Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDFAF262C3B111EFA087D581762E951A.roa
File: FDFAF262C3B111EFA087D581762E951A.roa (raw, json)
Hash identifier: QKrxj/gBsfa9z9EeZnORFlhjt9gfNH3GMKo/ErMoviQ=
Subject key identifier: 0D:B5:16:42:4B:5E:33:2F:B7:CA:D4:33:04:50:AE:62:E5:0A:CE:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDFAF262C3B111EFA087D581762E951A.roa
Signing time: Thu 26 Dec 2024 17:51:11 +0000
ROA not before: Thu 26 Dec 2024 17:51:07 +0000
ROA not after: Fri 12 Dec 2025 17:51:07 +0000
asID: 984
IP address blocks: 45.203.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61003 (0xee4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:51:07 2024 GMT
Not After : Dec 12 17:51:07 2025 GMT
Subject: CN=676d978f-fd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:c1:e9:8b:be:89:98:97:d0:23:1b:b9:c4:
4d:74:32:6a:95:92:b9:ce:d0:eb:d1:f2:1e:56:53:
a7:ec:00:c8:db:a6:e8:96:42:a7:c6:b2:d5:35:80:
d9:df:01:71:6b:2a:12:3d:64:9f:80:ed:c6:98:0e:
e1:b2:81:1a:2a:26:24:57:7c:fe:8e:ca:f1:56:59:
7c:0c:49:9a:b6:5a:7c:bf:47:e9:79:62:b3:dc:98:
2c:6e:69:81:ec:7e:40:99:0d:48:53:47:45:b5:07:
4c:06:47:99:b2:1c:e4:e5:66:dc:37:9c:88:39:e5:
d3:72:b5:6b:c3:3b:49:ff:bc:d1:cd:c4:be:9a:47:
ff:45:70:14:17:0f:ac:0f:c7:41:6b:bd:82:64:b7:
4b:ed:d9:2d:61:a5:b4:64:3a:82:fb:3f:b7:ac:31:
bb:26:56:4e:0c:3b:97:78:df:d2:2f:b8:9d:75:31:
6d:cf:84:74:b4:58:ed:72:6c:1d:e5:8c:d3:40:85:
ef:70:dd:dd:e7:9e:f1:a5:9e:fe:c1:0b:94:e7:0c:
46:9b:9d:67:60:b5:80:b9:df:03:bb:11:7e:8f:86:
21:d8:b1:a9:a6:da:76:ac:a5:67:40:d2:b9:34:49:
96:bf:8e:ab:66:70:e1:ae:63:90:68:4a:f6:85:9d:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B5:16:42:4B:5E:33:2F:B7:CA:D4:33:04:50:AE:62:E5:0A:CE:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDFAF262C3B111EFA087D581762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.39.0/24
Signature Algorithm: sha256WithRSAEncryption
28:cd:b6:b8:4a:07:a8:c9:6c:42:14:c8:7e:48:65:9c:31:3a:
94:c4:c9:cf:fa:40:45:38:00:ce:de:d3:c9:d7:c6:a7:f0:f5:
bd:db:68:d3:c3:47:91:a7:23:47:a9:13:d2:ca:dc:a1:69:6a:
f7:a4:e0:5e:ce:2d:e7:d1:bb:40:2d:d7:dc:6f:62:a8:5d:cf:
c9:29:84:1d:67:cf:a9:62:5b:8e:fa:a2:e4:17:44:3b:f5:b9:
c4:36:50:b7:05:5f:7b:b3:00:7c:b4:6b:9b:c1:20:47:20:bf:
fa:3e:3e:ef:87:07:4e:91:ac:8b:46:9c:0f:7c:8b:26:69:0b:
4e:cb:9f:5c:eb:68:65:da:62:a7:f8:5b:59:3e:b4:e7:c7:0f:
f9:f4:ef:cb:94:30:95:05:cb:f3:b0:c7:ab:c2:d1:b2:86:1a:
bb:e7:f7:43:63:3e:f7:4b:23:21:c4:11:e7:6a:49:8a:61:71:
f1:54:6e:85:8e:99:8c:4b:89:5b:f0:7e:99:1b:ef:0f:91:57:
4b:2e:dd:ee:17:df:e1:81:2f:e7:82:38:0a:25:f4:53:46:b3:
d7:57:25:a1:52:3a:f2:bf:31:0c:db:db:54:8e:c6:9a:4b:ee:
39:bb:d7:d6:33:06:03:f0:c7:96:18:0e:5b:b0:60:bd:93:0a:
e1:3d:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:10 2025 by rpki-client