Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3119CAB60A11EFB26C706E762E951A.roa
File: 2A3119CAB60A11EFB26C706E762E951A.roa (raw, json)
Hash identifier: 8IeR4iV20mSmTDVXku6GEQyU02MzEnqC+cO4Ty3mzoI=
Subject key identifier: CF:80:22:B1:78:02:EE:39:5F:B5:21:17:83:0E:CA:31:1A:69:0E:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E19A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3119CAB60A11EFB26C706E762E951A.roa
Signing time: Mon 09 Dec 2024 08:47:04 +0000
ROA not before: Mon 09 Dec 2024 08:47:01 +0000
ROA not after: Thu 06 Feb 2025 08:47:01 +0000
asID: 150706
IP address blocks: 45.192.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 08:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57754 (0xe19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 08:47:01 2024 GMT
Not After : Feb 6 08:47:01 2025 GMT
Subject: CN=6756ae88-cac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:34:ed:89:7a:07:13:26:53:e5:c8:56:46:
7c:93:64:83:c6:5d:11:8f:25:a3:3c:71:64:0e:4a:
21:e5:17:bd:22:60:03:f8:95:ac:c0:59:47:af:a6:
f0:e8:20:ac:6e:4c:c1:3e:74:cc:b1:a9:98:28:c2:
98:5c:ce:a6:59:89:ce:a2:3d:e6:11:92:2f:51:66:
00:1c:bf:aa:6d:33:21:f8:fe:e0:e9:4c:2d:30:2a:
0a:03:d5:01:af:f7:34:74:e6:93:da:1c:af:5d:c8:
79:3c:6d:c6:73:b6:b7:82:af:7a:6c:34:d1:0e:70:
7d:26:13:9f:a5:c9:20:64:3c:58:7c:fc:05:0a:62:
88:c1:6f:ad:9f:04:9b:a0:cb:64:d0:97:02:78:6e:
ff:08:ea:9f:03:83:76:d0:ca:88:65:bb:46:5f:30:
3a:9a:bd:df:31:e0:69:70:5f:ac:1d:92:16:30:60:
1b:ca:d0:01:18:2e:4c:65:89:70:61:4f:ed:59:d7:
bb:bb:11:d8:fd:de:d0:63:c5:e6:a6:ae:07:36:3a:
2a:47:bd:2d:c1:13:35:2e:d7:37:cf:f1:8d:fb:f2:
3c:3d:53:fd:ce:7f:09:05:59:83:43:80:2c:0a:44:
63:98:2a:70:c3:49:05:3f:83:1d:27:db:7d:e9:6a:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:80:22:B1:78:02:EE:39:5F:B5:21:17:83:0E:CA:31:1A:69:0E:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3119CAB60A11EFB26C706E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:e7:3d:37:88:2e:ab:7a:42:22:f4:38:f7:44:9f:8b:be:bb:
3b:77:7f:90:b5:60:2c:a1:6e:85:be:12:19:3d:5e:82:d3:1d:
11:2a:bd:c9:76:bc:bf:84:86:4a:7b:f4:df:da:5b:71:17:37:
3d:7a:a6:05:fc:c9:88:ef:83:21:3a:85:dc:30:05:fb:06:8a:
91:90:b1:75:a2:88:df:61:7f:97:52:f2:2b:40:e2:26:7d:12:
06:43:25:87:8c:bb:5b:8e:ae:7f:fd:9c:bb:bd:b9:3e:e6:c7:
62:27:ea:76:80:a9:72:7b:b6:ef:9f:57:ff:38:24:08:33:43:
24:5e:ad:4e:1a:49:4f:23:ca:ce:fc:d3:62:00:46:e2:99:f5:
17:97:2a:76:7a:65:e3:75:50:38:88:18:03:2f:4e:90:f2:01:
80:89:88:9b:33:e6:af:82:c6:97:6b:41:10:bd:d4:e3:69:36:
9e:f7:39:73:8d:ec:96:c9:30:bf:fd:af:4d:6f:09:6e:e6:03:
dd:f8:2f:7e:57:b7:b6:38:a0:97:e2:35:e5:c1:be:f7:d7:b4:
71:55:b8:2e:ac:08:fc:cb:f8:9b:70:89:d3:b2:0c:b3:a1:60:
13:2e:18:2b:c7:00:19:9f:e8:6c:bf:53:27:3f:43:13:bc:2e:
cf:eb:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:58 2025 by rpki-client