Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA851106BDB911EFA20B8548762E951A.roa
File: FA851106BDB911EFA20B8548762E951A.roa (raw, json)
Hash identifier: kLJK1Eq/xJ59DkeeA7gd7WqVnvQxu1gd29X7WCUY78w=
Subject key identifier: 63:46:F7:3B:DA:8E:9A:D4:EA:87:0B:A9:49:3F:95:60:B3:DC:46:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E523
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA851106BDB911EFA20B8548762E951A.roa
Signing time: Thu 19 Dec 2024 03:33:14 +0000
ROA not before: Thu 19 Dec 2024 03:33:11 +0000
ROA not after: Wed 10 Dec 2025 03:33:11 +0000
asID: 984
IP address blocks: 45.204.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58659 (0xe523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:33:11 2024 GMT
Not After : Dec 10 03:33:11 2025 GMT
Subject: CN=676393fa-c724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:e3:7f:53:2b:3e:38:df:6f:16:31:ba:b7:
9f:67:2a:5d:e0:32:f0:67:09:c5:5a:85:60:ac:b1:
8d:fa:47:5a:56:55:08:d9:0f:cb:85:d6:8e:a7:bd:
09:de:01:c2:e0:52:06:40:7b:93:0c:fe:b8:9b:e8:
99:64:07:9b:a8:ef:bd:cd:e7:bd:87:8f:17:7f:83:
50:e1:68:a9:66:37:1c:71:54:5f:39:9e:03:6c:c4:
3a:84:1a:06:48:81:38:e0:e1:07:7e:97:dc:87:e4:
5c:b9:f0:a9:a7:78:9f:d4:a7:5e:10:1b:54:a7:c4:
de:de:17:6b:f0:d8:10:bb:b7:f7:35:77:52:a0:75:
93:44:52:e1:b1:b7:0b:bc:27:89:2a:18:b6:bf:06:
c0:57:29:87:66:b0:6f:e7:78:78:e7:02:f3:16:68:
1a:c6:ba:b1:77:24:a7:e7:af:e9:f3:37:f5:b1:35:
49:01:55:85:89:44:bf:97:16:c8:db:b4:56:02:65:
95:07:17:b0:98:9a:be:3d:42:51:86:fc:a0:e9:ee:
8d:51:09:f3:a6:6f:5f:91:b4:4b:4e:aa:22:dd:6c:
91:53:a7:86:e0:76:78:5a:ee:e4:9e:a3:92:d4:a6:
5c:a3:85:f3:c1:8c:63:0a:55:4d:55:2b:36:3e:df:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:46:F7:3B:DA:8E:9A:D4:EA:87:0B:A9:49:3F:95:60:B3:DC:46:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA851106BDB911EFA20B8548762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f7:d2:54:cb:55:29:6f:47:a7:5c:b9:b6:9f:45:4b:8d:57:
42:1b:bf:d6:ec:53:82:3f:c0:98:a1:47:b3:e3:58:a4:45:86:
03:e9:75:0c:fd:05:bd:70:45:68:03:ea:07:63:2c:02:a5:6f:
4f:ac:b9:46:f6:a0:b1:f3:55:e3:6a:39:b3:f2:e3:35:4e:36:
8a:12:9b:18:e2:0b:b4:88:6b:07:d9:6f:c6:6b:97:2d:b2:ae:
ee:f5:61:9f:9f:69:63:6d:55:11:d0:d3:90:a2:48:06:37:10:
d7:7a:a9:1b:0c:5a:8c:f9:4e:4c:be:97:e4:37:c2:ef:a3:f5:
e8:fb:94:cc:b6:ab:6f:cd:86:45:3d:d4:d2:d1:ee:40:a2:51:
69:86:0a:bd:14:d5:b9:95:5f:c5:0c:91:83:e4:4c:85:64:c6:
c8:99:73:10:63:31:d7:db:cd:36:49:7b:9a:8a:f0:7a:ab:41:
d2:97:cc:e4:6c:53:01:77:24:cf:26:aa:e3:30:e4:75:32:69:
e7:ba:70:81:2b:00:b8:ff:eb:8d:18:e7:1c:c4:cd:91:1a:f9:
11:16:b3:98:40:f8:11:87:61:a0:85:a0:38:e1:04:34:52:70:
68:56:95:a1:0a:5a:12:71:5b:85:da:e0:a4:02:93:c7:c1:5b:
2c:75:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:38 2025 by rpki-client