Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FC0CFD2C38C11EFBA184394762E951A.roa
File: 1FC0CFD2C38C11EFBA184394762E951A.roa (raw, json)
Hash identifier: Nu5eDyudDibJj/Bp3iGXebZRQJZl/9b7gZBeZFSOl1M=
Subject key identifier: 30:69:03:CE:2E:89:A6:EE:BA:B9:10:8E:40:AE:5C:96:57:02:E0:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FC0CFD2C38C11EFBA184394762E951A.roa
Signing time: Thu 26 Dec 2024 13:20:07 +0000
ROA not before: Thu 26 Dec 2024 13:20:03 +0000
ROA not after: Sun 12 Dec 2027 13:20:03 +0000
asID: 17561
IP address blocks: 45.196.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60597 (0xecb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:20:03 2024 GMT
Not After : Dec 12 13:20:03 2027 GMT
Subject: CN=676d5807-35ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:fc:90:11:1d:7c:c1:cd:b3:d0:d8:ef:17:
f2:04:ea:93:f8:c6:75:b0:a0:18:bb:db:ab:dc:cc:
39:84:c4:0d:9f:aa:35:bb:1e:8e:5b:23:87:5b:1d:
0a:1a:8b:36:dd:3e:2f:29:c8:c8:31:68:08:5d:b6:
e5:30:3f:a3:63:89:00:88:8e:8b:3a:34:a5:9b:0d:
e5:45:8c:17:d9:76:ba:ba:a4:af:a9:03:6b:75:24:
d7:8a:7d:9e:65:82:b3:33:49:1c:1a:ab:5a:bc:6f:
c5:42:ec:c9:e8:9c:31:30:73:b4:bc:28:44:10:95:
1f:2f:e8:44:2a:bb:85:96:1f:fd:88:8c:ac:d0:68:
f7:9c:1f:0b:c0:9c:5a:3e:31:7d:1e:00:15:a7:45:
6b:71:19:af:e0:dd:9f:2e:6a:b0:0b:eb:6c:6e:09:
c1:a7:ec:0c:00:13:68:29:4d:c6:4d:06:81:8a:fa:
92:09:1e:dc:e1:30:06:c2:70:39:83:a2:58:3d:9d:
55:e9:86:92:85:73:4a:74:9a:7f:a9:e1:91:02:6d:
f1:c6:ac:8e:3c:df:21:ba:b4:9f:83:4b:5b:81:ce:
5c:ec:9e:9a:2d:a3:23:ad:25:8d:c8:6a:ae:c5:f7:
24:cf:90:f3:6b:77:37:df:c6:09:a8:40:2a:67:1c:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:69:03:CE:2E:89:A6:EE:BA:B9:10:8E:40:AE:5C:96:57:02:E0:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FC0CFD2C38C11EFBA184394762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.204.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:22:cd:dd:01:e8:5a:e3:69:97:53:11:ef:b7:d3:ff:7c:0f:
31:35:4e:22:3d:d5:0b:a8:87:04:2c:47:b6:29:e2:51:64:dc:
87:b9:01:10:7f:60:8b:a5:c4:08:35:58:e6:6c:f7:d4:52:b4:
8b:4b:e4:5c:33:a6:6d:b5:dc:5d:cc:8a:6c:fc:3f:c2:33:20:
31:94:3a:71:23:fd:64:f8:78:35:eb:4f:f6:08:07:9a:3a:d7:
9c:20:54:1c:5c:92:2d:16:52:7e:bf:03:20:f0:93:14:a5:6b:
3e:e4:98:ec:39:b5:79:8d:83:53:82:f5:90:5b:6c:d1:5d:2e:
ac:55:78:1f:ab:6f:b0:49:ac:fe:08:9a:a2:15:c2:90:56:82:
99:45:0a:6b:62:8b:6c:a6:ce:48:20:39:33:5f:1e:42:33:9d:
f1:32:2d:15:9d:04:ee:59:71:37:cc:73:44:45:ce:5c:8c:30:
f3:96:d4:eb:83:63:f7:79:e3:ac:01:7c:0c:97:e9:31:f6:be:
6e:87:e8:40:5d:c6:f0:2e:a6:a5:90:83:1e:ff:ea:d6:57:8a:
10:a7:89:3c:45:7c:41:14:2b:e5:cb:b5:ff:f5:a3:57:54:c5:
f1:a0:7e:9f:e3:ee:32:ff:a3:2c:7f:65:59:97:0f:6c:2c:f0:
06:43:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:42 2025 by rpki-client