:ab:79:f3:67:1d:
1a:92:d6:fe:00:43:dd:76:e2:a8:53:8d:be:51:88:
23:38:84:da:de:21:d0:c1:e2:27:ae:1b:a8:d8:cd:
6e:a3:80:db:b2:f1:03:11:12:88:1b:6f:e1:3c:43:
59:1a:bd:be:7f:27:69:5a:6e:41:58:db:37:c6:03:
84:a4:11:a9:29:92:8e:7e:14:6f:ba:0a:c0:ba:9c:
e9:c1:d6:3c:1d:ca:ea:79:e8:5f:34:52:b8:17:1e:
22:5c:4b:43:dc:90:4c:ba:d9:29:e5:67:40:cd:f9:
94:16:76:2d:d5:54:20:fc:cc:80:79:a9:51:e5:0b:
53:77:a0:fb:14:b3:f9:02:91:88:13:78:be:43:2f:
ef:97:f5:37:fd:00:d0:b9:49:02:ef:3f:41:82:7b:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5F:F0:72:D9:4B:50:58:40:00:5C:D9:13:C7:D2:19:D7:80:E7:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5F54BB2BE7B11EFB1AA9287762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:86:d3:49:f5:9c:dc:e7:26:41:2c:30:b1:da:3c:a8:5e:2d:
6e:58:8e:ed:07:88:97:51:b6:8f:0c:5b:6f:5f:ca:75:6d:b3:
67:2b:98:bb:d4:cf:a6:13:39:6f:ce:13:de:dd:bc:d3:32:1f:
27:74:f1:d9:f7:b4:82:f2:77:95:7b:68:59:40:02:b9:55:2f:
4f:05:12:b9:e9:8f:69:28:1d:60:a7:c1:cb:da:36:60:d8:0f:
4c:01:03:1a:13:bb:10:5d:d4:95:58:5c:f7:48:c7:09:4c:d5:
0f:07:13:d2:24:3c:88:66:11:50:b6:24:8c:64:db:94:36:61:
15:b3:64:cc:db:d8:27:84:7c:18:b6:ce:ac:4b:62:a1:df:b8:
1b:b2:ed:4b:cb:3d:bf:1a:49:69:20:2d:61:5a:e0:34:c9:41:
f5:89:91:78:ee:72:39:03:8e:a7:68:6f:42:65:d7:98:bb:b0:
b7:12:41:44:61:ea:3c:e5:a9:49:ef:63:9e:ef:53:af:70:ed:
fa:35:d7:4e:0d:c0:9e:11:f3:7d:e3:36:a8:1b:2a:ed:64:e2:
14:f6:82:5c:4b:45:d3:8e:aa:f6:88:23:57:36:be:b4:4f:aa:
02:4a:4c:18:5b:94:b2:11:f3:64:3b:5a:74:bd:ff:d2:46:71:
e6:25:c5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:20 2025 by rpki-client