Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDC2D3CCC40311EFB1F32A9A762E951A.roa
File: EDC2D3CCC40311EFB1F32A9A762E951A.roa (raw, json)
Hash identifier: MXVaxpfxAem+kS8FWPv4NnPrKxT/fAphZvuxVmkupYQ=
Subject key identifier: 5B:9A:71:B6:29:54:B4:12:C3:C9:EC:C7:15:6E:7E:0A:60:E2:AA:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDC2D3CCC40311EFB1F32A9A762E951A.roa
Signing time: Fri 27 Dec 2024 03:37:42 +0000
ROA not before: Fri 27 Dec 2024 03:37:39 +0000
ROA not after: Fri 12 Dec 2025 03:37:39 +0000
asID: 984
IP address blocks: 45.195.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61428 (0xeff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:37:39 2024 GMT
Not After : Dec 12 03:37:39 2025 GMT
Subject: CN=676e2106-5b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:a9:31:38:ad:33:1f:ad:1f:ea:cd:d9:d7:
ff:c0:84:c8:77:a4:9d:1c:b6:20:ee:df:0d:43:3e:
69:55:4e:fc:04:ce:31:de:b9:a3:2c:ed:89:08:e6:
8f:d5:3d:6d:b4:00:0a:13:28:4a:c2:fe:ba:91:2d:
fd:60:40:72:8b:14:02:d9:ef:57:bc:d1:7f:f3:b7:
22:ab:6d:e9:7c:5a:74:b8:e6:57:d4:d8:df:b5:51:
6e:a6:91:08:61:31:0e:08:76:63:12:91:83:78:a3:
55:f8:45:a3:20:a6:3c:3c:6a:10:e3:a6:d9:a7:a2:
e7:eb:f7:2a:3e:b1:d9:df:27:a4:98:23:73:48:b7:
f9:28:c4:4a:50:c2:a6:66:fb:b9:ea:07:ab:0f:6a:
dc:87:8c:83:48:c9:8d:19:9f:09:7e:e0:54:87:68:
fa:17:d3:bd:07:3e:24:41:bd:69:23:be:0f:32:f1:
3b:df:4c:28:c2:43:db:fe:84:0a:1a:51:0c:46:a4:
08:2f:2d:0a:9c:5b:e9:30:ea:c3:66:e6:55:7c:32:
ed:82:2c:c5:d0:95:58:d8:28:ac:42:35:a7:36:46:
fa:70:43:7b:2f:3e:49:8b:88:27:fb:48:49:a0:99:
2a:4b:0b:3b:48:7b:88:19:f0:dd:18:da:bd:06:7f:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:71:B6:29:54:B4:12:C3:C9:EC:C7:15:6E:7E:0A:60:E2:AA:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDC2D3CCC40311EFB1F32A9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.229.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0a:e8:23:d2:6c:ae:da:84:24:81:bd:e6:9f:dc:79:0d:4d:
65:ff:1d:63:9c:21:3b:0f:aa:3a:00:6b:0f:9a:60:30:95:2b:
36:65:e3:75:fb:85:45:5a:d4:1f:d2:3a:33:d6:ac:33:81:cd:
56:5a:c4:4b:ad:e8:c8:74:a8:4a:77:86:4a:04:64:59:35:ca:
5b:6c:bf:47:5a:ee:51:6a:af:64:6c:b4:57:72:68:a7:08:84:
d1:cd:07:7a:a7:22:d6:64:d1:22:c2:4a:ae:94:2d:e0:5d:77:
c6:c7:51:79:34:70:11:b1:61:e7:cb:6b:42:df:9b:59:15:19:
fb:73:d4:7f:c3:5f:43:7d:0d:96:a2:d1:c4:bf:5f:8b:dd:92:
61:f6:54:79:b5:39:08:f8:c9:92:34:eb:92:3d:04:79:39:ea:
77:91:c6:a5:59:ef:19:af:44:11:35:15:67:9d:c4:a1:2b:60:
43:96:98:8a:82:7a:0c:99:81:30:77:31:bb:76:aa:9b:df:42:
3a:e4:4a:bc:4f:6f:ba:a5:d2:cf:78:7c:91:cc:62:da:bb:d9:
b1:4b:66:db:a0:f2:91:2c:0e:0a:69:9e:55:e9:c1:45:39:2c:
46:c9:9a:b9:2d:77:a8:37:03:76:87:b7:94:03:e3:bc:0e:1f:
e6:f5:43:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:55 2025 by rpki-client