Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C006124D0C311EF9C883690762E951A.roa
File: 2C006124D0C311EF9C883690762E951A.roa (raw, json)
Hash identifier: aETDSFC2YbDE5WmbdC//rY8KEEyFf0NpVLX7zyKgv6Q=
Subject key identifier: F3:B0:3B:4A:5A:FA:AD:43:F8:92:95:97:4B:30:32:F3:C1:C4:A4:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010647
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C006124D0C311EF9C883690762E951A.roa
Signing time: Sun 12 Jan 2025 08:56:55 +0000
ROA not before: Sun 12 Jan 2025 08:56:51 +0000
ROA not after: Sun 06 Apr 2025 08:56:51 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67143 (0x10647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 12 08:56:51 2025 GMT
Not After : Apr 6 08:56:51 2025 GMT
Subject: CN=678383d7-5435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:60:a8:cd:d6:4b:db:42:a1:7b:f7:4d:ac:
09:10:40:28:6f:41:b0:74:01:42:fe:95:83:bb:02:
8d:36:19:fa:ce:4a:f2:8b:01:c6:71:6d:71:73:6d:
f5:58:ed:8d:5a:62:c9:b5:74:1c:70:f5:a4:dc:5e:
5c:05:d2:1e:03:4c:2a:55:17:1e:34:9d:0b:bf:f6:
7b:db:55:23:87:af:88:95:a2:51:1b:d3:cf:5f:5a:
4f:95:7c:96:5b:49:f4:fd:92:66:31:12:0a:b4:8f:
fd:4a:71:1c:c0:37:5b:91:04:90:77:a6:88:7e:8d:
84:50:71:e2:e7:ca:b1:60:e4:c7:1d:bd:bc:c5:c2:
22:b7:3d:b7:c9:67:8c:3c:b5:02:9a:4a:c8:e8:b0:
51:5d:42:ad:b0:71:27:2a:99:9f:14:94:2f:bb:dc:
2d:e1:1f:09:05:21:21:ce:aa:9e:4e:ed:b8:01:39:
01:74:da:07:38:f0:e8:63:24:0e:8b:a2:ee:cd:85:
d9:16:59:c4:15:64:c1:8c:ea:9b:d7:df:36:7f:a4:
ae:d5:27:97:68:9e:e5:ef:83:c7:da:26:9d:db:9b:
7b:ee:2b:aa:5f:0d:d9:47:e6:f0:af:a8:5b:d5:4a:
e6:e6:a1:f4:56:82:19:d4:68:07:b4:d8:6a:40:98:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:3B:4A:5A:FA:AD:43:F8:92:95:97:4B:30:32:F3:C1:C4:A4:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C006124D0C311EF9C883690762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b4:50:e8:3f:33:f0:02:09:c2:67:e5:3a:eb:51:31:50:c7:
2f:b3:4b:4b:1e:60:15:4a:d4:88:01:20:4c:a0:ed:f3:bb:03:
1b:1f:3a:5c:f6:46:1b:96:92:f4:2b:3d:10:59:08:1b:11:58:
2c:c8:d9:3b:eb:5a:db:77:a6:22:5e:bf:b1:4a:98:87:80:b7:
5e:04:82:a1:cf:ed:0e:bc:bd:56:c9:5f:be:c8:9f:36:9e:a6:
0e:c5:17:0f:71:89:94:38:62:cc:38:c7:80:a6:17:13:14:f1:
7d:ad:18:76:bd:ca:12:c7:45:0e:e0:43:d2:70:89:0c:f2:89:
2c:3e:d4:0e:92:a2:90:47:ad:2e:b6:65:5e:6d:4a:ba:79:e8:
50:a7:89:20:61:88:58:15:5c:df:8f:07:b6:34:3e:56:96:81:
20:56:4a:aa:d0:cd:90:1e:25:28:97:08:18:e0:00:c9:81:cc:
58:9e:7d:ae:3f:da:72:00:8e:16:78:f5:c9:f5:ad:84:67:b3:
3e:25:95:25:d0:b2:87:69:ee:8c:cc:78:33:61:18:72:01:37:
75:d3:40:ec:76:cc:7d:84:55:99:1c:ad:26:62:ed:da:86:35:
10:a6:c4:11:7b:27:56:21:b1:58:8d:8d:b6:bf:eb:33:54:49:
72:2b:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:35 2025 by rpki-client