Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F607B6ACCF2411EFBD6CEC60762E951A.roa
File: F607B6ACCF2411EFBD6CEC60762E951A.roa (raw, json)
Hash identifier: K5uowrJysL48gWNyariZtS8GoitgP3wpXrf11K1x3IE=
Subject key identifier: E0:5D:1F:6E:0A:81:8B:25:FE:7B:86:BD:9C:5D:B5:26:BA:D7:50:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F607B6ACCF2411EFBD6CEC60762E951A.roa
Signing time: Fri 10 Jan 2025 07:31:52 +0000
ROA not before: Fri 10 Jan 2025 07:31:49 +0000
ROA not after: Fri 14 Feb 2025 07:31:49 +0000
asID: 398823
IP address blocks: 45.205.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66805 (0x104f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 07:31:49 2025 GMT
Not After : Feb 14 07:31:49 2025 GMT
Subject: CN=6780cce8-32ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:3e:7e:f2:4e:fc:b4:12:c6:e4:91:08:08:
d2:0b:d5:8f:aa:78:71:7f:f2:7b:d2:78:98:d0:f8:
f9:4d:e5:00:03:a5:3e:29:21:98:0a:f3:4b:c3:c8:
43:b8:ae:30:86:bb:73:43:ce:26:a1:35:e0:86:4a:
71:3e:d8:ac:8b:3e:cb:d9:b2:46:fd:46:33:d6:7d:
a5:1b:8d:d2:0d:37:91:07:3f:e5:b2:b4:75:e4:99:
2d:3a:e4:87:f9:66:3a:17:2c:91:61:e3:c1:9e:66:
c7:b0:1c:e0:5d:66:18:cc:55:e4:a4:61:03:4c:6f:
13:9f:16:23:93:e4:b0:ae:92:23:f1:1b:46:4a:6e:
ba:ac:1e:4a:cc:b0:d5:74:96:42:e5:12:22:c1:56:
d9:48:8c:3d:ba:5f:07:cf:b4:4d:bb:a0:4b:8b:66:
89:f7:c8:e4:a3:e0:96:52:82:49:40:e7:10:de:1b:
01:ab:f0:38:50:1a:c2:b9:f1:c9:c5:df:2d:fa:00:
81:97:67:c9:a6:61:61:b2:e1:2e:92:8d:dc:b5:26:
ee:40:f9:3c:7c:2b:1f:9d:4d:59:02:72:5a:4e:42:
5c:2f:e0:68:18:43:d2:1e:3d:5f:6d:7a:bd:35:05:
c0:f4:6c:f6:d2:d8:ef:a2:36:46:34:d0:09:64:fe:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5D:1F:6E:0A:81:8B:25:FE:7B:86:BD:9C:5D:B5:26:BA:D7:50:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F607B6ACCF2411EFBD6CEC60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.224.0/20
Signature Algorithm: sha256WithRSAEncryption
14:20:77:3e:31:0f:ae:40:66:39:5b:d9:40:90:56:63:1d:95:
5d:9d:d6:d0:21:46:c8:6a:16:de:a3:9f:dd:8d:26:3a:5b:fb:
c2:32:78:aa:29:15:67:2a:3c:ea:9e:fe:4b:03:58:1b:1d:4e:
c8:87:15:a5:63:d0:2a:24:28:f2:aa:54:65:a6:64:83:f6:ce:
f3:bf:fa:bb:2e:83:6e:4e:97:fc:55:79:65:51:64:83:c8:38:
82:e1:9a:b8:13:01:60:eb:31:70:d3:2a:72:dd:61:8f:d3:4a:
d5:3e:47:bb:f1:6b:68:30:ce:2a:ba:00:b5:ed:82:1d:93:87:
6b:3b:99:38:f9:e2:63:f5:76:83:6b:7c:43:33:0f:8d:7d:73:
ef:4a:ef:fd:d9:4a:60:1f:6e:c0:c8:22:0e:93:65:49:c9:fe:
59:9e:03:b9:30:13:1a:57:f3:bd:3b:d0:35:72:f5:70:ac:f5:
32:04:50:90:fc:88:a5:0f:27:94:58:6f:e6:81:75:c8:3e:3b:
f3:ba:91:b2:8d:31:61:59:8a:f8:85:a0:9f:0a:cb:6b:15:e4:
43:10:45:10:3b:45:25:05:47:bb:7d:cc:21:76:22:66:4a:4c:
27:40:61:00:05:8e:ee:01:7f:43:0b:30:85:d8:1e:77:dc:7d:
33:22:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:24 2025 by rpki-client