Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9B2329ABDB411EF8E2E47A6762E951A.roa
File: F9B2329ABDB411EF8E2E47A6762E951A.roa (raw, json)
Hash identifier: ZxCIvlnT3B1h0fBKXYGALZ11DYWjniioMKyx74eeg40=
Subject key identifier: B2:17:77:50:04:4F:AF:5A:5A:B8:85:69:FA:CE:53:00:6C:BA:C8:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9B2329ABDB411EF8E2E47A6762E951A.roa
Signing time: Thu 19 Dec 2024 02:57:25 +0000
ROA not before: Thu 19 Dec 2024 02:57:22 +0000
ROA not after: Wed 10 Dec 2025 02:57:22 +0000
asID: 984
IP address blocks: 45.204.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58595 (0xe4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:57:22 2024 GMT
Not After : Dec 10 02:57:22 2025 GMT
Subject: CN=67638b95-5f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:53:18:57:a3:06:28:f3:cc:bc:a4:92:fc:6b:
ff:bf:99:b5:ce:a0:3c:b0:33:77:2d:54:09:47:50:
cb:1b:a6:69:be:31:04:a3:c0:e1:1e:b8:c7:7a:8b:
b5:f5:34:71:0b:35:4d:b7:51:f6:32:49:e7:1d:a8:
b2:48:12:78:86:9b:70:d8:9b:5c:85:c8:74:da:b2:
78:71:d0:03:e8:12:88:1a:d2:65:cf:f0:3d:b6:92:
cd:56:ca:d7:df:5b:78:9b:0d:10:ea:86:0a:80:94:
87:40:4b:e7:3b:91:56:7f:39:4e:bf:41:38:36:8a:
2e:ea:06:3a:ac:bf:ab:d9:4e:8e:f6:00:00:f8:0c:
44:04:bb:bb:cd:60:89:d8:b2:7b:b6:99:98:15:a1:
56:9a:eb:fb:40:4a:c9:fa:6b:b1:ad:04:22:6a:56:
24:50:a7:b6:c1:bb:e3:ee:69:58:41:4d:27:a1:cd:
4e:6b:b5:58:a0:67:12:b5:95:65:eb:7d:0e:6a:e1:
8f:5f:57:02:1f:af:0e:2a:b6:c9:2a:3c:4a:15:e1:
f2:5d:5d:67:5f:37:7f:11:ee:e5:22:1a:7a:77:fb:
16:8a:5c:75:73:d3:77:68:bf:e2:1b:c3:37:27:6e:
fd:6a:cd:88:54:2a:3e:32:ee:23:d4:0e:da:14:be:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:17:77:50:04:4F:AF:5A:5A:B8:85:69:FA:CE:53:00:6C:BA:C8:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9B2329ABDB411EF8E2E47A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.152.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d6:05:a8:91:06:38:33:46:46:f7:e1:10:7f:cd:48:43:5f:
99:ea:73:37:c0:65:13:ac:c7:40:0a:41:61:23:a3:ab:bc:11:
ca:57:0f:b5:c8:f1:8d:e6:08:55:5b:f8:3d:43:ae:88:a0:1b:
cc:03:41:99:e4:b8:79:48:6b:f3:a8:80:3d:b1:39:8c:89:51:
04:8c:15:f4:6a:07:22:93:4a:aa:ab:12:ce:b0:ab:ed:2b:e5:
45:05:03:9d:b8:7b:ab:c8:7c:b3:16:a4:ae:4f:d3:3b:9f:2a:
34:76:55:73:9d:1a:0e:f6:8f:98:f8:0b:98:1c:cb:63:95:05:
6c:0e:42:fe:ee:b8:fd:be:3b:08:85:ed:6c:d7:0c:e0:d0:a1:
9b:ba:b6:92:d6:d8:33:b1:3e:1b:67:68:71:1d:d2:0e:0a:4c:
b9:29:eb:a3:cd:3a:03:de:11:20:c5:34:c5:fe:ee:fe:69:ee:
43:f0:ac:07:19:b5:29:0a:35:ed:09:c2:d8:b8:77:d7:b5:e3:
e1:d2:d2:22:e4:4c:fd:e9:2d:e3:e4:65:40:73:75:0f:2c:e0:
b9:0e:21:13:1b:ba:00:fb:4c:c6:1c:84:09:30:a8:9c:ec:2e:
87:0a:79:df:8b:d0:1f:d1:3a:96:a7:4e:4c:47:fb:0c:8f:40:
26:3f:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:59 2025 by rpki-client