Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE454C14CDCA11EFA4834ABE762E951A.roa
File: EE454C14CDCA11EFA4834ABE762E951A.roa (raw, json)
Hash identifier: is7cLYHLzTPOQ5wY2IsQ849JpkBUklUjKnxa8h+Lh18=
Subject key identifier: 6C:5F:64:52:57:00:8B:88:20:C9:46:22:0C:5D:6B:E7:BA:96:1E:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE454C14CDCA11EFA4834ABE762E951A.roa
Signing time: Wed 08 Jan 2025 14:14:54 +0000
ROA not before: Wed 08 Jan 2025 14:14:50 +0000
ROA not after: Mon 27 Dec 2027 14:14:50 +0000
asID: 17561
IP address blocks: 45.194.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66006 (0x101d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:14:50 2025 GMT
Not After : Dec 27 14:14:50 2027 GMT
Subject: CN=677e885e-e2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:f5:8f:fd:94:ca:79:f7:4a:d5:df:57:43:
06:3f:27:04:14:50:5f:2b:98:40:e8:fc:e0:dd:92:
14:67:91:1f:3a:7b:a5:2b:ea:77:b4:73:20:a0:50:
e7:c3:77:ff:23:d6:bc:a9:b2:a8:99:59:2e:da:32:
e1:eb:e5:6d:c2:7b:39:2f:33:f0:14:86:fa:56:15:
9f:94:2f:fb:76:0c:8d:a5:53:1c:e5:22:ee:24:02:
dc:7a:e5:46:0b:d3:2f:06:f4:95:dd:d5:dc:a0:0d:
24:9b:86:12:e8:d2:27:d4:18:58:db:83:ea:81:b5:
4e:54:9d:1f:9a:82:3d:0d:11:40:0f:bc:df:9b:e7:
e7:77:c3:04:37:2a:f9:99:2b:21:15:8e:3c:d3:fa:
4f:63:69:08:3a:e1:bd:e5:ca:86:35:40:fb:97:23:
a8:62:93:0c:3c:fa:f1:ed:26:10:c1:3e:2a:2e:55:
e6:a4:d9:3a:24:1d:35:65:32:cc:ae:29:31:12:18:
35:33:8f:9a:cb:29:e7:49:48:50:84:f8:c8:95:ad:
a3:cd:1f:43:be:64:b3:a4:69:29:34:be:b7:85:c9:
09:83:07:1e:05:0b:32:3c:62:19:8b:cc:d0:a8:b4:
f0:d2:a7:38:08:81:99:59:48:a7:bd:9e:1e:c3:fb:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5F:64:52:57:00:8B:88:20:C9:46:22:0C:5D:6B:E7:BA:96:1E:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE454C14CDCA11EFA4834ABE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:11:b7:b1:f7:c9:a1:00:95:55:8c:10:e4:e5:7f:0d:80:67:
eb:01:1a:ea:56:d1:6e:d6:67:dc:d9:2b:f5:a5:c0:3f:da:45:
d6:7f:99:15:c7:93:80:e9:8f:5d:88:54:98:e4:e7:98:03:98:
2c:00:14:a7:da:3a:db:9f:cf:99:42:21:9b:92:c8:db:48:2c:
c6:c2:8e:24:f5:e6:54:30:1c:8d:75:32:75:b7:a8:64:a8:15:
16:23:e5:71:ec:89:f3:51:14:0d:43:57:8e:31:2f:4c:3a:d6:
ed:a8:f5:91:57:f2:8e:70:c6:47:90:c2:5b:26:fa:84:03:24:
77:f7:2e:c6:49:24:d3:8f:4f:c1:82:69:1a:06:30:68:51:6b:
28:7b:df:d2:d6:fb:17:57:e6:af:f0:83:5c:fd:a4:17:6e:9c:
39:46:2e:9a:c1:29:8e:8c:d7:88:72:ef:83:2f:5c:41:9d:90:
e8:59:18:03:6e:04:40:23:93:8c:35:59:8a:48:fc:17:43:80:
b9:50:a7:1e:73:9b:d0:fb:19:41:3c:26:46:7f:06:f1:3f:a6:
b2:fa:4c:60:1e:f6:ff:74:cc:7a:e4:cc:67:d3:c8:ad:46:d9:
40:90:87:6d:67:78:06:bf:51:8d:d0:d2:3a:4d:19:92:9f:39:
4c:3a:0f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:21 2025 by rpki-client