Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/092461F2B5FF11EFAE69A5A7762E951A.roa
File: 092461F2B5FF11EFAE69A5A7762E951A.roa (raw, json)
Hash identifier: nJt1vhD4LMUr5xL7hT6K3xJG4Fe140Glowm2/Sz8vjk=
Subject key identifier: 4F:E8:1C:33:95:1B:67:DC:E6:DA:6F:8D:BA:C4:2A:A6:D3:87:D4:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E172
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/092461F2B5FF11EFAE69A5A7762E951A.roa
Signing time: Mon 09 Dec 2024 07:27:25 +0000
ROA not before: Mon 09 Dec 2024 07:27:21 +0000
ROA not after: Thu 06 Feb 2025 07:27:21 +0000
asID: 63787
IP address blocks: 45.192.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57714 (0xe172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:27:21 2024 GMT
Not After : Feb 6 07:27:21 2025 GMT
Subject: CN=67569bdd-7f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:c9:6d:50:e6:a8:5f:37:08:88:26:f0:55:
dc:a4:2c:46:db:59:cf:10:2f:72:3d:79:08:0a:6b:
76:80:35:a5:c4:5b:9e:c5:0f:a8:32:73:69:67:5f:
16:44:03:52:76:06:ad:c0:8c:36:24:ed:64:71:5f:
d7:19:8f:79:be:5d:14:e3:8d:09:50:37:f4:a1:e8:
cc:16:c5:a0:43:4c:7b:8b:f8:f3:9d:b4:09:72:34:
c3:0d:06:ec:4a:6e:89:3a:63:29:a3:15:1d:3f:f3:
a7:41:11:25:cf:39:f9:28:96:82:02:79:95:c7:99:
32:ea:30:15:93:e2:8a:c6:13:b8:92:ae:83:7b:c5:
8f:e2:26:43:9f:94:30:18:95:80:e5:9c:fb:35:23:
8a:01:f9:0f:f9:28:a7:65:fc:1e:20:bd:48:31:a0:
57:e5:83:20:50:0d:74:5e:6f:be:8d:9f:ea:90:e0:
1b:a7:4f:b4:bf:a6:15:06:3b:37:5c:e2:9e:04:ae:
68:66:5b:8d:66:5f:bc:b5:3d:77:5e:00:ce:e0:fa:
51:d4:9e:b2:55:99:7c:3d:26:0b:91:cd:aa:0a:3b:
9d:31:85:c5:f0:81:62:32:fe:cd:96:87:bc:29:2a:
af:05:1e:60:81:8a:b6:65:27:fe:b9:70:86:6b:07:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:1C:33:95:1B:67:DC:E6:DA:6F:8D:BA:C4:2A:A6:D3:87:D4:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/092461F2B5FF11EFAE69A5A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d1:2f:bb:f2:3d:d9:20:d6:4d:7d:4c:a3:47:45:b1:b5:b5:
e3:33:0b:0e:bb:46:88:e1:15:0d:9d:81:5d:69:b9:75:0f:0f:
d6:ec:77:40:51:4f:dd:1b:45:d0:5e:a0:b6:a9:59:1d:2f:b9:
0e:d0:06:46:50:fc:b8:c2:36:d4:10:e2:8b:d1:ac:ae:7b:57:
a1:c8:7f:4e:48:d2:ab:3d:d8:ff:7c:9b:e5:0d:9f:b2:87:95:
71:1b:ae:21:ec:8e:89:6c:2e:6d:73:a6:a0:c0:24:69:96:f8:
77:26:cc:1d:f2:8c:3b:a5:dd:c6:72:36:70:ff:b5:97:5e:8e:
25:8b:7e:f1:33:1c:33:2a:3d:37:17:a8:39:9a:fd:12:3d:b2:
7e:a6:03:ca:74:96:4e:52:0d:bd:bb:25:e1:1a:cf:95:71:75:
97:76:47:15:89:b0:9e:c5:ff:86:9c:6f:68:f7:bd:69:fa:e6:
a1:66:7f:00:2d:b2:68:9d:8d:95:9d:ab:b8:5e:f7:05:cd:53:
05:f9:84:3e:5f:99:6c:e6:fa:79:2e:94:0d:59:55:7a:3b:e0:
b6:84:1c:50:ee:7f:c0:fc:41:85:62:e8:b0:b3:15:95:5a:21:
1d:6c:f0:6b:a8:6f:eb:7d:16:d2:aa:37:cc:05:17:e1:aa:85:
15:b9:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:56 2025 by rpki-client