Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C719600CC1A11EF9B544872762E951A.roa
File: 0C719600CC1A11EF9B544872762E951A.roa (raw, json)
Hash identifier: j4xW0LVzjM6nkCuKc4qzFptt8HHIJuGc7Ht84E2JTpY=
Subject key identifier: 4D:2E:36:5B:75:BB:BE:C0:54:6D:75:FB:5F:69:23:05:61:C7:70:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F891
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C719600CC1A11EF9B544872762E951A.roa
Signing time: Mon 06 Jan 2025 10:36:12 +0000
ROA not before: Mon 06 Jan 2025 10:36:08 +0000
ROA not after: Mon 10 Feb 2025 10:36:08 +0000
asID: 395886
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63633 (0xf891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 10:36:08 2025 GMT
Not After : Feb 10 10:36:08 2025 GMT
Subject: CN=677bb21c-a9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:f0:e4:9b:c0:03:46:72:39:23:31:f4:74:
cd:6d:fc:ad:f8:f2:6a:cc:fb:08:90:c6:18:c8:2d:
d4:ab:88:a9:41:c9:56:81:37:d3:ec:ec:32:db:12:
3a:1a:90:41:f3:48:6c:92:d8:64:79:57:b7:ad:4f:
e5:3b:76:1e:dd:06:db:52:a5:94:23:d9:c4:2a:c4:
8b:99:f2:e9:fc:49:95:b5:14:5f:ac:9f:03:92:cc:
bf:57:28:60:6a:5f:40:29:02:b8:34:e7:29:3a:d1:
51:0c:8c:0d:b2:95:27:31:87:ff:45:2f:b2:6d:e7:
3d:c0:62:a4:64:ea:96:22:ea:0c:89:a9:27:44:cf:
0b:36:03:d3:03:4a:fb:a8:49:52:c3:39:c8:27:c9:
df:a9:48:1e:07:88:5d:ad:94:df:2b:1a:ef:6d:a3:
8b:f4:cf:6c:76:48:2c:34:20:85:0e:35:3f:63:41:
63:32:b9:cf:3e:28:19:66:41:5a:f7:f8:dc:35:b9:
95:94:b8:a7:bd:17:ab:a2:5c:ac:7d:b0:b0:99:87:
d4:03:3f:c1:ad:68:72:f2:ba:00:df:b8:a1:0c:09:
89:03:b9:b5:95:1d:3f:ce:b7:1c:03:21:cb:08:c0:
21:f7:63:20:76:a0:29:5b:54:c5:d5:8a:b2:85:32:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:36:5B:75:BB:BE:C0:54:6D:75:FB:5F:69:23:05:61:C7:70:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C719600CC1A11EF9B544872762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:2a:21:12:2a:50:56:db:8b:cd:c4:45:c6:17:ae:48:85:7a:
6b:c1:03:d7:ff:5b:84:b4:9e:83:34:6c:5c:d3:6f:05:f9:a9:
68:55:b3:00:51:b0:43:df:5c:d7:11:af:e4:5a:66:f5:cc:98:
0b:25:0a:dc:11:07:f3:2f:6d:2b:75:bb:53:2d:f0:05:a4:60:
ce:15:09:13:ac:85:91:c4:21:81:35:a4:60:dd:5e:48:76:ae:
08:54:f9:86:c1:28:87:2d:f6:48:99:20:d8:a5:af:69:7b:5d:
83:e2:49:33:36:6f:5a:b4:16:34:85:88:59:34:31:bf:f5:23:
c3:35:16:7e:85:f2:34:35:02:3c:ad:e4:ba:f0:f3:d9:b9:8f:
b7:c7:22:da:02:6d:7a:ae:ca:91:1b:c4:cd:d0:2c:35:92:61:
6f:e0:06:9e:bf:16:94:00:48:7e:9c:08:d6:f4:02:de:5b:08:
4f:b2:03:9f:b1:cb:f0:ba:d1:1c:48:70:f2:7d:c3:04:2c:ec:
cd:be:0d:24:ed:9e:9b:62:d2:71:75:4d:ff:c5:30:68:49:0e:
8e:4c:49:78:92:e2:a0:4e:e5:6b:ec:8d:f4:1b:75:ef:67:a2:
21:4b:0e:e3:ad:3a:eb:04:f9:bb:cb:0f:57:4a:c8:09:f7:0f:
a7:cc:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:51 2025 by rpki-client