Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F23B5DB0C8EB11EFB2FBA242762E951A.roa
File: F23B5DB0C8EB11EFB2FBA242762E951A.roa (raw, json)
Hash identifier: UohFwJHF5iXgk2wcQMvgaTgfGVqimBqg1CsSz6tBnfw=
Subject key identifier: F8:6B:81:8D:71:20:A4:9C:98:98:FF:7D:BC:7C:B9:F8:C1:F3:E7:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F32E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F23B5DB0C8EB11EFB2FBA242762E951A.roa
Signing time: Thu 02 Jan 2025 09:28:38 +0000
ROA not before: Thu 02 Jan 2025 09:28:34 +0000
ROA not after: Thu 06 Feb 2025 09:28:34 +0000
asID: 395793
IP address blocks: 45.192.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 09:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62254 (0xf32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 09:28:34 2025 GMT
Not After : Feb 6 09:28:34 2025 GMT
Subject: CN=67765c46-3729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c1:33:d9:2d:8b:1d:e6:75:8a:f7:ae:72:35:
8c:4b:44:88:83:48:15:e0:a3:a2:6e:63:79:56:b7:
2a:e2:a7:04:bc:f7:12:75:cb:09:b9:59:ab:20:d2:
f8:eb:1f:9b:6c:f9:e8:99:e6:b5:5a:18:03:79:46:
b6:26:a7:4c:fe:04:d8:db:b2:0b:dc:af:0c:60:14:
78:4d:36:cd:3a:7a:21:c7:fd:2e:b3:0b:4b:6b:b8:
19:55:81:5c:d6:81:a8:28:c6:b0:0b:4a:51:be:86:
ee:36:37:7f:65:b9:ff:a1:33:1f:ac:fe:e5:c3:a8:
56:0e:31:07:38:88:64:a9:af:8e:0c:62:f1:b7:f4:
01:c3:10:37:ae:8a:11:9b:d5:79:ca:f7:4f:be:4a:
77:6e:6c:64:6b:1b:f6:e1:36:dc:17:c9:b9:ba:56:
6c:67:82:dc:98:5d:a8:7b:d6:58:23:45:ed:2f:7e:
b9:52:ce:20:7c:d9:dd:10:58:e7:1f:7f:de:ac:a8:
83:ab:c0:1a:b3:c5:1e:0a:9a:a1:34:2e:ed:15:8b:
a5:a9:6e:6d:03:6b:f2:f0:53:ac:0c:1b:64:e0:54:
43:a5:98:ca:d1:92:64:0b:18:f2:fc:88:c9:c4:d7:
ea:30:f8:03:c2:b0:f9:c3:62:fc:2e:4d:52:e8:53:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:81:8D:71:20:A4:9C:98:98:FF:7D:BC:7C:B9:F8:C1:F3:E7:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F23B5DB0C8EB11EFB2FBA242762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e6:e4:97:c7:1e:0f:ff:ed:8d:73:6a:02:e1:fd:7d:9a:a1:
cd:e5:1c:b3:62:fd:55:99:2c:ee:94:d9:60:12:ff:5a:98:e7:
63:88:d1:41:c7:62:9c:e6:74:c4:57:a9:cf:80:a7:54:d3:ba:
a1:94:cf:3a:56:00:8a:f8:77:69:75:5a:1f:96:09:cb:46:1f:
22:b1:d8:ad:b8:f9:88:52:ce:21:65:19:8e:d6:ee:20:ff:48:
a5:86:ae:6d:e3:cb:87:87:b2:3d:14:be:1d:ab:fc:b0:c9:7b:
c3:48:30:dc:b0:fd:e9:60:da:d6:a1:7d:42:5d:63:e6:56:11:
19:0a:e9:41:67:fa:7b:7c:ab:94:ab:77:8f:40:6e:d0:8b:64:
fb:5f:69:9b:11:72:f9:3d:28:ff:61:55:11:95:f9:cf:9f:77:
8b:5b:14:64:6d:bb:47:06:63:7d:1f:aa:a6:19:21:e4:4c:82:
84:e2:5b:86:38:a5:d1:3e:ba:38:bd:5d:78:6f:1f:a9:01:98:
b2:71:6a:71:82:62:bc:4a:b9:00:3d:58:6c:f7:ce:4d:b2:38:
41:8a:ab:66:88:9b:2f:2f:04:d7:98:f2:65:9b:f4:19:9c:e3:
46:42:83:d9:72:b8:ef:aa:5f:fa:96:9b:63:f7:f8:25:7d:28:
d9:7c:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:52 2025 by rpki-client