Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C40E4EBEDA11EF857DBD5B762E951A.roa
File: F9C40E4EBEDA11EF857DBD5B762E951A.roa (raw, json)
Hash identifier: LGwjlqza+VFu9oF+jDWsebesYUqWaPtOUhIcwUaMqXg=
Subject key identifier: 28:9C:DE:E6:F8:99:32:0B:EF:A2:91:C2:8D:A7:8D:E9:F2:62:4A:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E773
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C40E4EBEDA11EF857DBD5B762E951A.roa
Signing time: Fri 20 Dec 2024 14:01:57 +0000
ROA not before: Fri 20 Dec 2024 14:01:54 +0000
ROA not after: Thu 06 Feb 2025 14:01:54 +0000
asID: 42831
IP address blocks: 45.198.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 14:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59251 (0xe773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 14:01:54 2024 GMT
Not After : Feb 6 14:01:54 2025 GMT
Subject: CN=676578d5-522b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:5f:69:5d:39:ce:45:2a:be:17:98:f1:7e:
18:95:78:a4:df:91:c5:74:23:3e:67:a1:f0:92:18:
2e:51:cb:72:7c:09:0b:5d:12:5b:f9:8f:5a:60:0b:
ac:aa:1a:f2:59:a5:fe:34:f9:83:2e:ac:f0:36:87:
31:5e:05:0b:e1:ec:64:5f:d5:6f:8e:b4:ca:48:c6:
d8:aa:61:68:39:58:89:a8:6c:14:49:ad:ca:02:a0:
79:4a:54:01:fb:61:00:31:7d:10:be:fa:01:60:fd:
9e:b9:77:61:ee:cd:23:fe:78:c0:86:04:6b:5f:71:
a7:1f:fa:84:5c:d0:fa:66:49:55:0b:e8:a9:18:2b:
f7:a0:14:63:7e:a7:84:80:82:3a:aa:ee:f3:95:68:
52:32:28:0b:d6:10:1e:b4:61:1f:90:2e:05:d4:33:
ed:b0:85:9e:4b:1f:f5:85:58:4e:91:3f:1f:f0:fd:
48:91:e5:7b:50:66:f8:bc:db:87:7a:0b:0a:93:38:
fd:fb:50:d7:9c:9b:cd:fe:6b:1d:cc:a2:3b:2e:6d:
15:18:b8:80:e0:89:c8:c0:01:06:42:f4:b7:ee:e6:
0c:ea:dd:b1:f3:6f:fe:14:a0:ac:25:6c:52:10:07:
e2:5f:fe:75:ba:94:5c:33:c7:f3:3d:8d:48:21:0c:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9C:DE:E6:F8:99:32:0B:EF:A2:91:C2:8D:A7:8D:E9:F2:62:4A:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C40E4EBEDA11EF857DBD5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
49:5d:d2:7f:da:ba:0f:eb:5b:1d:ef:ef:09:da:e2:4e:e5:9a:
17:fa:30:8c:b2:ee:04:2a:41:f2:04:17:d6:6d:0b:0d:fc:09:
cd:9e:f1:ce:5a:ba:8d:7a:e9:75:e7:00:cb:9c:b3:fa:9d:fc:
da:e0:15:ed:a1:60:ec:ed:8d:b1:6b:33:5e:b5:7e:1c:0d:be:
bd:6b:62:3d:ab:5d:bd:c6:7f:0d:00:a1:4c:49:a2:40:f4:a4:
2a:f8:06:34:a1:bd:e5:79:2d:88:e3:cf:59:9d:09:8f:86:08:
fa:99:e9:68:c5:7b:29:4d:d0:1d:e9:bd:61:4d:43:a6:57:98:
da:c8:09:51:60:cc:1f:48:96:ea:de:8a:ad:83:16:5b:9e:86:
46:65:d6:41:12:21:50:86:e9:bf:0d:63:97:60:1b:2a:2e:6d:
9f:7e:eb:bd:38:49:e7:ec:43:ab:9e:db:0b:83:1c:e4:35:d8:
3e:2c:cc:27:ef:76:83:23:71:67:c3:a7:09:8c:92:f1:65:8a:
4d:59:f6:e9:57:23:e4:e3:46:fb:99:6c:6d:aa:7f:97:ee:fa:
28:2f:65:89:76:1f:44:aa:97:38:1f:c4:1e:5b:32:84:2c:de:
d0:2f:b0:64:31:75:6f:c3:22:51:9c:20:8b:f7:45:f5:22:d8:
87:12:aa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:44 2025 by rpki-client