Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A1EAEC0C38F11EFB79092A5762E951A.roa
File: 1A1EAEC0C38F11EFB79092A5762E951A.roa (raw, json)
Hash identifier: 6FzuMt/NjC/0QQVZrIraaBDq5SDVvG0WmCQwZPWgsKE=
Subject key identifier: 61:3D:A1:61:D2:FF:1E:8D:10:18:24:83:48:06:D9:07:74:4A:07:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A1EAEC0C38F11EFB79092A5762E951A.roa
Signing time: Thu 26 Dec 2024 13:41:26 +0000
ROA not before: Thu 26 Dec 2024 13:41:22 +0000
ROA not after: Sun 12 Dec 2027 13:41:22 +0000
asID: 17561
IP address blocks: 45.196.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60629 (0xecd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:41:22 2024 GMT
Not After : Dec 12 13:41:22 2027 GMT
Subject: CN=676d5d06-0d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:d1:55:91:58:ac:d0:d1:14:77:17:9f:f1:
89:c3:61:c0:d6:d6:85:89:74:73:2b:90:07:34:bd:
81:ee:52:c4:79:3e:32:a9:1c:af:4a:3a:af:9b:87:
c9:d3:99:31:60:4e:4c:eb:87:1c:b3:fd:d7:3a:54:
8c:8f:14:61:11:17:8e:c3:93:f7:78:26:24:5a:6a:
00:9a:b4:75:e2:c4:2f:e9:c4:c5:83:81:56:8d:56:
16:09:46:26:85:97:ac:e2:41:a8:97:11:fe:60:51:
7e:b4:c6:5d:f6:a5:50:8b:59:92:14:b4:75:35:dc:
61:08:96:b3:e6:cf:df:87:64:67:7e:6d:9f:b7:3a:
a3:d0:08:2d:f7:96:ea:85:16:42:78:36:ed:bf:be:
ea:17:59:ff:58:87:fc:c4:44:2c:73:b1:59:c8:6f:
f8:e9:6b:89:79:50:4d:ca:d1:5a:a0:7d:92:75:c3:
56:4a:11:2c:4e:a8:83:cb:9d:c6:3d:77:0d:e5:2d:
8d:31:52:66:46:a7:4c:bf:a6:0a:08:b5:a1:77:a9:
f5:74:d8:4e:f0:41:10:96:54:36:11:ee:e6:e4:12:
6f:06:fa:e5:11:e7:52:6a:67:99:62:97:43:dc:75:
ca:15:61:c1:76:90:20:89:d4:10:3b:36:8a:43:94:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:A1:61:D2:FF:1E:8D:10:18:24:83:48:06:D9:07:74:4A:07:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A1EAEC0C38F11EFB79092A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.220.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:25:49:19:f6:a9:ee:11:f2:1f:d7:6d:32:1f:27:74:d1:90:
9d:8c:b0:8d:98:34:de:bf:11:23:80:00:8a:4a:8e:c5:e7:38:
0b:45:66:9c:57:34:2d:bd:af:d8:c1:a5:8d:f7:8c:42:91:ff:
2b:93:80:f4:0a:91:fe:b8:a5:97:82:85:4e:cf:00:44:f2:8d:
2f:45:15:70:18:b3:b4:a0:8e:17:ae:a4:87:65:82:5d:a8:8b:
31:08:66:b0:85:d2:37:5e:47:f5:6e:e8:cb:d7:e9:08:fc:31:
b4:57:41:30:7f:5e:b8:26:1b:be:de:6e:a9:1d:aa:7e:7a:7c:
43:86:fc:30:a6:d3:16:44:2f:14:70:b6:a8:e6:2c:25:32:62:
ee:cc:ea:a3:69:ff:76:fe:87:2c:07:e0:47:02:ac:36:d2:a1:
22:92:fb:fb:62:8f:ff:e1:ad:47:e6:5f:5b:85:2e:88:39:e7:
88:f5:b6:4b:76:c7:15:8b:ae:cf:41:56:32:17:de:60:7e:df:
b5:3d:74:3b:1e:a4:3c:77:74:05:dc:3d:c6:7b:8b:6e:60:4f:
ac:bc:23:06:a1:9d:c6:e7:e9:ec:41:e9:97:df:b0:39:66:f0:
b8:65:7f:7a:00:3c:41:64:74:ae:20:87:37:ba:e7:19:b6:a3:
ec:83:cf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:59 2025 by rpki-client