Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0892B402C3F911EFBF21074E762E951A.roa
File: 0892B402C3F911EFBF21074E762E951A.roa (raw, json)
Hash identifier: Xd/uRoDF8w9LvVOMFKo67wCP1U8RN8E+ACcMztOuSHI=
Subject key identifier: 30:40:56:EC:F6:D6:C6:3E:B5:B5:F1:E7:3E:66:EA:73:60:96:C9:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0892B402C3F911EFBF21074E762E951A.roa
Signing time: Fri 27 Dec 2024 02:19:43 +0000
ROA not before: Fri 27 Dec 2024 02:19:39 +0000
ROA not after: Fri 12 Dec 2025 02:19:39 +0000
asID: 984
IP address blocks: 45.194.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61324 (0xef8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 02:19:39 2024 GMT
Not After : Dec 12 02:19:39 2025 GMT
Subject: CN=676e0ebf-1146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:69:b0:6f:68:b9:9f:5f:2c:12:30:b3:e4:5d:
04:28:c7:8a:5f:ff:c2:df:1f:d7:28:35:84:df:68:
2e:cc:28:c2:50:6a:12:8b:51:0c:a8:92:3d:d9:38:
84:5c:a6:85:bf:0d:ae:ec:d3:23:3d:40:bb:72:91:
e7:4e:f9:3b:1b:7b:b1:ce:68:dd:df:37:23:b6:5c:
8a:0b:f7:14:d2:cf:68:64:23:76:ce:ce:f3:61:7c:
14:a7:58:6b:a8:cd:35:40:fd:f0:2c:26:11:e4:97:
b7:5d:b1:91:36:50:20:41:ad:2c:f6:63:db:b4:58:
a4:76:99:ce:96:eb:a8:78:cd:c8:86:cd:19:cb:66:
84:4d:39:da:2b:f1:ba:95:b1:e8:7a:a3:b7:ef:a7:
a9:4a:ac:bd:4d:b8:3e:8a:eb:fc:15:1d:f5:e5:b2:
5c:1b:75:a6:97:e2:ff:73:cb:a0:59:81:c7:4b:c6:
55:91:c9:2a:7a:e5:f6:78:d9:62:89:37:65:cc:03:
7d:ce:e1:c8:45:53:45:a8:13:3c:66:9a:81:43:8e:
88:34:9a:2b:41:5f:73:d2:68:e6:24:68:ce:0c:c4:
2c:d6:ca:1e:bf:2a:17:10:a1:d6:75:f4:86:79:d2:
f2:f9:18:ce:bc:5c:ea:69:3b:97:80:a2:86:97:7f:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:40:56:EC:F6:D6:C6:3E:B5:B5:F1:E7:3E:66:EA:73:60:96:C9:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0892B402C3F911EFBF21074E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.88.0/24
Signature Algorithm: sha256WithRSAEncryption
77:46:37:30:55:55:45:8c:72:ba:fc:fc:36:13:e2:4b:20:d8:
a1:85:d1:a6:c1:e8:e9:89:ec:53:ac:29:36:71:04:ac:3a:25:
e9:a9:ca:c8:3d:38:0e:c7:03:d4:a6:cf:22:d9:df:c1:76:7e:
40:96:97:7c:c2:2c:69:f2:c6:b5:93:c1:e4:0b:f0:e9:04:0f:
71:91:4a:a0:ac:6c:92:a9:ca:c7:03:c4:fc:7e:22:e5:55:1f:
8e:bf:4a:b4:e6:b3:ea:e8:9c:7f:3c:8e:9e:90:af:0c:8b:43:
e1:a7:00:84:30:c0:11:9d:65:2f:71:bd:03:8c:78:fc:fa:0a:
79:93:ce:6c:6d:2c:db:3f:c4:95:2e:1c:69:25:f8:ef:51:6a:
54:f5:f2:ba:fb:34:03:8f:23:32:ee:fe:3f:68:40:35:fb:2c:
a1:45:43:a1:d8:cc:0c:d5:3d:9b:34:99:d2:8d:9d:80:a5:b9:
f6:43:5f:bc:86:78:02:8e:39:4f:d3:a4:24:13:4f:a9:db:c7:
3b:96:4c:87:df:0b:e4:62:a2:0a:3a:e9:3c:83:4a:76:3f:3a:
b4:f4:49:ca:ba:59:b8:13:8b:dc:fb:68:b0:45:73:76:1c:46:
b7:c9:09:f7:1b:a5:21:1e:65:af:db:f5:91:ec:1d:06:eb:fc:
51:bc:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:45 2025 by rpki-client