Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31FF60DAC38E11EFAFA8D6A0762E951A.roa
File: 31FF60DAC38E11EFAFA8D6A0762E951A.roa (raw, json)
Hash identifier: pxWlFNzUOOOThHAXuqFt+3ylZjJ7e3GVqzel0sB15dI=
Subject key identifier: 40:30:E5:87:1E:83:11:87:B5:D6:E8:DA:9F:CB:FE:15:2D:3B:88:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31FF60DAC38E11EFAFA8D6A0762E951A.roa
Signing time: Thu 26 Dec 2024 13:34:56 +0000
ROA not before: Thu 26 Dec 2024 13:34:53 +0000
ROA not after: Sun 12 Dec 2027 13:34:53 +0000
asID: 17561
IP address blocks: 45.196.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60619 (0xeccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:34:53 2024 GMT
Not After : Dec 12 13:34:53 2027 GMT
Subject: CN=676d5b80-cfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:67:47:ac:cf:42:63:ae:fd:f1:19:f1:7e:
14:58:9e:8c:7f:de:74:05:11:2d:c3:65:e5:eb:57:
85:b3:91:cf:4f:e2:6e:16:7e:5b:e1:b9:f9:dc:0f:
7c:d5:f9:b5:f4:ff:f4:52:69:ba:ab:48:06:39:c9:
e8:cf:08:d5:51:b8:c7:10:7a:d6:81:43:ba:cf:15:
a1:7c:dd:62:2f:f9:16:01:41:a1:cd:2c:60:09:a3:
de:f0:e1:ec:0d:75:8e:01:9a:d6:fc:9c:ae:a4:ab:
47:61:a7:a3:0d:da:fa:b5:e3:54:25:75:d6:35:a9:
d4:5f:9e:ef:76:ee:6c:3c:26:30:99:fe:3a:c0:32:
08:33:06:da:ff:5f:0d:4a:83:8f:08:cb:e7:e1:c9:
08:3b:50:f6:90:20:ff:a5:80:21:bb:d3:1f:1b:25:
3d:dd:4e:9e:6e:e6:7f:86:e9:94:0a:c5:7b:b2:fe:
0e:93:3f:d9:d5:17:00:6a:cc:ee:bc:de:59:66:ab:
e1:95:97:63:4b:1b:e0:9c:b3:d6:b7:a0:d1:42:bb:
1a:48:eb:e0:a4:57:91:f9:d1:b1:0e:3a:66:b4:67:
4a:44:22:61:4d:58:1c:3d:64:30:37:ea:b5:65:43:
44:17:f5:ff:29:8b:ff:b5:80:0c:82:01:42:a4:bf:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:E5:87:1E:83:11:87:B5:D6:E8:DA:9F:CB:FE:15:2D:3B:88:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31FF60DAC38E11EFAFA8D6A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.215.0/24
Signature Algorithm: sha256WithRSAEncryption
25:80:98:90:70:b1:bc:17:29:55:97:7a:d4:d6:3d:b2:7d:83:
44:f7:dc:a6:93:fe:5b:5e:38:57:2c:30:5b:72:4e:0a:af:c2:
f8:38:28:40:1f:f4:4b:ee:06:f9:c1:7f:72:45:d0:2c:9e:67:
b6:9d:4f:10:13:9a:69:33:2a:f7:bc:a2:66:fd:ba:03:3e:a8:
59:ae:a5:43:4c:91:54:a3:40:a2:b5:56:40:33:66:30:0c:fc:
38:4a:8e:0b:86:49:a2:95:49:2e:08:1a:28:54:47:28:29:da:
94:64:76:1a:a0:0a:c9:a9:e9:88:07:47:22:76:94:fe:a4:36:
51:05:70:6a:f8:ff:98:b1:6e:af:0b:51:55:59:43:d1:e6:8b:
e9:69:1e:83:5d:41:21:85:ea:13:e6:7a:81:c7:21:9e:0a:3c:
49:c9:e4:09:94:ef:13:e0:73:17:5a:3c:bd:a7:d7:14:a0:9e:
13:d4:69:17:8a:e3:c1:22:e7:26:b1:2a:9f:72:e0:f6:44:6d:
9e:e6:1d:30:0e:cd:bc:2d:7b:5d:2c:f8:b5:ee:76:17:a2:6c:
4b:cc:0e:3d:5b:a4:76:7e:3b:2a:fa:e0:7a:2a:91:7d:62:30:
6f:39:10:7f:b0:24:dd:a8:9a:e2:b5:94:40:81:48:92:a8:dc:
86:14:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:33 2025 by rpki-client