Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C8093C4D3DD11EFB923EA46762E951A.roa
File: 0C8093C4D3DD11EFB923EA46762E951A.roa (raw, json)
Hash identifier: Z50BdJYAvOsufQuOUuN9KQ7Fs2YVPoDaxyZJGk4QwVU=
Subject key identifier: 71:FA:FF:21:84:54:7B:5C:8A:62:C4:40:04:58:26:49:D4:3D:64:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C8093C4D3DD11EFB923EA46762E951A.roa
Signing time: Thu 16 Jan 2025 07:39:42 +0000
ROA not before: Thu 16 Jan 2025 07:39:39 +0000
ROA not after: Fri 28 Feb 2025 07:39:39 +0000
asID: 398443
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67796 (0x108d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 16 07:39:39 2025 GMT
Not After : Feb 28 07:39:39 2025 GMT
Subject: CN=6788b7be-7b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:62:51:9b:b1:9d:40:76:53:25:bc:c4:35:
4a:1d:92:c1:39:ec:45:e1:01:98:dc:99:00:8a:1f:
ab:cb:b4:69:fd:fd:63:91:bf:e7:b6:81:9f:2e:4a:
1f:dd:ff:ea:c1:71:fc:9a:91:6f:1e:b0:aa:0a:67:
47:f6:0a:4e:16:4d:62:99:76:2a:67:9b:2f:8d:96:
35:e7:eb:ae:5b:59:e6:db:da:6f:ed:9e:93:ab:c2:
e3:45:34:3c:a1:0f:b2:61:4b:b8:71:33:eb:01:7d:
8c:7e:f8:13:89:57:c8:42:d4:90:1f:3a:0c:4a:ea:
e7:f8:bd:ad:f6:ff:5c:8a:f2:e1:77:d7:bf:e0:a0:
38:76:c3:31:52:4a:e3:06:39:3c:ba:0a:96:3f:43:
7f:a3:fa:11:c8:11:79:f3:ec:41:26:e4:89:b1:32:
ad:61:86:d9:7b:14:09:9a:85:48:bf:04:6b:4c:05:
1b:60:cc:d2:82:28:98:bd:d3:f6:44:45:6c:63:a5:
a5:ce:4e:e9:d5:68:a9:05:d9:d9:6f:5b:08:a6:bb:
b2:cb:3b:05:ce:74:50:aa:13:77:4a:11:95:df:15:
4d:3a:5a:7b:f1:80:99:8f:f7:73:52:88:bb:19:02:
9c:59:0a:ca:5a:84:fa:ef:3b:07:88:6c:2b:40:12:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FA:FF:21:84:54:7B:5C:8A:62:C4:40:04:58:26:49:D4:3D:64:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C8093C4D3DD11EFB923EA46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
96:09:23:9e:4c:8a:ee:7d:36:ba:ab:f7:22:c7:97:f1:89:1f:
c6:d6:70:f1:5f:2d:b6:21:d1:09:87:ec:f4:fa:c3:77:7f:f8:
db:65:ea:64:db:6f:de:d9:28:f4:de:86:20:30:dd:c7:85:50:
b8:eb:34:00:f5:ed:4b:84:8b:ae:ac:4d:bf:b8:86:76:03:61:
d1:18:36:9b:40:c5:02:5c:76:da:3b:c1:fc:05:bc:9e:92:47:
2e:7c:24:63:0b:ae:8b:e8:83:f7:4a:59:0c:58:a2:06:db:a3:
47:6c:a9:b8:09:3e:83:08:7c:4e:3c:5c:f5:ff:d5:3d:1f:30:
04:8d:c8:84:39:71:96:e7:59:c7:6e:6a:fb:f2:1d:83:bd:d5:
69:f8:a0:74:5a:a4:8d:33:93:7a:5e:ab:69:33:d2:5f:0a:ec:
26:23:52:0c:96:e1:47:6f:66:73:3d:2a:91:cc:56:07:6a:20:
ad:0d:01:e7:da:fe:df:47:a3:27:fc:ba:5a:dc:f8:2a:57:af:
9b:52:64:79:01:19:42:d5:a7:77:0c:c4:cf:a4:9a:e9:28:55:
d4:ec:0c:a3:5e:c8:6e:48:23:fb:60:25:c7:e9:a1:92:9e:93:
62:11:39:5c:a0:03:d2:03:a9:ff:43:8f:ae:8a:57:34:20:5d:
bc:66:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:43:33 2025 by rpki-client