Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4D09F1ACF2911EF8995F980762E951A.roa
File: F4D09F1ACF2911EF8995F980762E951A.roa (raw, json)
Hash identifier: nah6ebL4Jx3O5Us3XntUJm5D/EXJvOtopi2xIfNBojg=
Subject key identifier: 9C:38:BC:BA:92:84:61:B2:3B:76:5A:C9:27:E8:00:B3:6E:B0:5E:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01050B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4D09F1ACF2911EF8995F980762E951A.roa
Signing time: Fri 10 Jan 2025 08:07:38 +0000
ROA not before: Fri 10 Jan 2025 08:07:34 +0000
ROA not after: Sun 16 Feb 2025 08:07:34 +0000
asID: 6079
IP address blocks: 45.205.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66827 (0x1050b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 08:07:34 2025 GMT
Not After : Feb 16 08:07:34 2025 GMT
Subject: CN=6780d54a-aec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:bd:6e:3a:d2:18:8a:66:a8:b2:b5:86:86:
f5:cb:7e:c3:9a:d0:6c:c7:48:a9:b8:39:bc:d8:56:
21:7a:e1:49:36:ef:cc:2e:db:e2:c6:b9:9e:60:47:
f2:d1:e0:4d:69:db:62:07:db:e0:bf:f2:7e:00:3d:
f9:04:cd:e8:4f:14:ed:03:26:f0:9d:ff:14:5c:9c:
7b:3e:93:91:29:54:44:ae:53:07:64:83:e6:64:09:
92:23:a1:e9:8a:33:90:ba:62:f7:b3:ac:2b:6c:b4:
3e:0d:43:42:9a:6f:2f:25:6d:1b:80:53:08:3f:85:
c8:74:0c:eb:a4:35:2e:68:dc:9b:30:68:c3:34:cd:
40:12:f2:7c:ab:e6:af:de:6c:fe:01:6e:c4:7e:4f:
3c:ad:a2:d0:42:fb:60:97:f6:92:6b:43:0d:92:b7:
17:16:db:99:30:b7:82:b2:4c:5e:ab:f6:1e:fa:b7:
fc:a5:b1:53:5c:4e:ac:47:2b:5e:93:c5:f9:9a:22:
5c:50:9c:09:5b:e9:a4:d8:aa:3c:e9:41:e2:77:51:
d5:d4:7e:0f:8d:a8:48:32:b1:6d:32:1a:73:4d:31:
82:66:75:67:c9:63:a8:7b:6d:63:ad:2c:d0:88:6b:
fb:b4:ab:10:82:9d:23:51:62:74:fc:a6:9c:7f:d5:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:38:BC:BA:92:84:61:B2:3B:76:5A:C9:27:E8:00:B3:6E:B0:5E:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4D09F1ACF2911EF8995F980762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.80.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:6e:4e:2f:80:3a:d3:11:57:da:77:25:db:40:3d:8e:61:85:
24:7b:52:36:63:03:83:42:6e:42:4b:5d:1e:77:b8:a8:42:06:
37:68:e4:4f:86:5a:a6:0c:8b:cb:17:a3:29:c9:f4:7c:42:82:
4c:5b:f1:b2:3c:2d:13:47:22:35:b4:a1:39:74:08:1f:11:80:
7f:92:f4:12:82:7c:7a:48:e1:e1:a3:0a:95:d8:b9:a4:53:a7:
23:7a:e7:b5:02:d2:bf:fe:91:ab:5e:6c:29:72:59:3d:a3:79:
35:e3:55:1b:dc:4f:29:ed:7e:3d:03:d7:31:fd:c9:de:cf:a8:
a3:8a:a4:52:e6:d2:11:a0:66:5d:5a:7d:98:a2:3a:b8:41:d6:
76:b6:a2:8f:9f:cd:29:1f:02:5f:cd:07:93:90:16:e0:e9:4a:
02:32:a2:03:3f:16:f9:08:69:5f:63:eb:eb:4b:39:69:28:42:
2c:9a:89:40:25:3f:5f:79:66:79:8d:36:57:e1:26:86:c6:ac:
ca:7f:ec:ab:a7:31:0c:78:a2:c6:56:e5:57:ff:6d:18:a2:fb:
c1:53:c6:73:f4:78:c8:03:3b:2b:8e:e9:84:b9:9e:31:70:70:
c2:41:5f:8f:7b:a5:dc:9d:0f:47:d8:65:85:97:70:9e:e6:c7:
5d:57:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:17 2025 by rpki-client