Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15A84D9EC3E211EFB6AE20B0762E951A.roa
File: 15A84D9EC3E211EFB6AE20B0762E951A.roa (raw, json)
Hash identifier: 2hxdft3QaEoDuj/xc/eJxj8O1iqWioe/D8Vx2/6bUQE=
Subject key identifier: 41:FF:CE:EB:50:F9:35:F5:38:8C:33:67:42:08:1F:0B:B5:52:37:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15A84D9EC3E211EFB6AE20B0762E951A.roa
Signing time: Thu 26 Dec 2024 23:35:27 +0000
ROA not before: Thu 26 Dec 2024 23:35:23 +0000
ROA not after: Fri 12 Dec 2025 23:35:23 +0000
asID: 984
IP address blocks: 45.192.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61185 (0xef01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 23:35:23 2024 GMT
Not After : Dec 12 23:35:23 2025 GMT
Subject: CN=676de83e-9ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:0a:f5:3a:e9:75:e1:17:c6:12:9b:be:24:
ba:c9:26:08:e1:33:32:e5:24:65:10:17:32:c8:f5:
46:1c:d7:c7:81:f6:4d:b3:c2:3d:6f:ad:f0:26:fc:
4e:bd:f1:25:c4:ae:c3:6b:d1:6f:f3:53:99:47:83:
65:77:2a:dc:2a:ea:de:c2:f0:17:3d:09:6b:1b:c8:
7d:06:37:34:e6:83:4c:1b:99:f8:66:19:29:85:1a:
c9:a2:53:37:81:91:96:b9:36:ed:b8:f7:9b:fe:fc:
f4:25:98:88:5c:ef:be:3d:36:67:f7:53:4d:2d:c9:
d8:9a:38:22:b5:64:76:10:ef:d6:4f:df:85:86:e4:
5b:2d:5c:89:eb:26:f4:44:e8:50:de:d3:1c:79:f6:
09:9e:b8:5d:83:7f:54:62:0f:aa:e0:23:27:ac:21:
a8:ba:3a:b7:95:97:17:c2:fa:4f:d7:5f:be:c9:1b:
28:6b:3a:cb:de:89:0e:eb:5d:41:78:3f:e1:ad:19:
e5:4f:68:23:5a:2b:e5:fd:ef:4a:ab:d7:3b:3e:be:
a7:82:cd:83:77:b4:2e:23:18:94:b3:53:ac:60:d4:
a0:f5:c5:1d:b0:b0:6f:1b:2e:9c:7b:de:5b:b6:42:
c3:08:66:ee:26:df:32:db:6f:57:89:2e:e1:27:2e:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FF:CE:EB:50:F9:35:F5:38:8C:33:67:42:08:1F:0B:B5:52:37:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15A84D9EC3E211EFB6AE20B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
89:18:cc:39:34:01:44:07:af:dd:71:48:ba:61:84:00:c2:32:
1c:7c:d0:71:fb:15:38:79:ee:ad:25:bf:79:51:33:6f:c5:19:
30:6f:26:ca:eb:62:26:1c:fc:4a:37:52:cc:cb:70:43:a0:da:
18:cb:5f:44:ad:9b:4c:cc:97:c9:cd:14:29:60:ad:47:7c:75:
c1:f3:b3:86:9e:51:31:c6:95:f4:11:7c:a6:96:23:a7:02:37:
8e:5b:03:28:c6:69:8f:62:e2:d4:a8:7e:b9:a8:3b:26:fc:99:
52:2f:c5:51:d0:e9:11:ce:9d:29:76:d6:14:ab:fa:17:65:58:
2f:99:2d:e3:2f:66:91:61:ca:14:b5:8f:01:e7:8d:cf:c7:ce:
b6:b7:74:22:d7:c1:3e:b0:e4:c6:75:81:02:05:03:0d:dc:f8:
51:65:1b:4d:5f:a1:bf:bc:54:ae:da:b8:ad:bd:f7:d4:a0:38:
fe:0f:5d:e3:fe:a6:04:0a:a5:d0:97:a6:27:8f:a4:6e:e8:a2:
4e:00:a3:83:2d:c7:b4:00:00:69:b4:b1:ee:39:f8:68:16:d5:
ec:57:26:f0:fc:91:ba:55:5d:fc:60:a3:11:74:a7:65:8a:1d:
e1:7a:95:67:2f:34:de:d1:88:e4:f6:79:ce:ce:68:81:74:f3:
c6:45:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:33 2025 by rpki-client