Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0956B0CEAB3411EFA6593EA2762E951A.roa
File: 0956B0CEAB3411EFA6593EA2762E951A.roa (raw, json)
Hash identifier: 7IahsF1za6ra9UUzMFPj9ylLOOC5qhzfpyo1/IUB2sY=
Subject key identifier: 3B:DD:C8:DF:4D:52:12:E4:B5:9A:63:41:C2:16:FA:13:0B:67:F8:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DA82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0956B0CEAB3411EFA6593EA2762E951A.roa
Signing time: Mon 25 Nov 2024 13:49:05 +0000
ROA not before: Mon 25 Nov 2024 13:49:02 +0000
ROA not after: Sat 03 Jan 2026 13:49:02 +0000
asID: 139057
IP address blocks: 45.200.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55938 (0xda82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 25 13:49:02 2024 GMT
Not After : Jan 3 13:49:02 2026 GMT
Subject: CN=67448051-3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:78:b6:2f:65:cd:c0:50:65:eb:ff:c0:1d:
6f:e5:42:e7:69:57:22:08:c8:42:dc:7c:7d:f0:ca:
27:a5:90:da:9c:cb:c9:c4:2b:7f:f3:57:85:c8:2e:
ef:54:23:8f:bb:3f:4c:a6:90:0e:5b:40:4a:95:c2:
94:e8:e5:55:1b:79:77:fc:d4:5a:b4:19:86:ad:0b:
ea:ec:c8:37:5c:19:0a:60:c0:87:77:9b:6e:cc:c5:
01:7b:55:ff:ae:0c:7a:2c:29:0e:ed:0f:e6:55:8f:
5f:ce:74:c7:33:c2:40:5b:49:0d:4c:3f:05:5a:33:
b5:8d:f8:4a:37:a2:3d:60:d4:bb:41:91:0c:2e:40:
35:54:3a:f5:7b:06:d9:17:d7:59:65:3f:22:55:7c:
ef:ce:3f:cf:f5:1e:14:9a:12:76:a8:53:ef:ff:b4:
62:a6:43:07:bd:6d:65:db:d8:39:c1:85:63:1b:9d:
58:7a:d0:31:03:bd:d5:8a:5e:04:19:85:38:bd:2f:
d4:d9:28:35:6d:6f:bd:e0:d6:74:a9:d9:ea:28:b3:
e6:95:f6:82:61:5d:e8:73:c2:90:c8:bb:ff:12:74:
97:d0:57:3a:2d:ad:6a:d4:5e:9e:04:7e:d8:df:e5:
11:4f:37:14:df:09:83:4f:08:8e:12:11:9e:40:68:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:C8:DF:4D:52:12:E4:B5:9A:63:41:C2:16:FA:13:0B:67:F8:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0956B0CEAB3411EFA6593EA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.110.0/23
Signature Algorithm: sha256WithRSAEncryption
99:14:12:a1:f4:fb:a0:b8:8b:62:fa:16:7f:28:4b:7b:f0:3c:
fb:44:e5:32:51:fc:f1:91:38:7a:b8:b0:5d:f3:40:2d:e5:50:
ec:8d:9b:63:5c:e1:18:9e:c7:28:0b:02:f4:c3:72:5a:01:65:
90:33:29:0f:ce:42:4d:41:aa:77:3c:f0:35:a9:69:b7:ba:00:
8d:cf:9c:cb:fc:71:ba:d6:79:79:0a:5c:37:92:c8:2f:f7:d3:
cb:93:21:44:1e:d9:2c:5f:2d:da:ef:12:c2:6a:19:f3:dc:e1:
b1:5c:58:7b:97:c8:3d:cd:a0:69:8f:99:1a:94:a5:94:52:35:
6e:69:5c:cd:bf:b5:eb:bd:8a:b5:db:45:af:00:42:de:2d:60:
93:68:a2:61:0d:10:59:58:2f:b1:e2:b5:f1:80:b2:16:a4:9b:
74:05:62:cf:91:2a:db:bc:ff:80:c8:09:d2:4f:42:d5:4b:e3:
37:fd:76:d7:f6:e4:13:93:f3:92:e8:92:bc:65:9a:9f:94:ee:
8c:43:b6:43:ba:1d:20:cf:d3:d2:8a:36:65:6f:fd:dc:85:1d:
7d:1e:50:0b:1f:6f:eb:da:2f:85:c6:6d:f1:60:3f:1e:e7:84:
7c:7a:70:4d:67:33:dc:2b:42:cb:2d:95:b4:89:92:e2:4f:b6:
97:4f:ff:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:00:22 2025 by rpki-client