Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DA95B18C3F111EFBBB28993762E951A.roa
File: 2DA95B18C3F111EFBBB28993762E951A.roa (raw, json)
Hash identifier: V1NWXXt3N8xl2+vGKqaZayMqLEdLqs/rRyg/+Xeccn4=
Subject key identifier: 6C:C8:F3:07:3E:2E:F4:EE:34:F0:26:A0:3D:C7:00:B3:0F:A4:9E:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DA95B18C3F111EFBBB28993762E951A.roa
Signing time: Fri 27 Dec 2024 01:23:29 +0000
ROA not before: Fri 27 Dec 2024 01:23:26 +0000
ROA not after: Sun 12 Dec 2027 01:23:26 +0000
asID: 17561
IP address blocks: 45.192.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61266 (0xef52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 01:23:26 2024 GMT
Not After : Dec 12 01:23:26 2027 GMT
Subject: CN=676e0191-dca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:57:66:6e:2e:67:5c:8e:ce:77:b8:ac:3a:
95:1b:ff:32:f1:9e:1e:6e:c6:86:97:05:e7:59:62:
5c:ad:c6:34:b7:94:42:f9:fd:fb:cf:04:f9:81:a8:
3c:f0:d9:63:d3:b0:7d:e9:30:15:8f:eb:6a:e1:f2:
7c:d0:ff:b8:09:c0:4e:54:a1:ce:6a:5b:58:b7:33:
45:0b:52:5e:3d:6b:bc:df:35:d0:87:76:b5:bc:1a:
9d:7d:3a:d7:ad:f4:e6:74:81:47:17:75:f5:b8:cb:
ed:c6:73:dd:22:88:16:67:71:a7:0e:34:84:8f:ed:
42:ed:44:1d:41:96:1d:8e:bb:e4:fd:be:35:e6:31:
54:ad:28:18:bb:ce:e3:70:5e:b5:58:99:f0:4b:8f:
1b:73:a7:19:99:bf:d3:b2:a8:9a:ed:8a:bf:a4:35:
9f:09:8a:2d:d9:31:a7:f2:05:67:ca:cd:d8:a1:c3:
08:fa:fc:01:bb:fe:e0:aa:6e:cf:55:15:e7:ea:d7:
23:84:05:7a:5c:75:4e:24:e1:e5:0b:4c:72:20:67:
42:4f:9e:db:59:24:d8:b9:c0:73:a4:62:9f:21:82:
6a:32:f3:99:7f:a0:53:ac:05:5e:42:70:0d:6e:d8:
05:ff:62:58:42:c2:07:c7:d4:85:82:42:e9:33:ee:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C8:F3:07:3E:2E:F4:EE:34:F0:26:A0:3D:C7:00:B3:0F:A4:9E:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DA95B18C3F111EFBBB28993762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:1d:9e:a6:f5:0a:5d:fa:75:99:48:1b:7d:11:9e:5c:c8:f9:
2c:eb:1c:09:4d:69:9a:09:23:3e:e0:b5:5e:2c:0c:3f:40:54:
6d:15:92:e5:d5:83:50:d3:a6:77:62:7e:be:d8:a5:51:eb:57:
22:63:7e:c4:77:da:b1:73:15:c7:54:5b:e8:72:25:4b:ca:ab:
b8:0d:26:3e:27:fb:70:38:60:92:fe:46:69:42:1e:dc:c7:09:
35:83:00:c4:7a:f9:5d:c1:c4:14:11:57:12:3e:5d:5a:31:cd:
11:73:84:59:18:5c:fb:18:f8:92:58:1b:a0:53:d4:52:f5:e6:
8d:37:61:75:f5:d4:fb:2a:94:d2:ab:1b:a7:37:c2:cb:53:50:
2f:f8:15:08:4f:4b:4a:c7:b0:bc:d5:ef:3a:5e:92:92:72:5b:
39:18:ad:ce:10:02:cd:3c:82:3f:65:54:1f:1a:df:f5:e8:85:
6a:3a:80:9c:b7:02:01:6e:39:b2:e8:ab:2a:cf:53:32:7a:dd:
d7:54:e5:9d:63:aa:10:c1:a2:43:3e:51:d7:25:fd:7e:19:08:
1d:79:35:26:e5:de:da:36:b3:ee:f3:d4:10:02:c9:aa:d2:81:
98:b8:92:e6:9b:4f:cb:8f:87:93:23:02:75:58:9b:d7:50:1d:
92:00:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:18 2025 by rpki-client