Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44D94E32C3E311EFA166A0B6762E951A.roa
File: 44D94E32C3E311EFA166A0B6762E951A.roa (raw, json)
Hash identifier: uquISf9BGTX+GSW8KW01dkNHmendD9IxyMVijU7RZrQ=
Subject key identifier: 00:F6:42:D2:BA:D2:8D:64:38:19:C0:A6:A1:74:CF:36:8F:9B:F6:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44D94E32C3E311EFA166A0B6762E951A.roa
Signing time: Thu 26 Dec 2024 23:43:55 +0000
ROA not before: Thu 26 Dec 2024 23:43:52 +0000
ROA not after: Sun 12 Dec 2027 23:43:52 +0000
asID: 17561
IP address blocks: 45.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61197 (0xef0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 23:43:52 2024 GMT
Not After : Dec 12 23:43:52 2027 GMT
Subject: CN=676dea3b-6b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:9d:33:9e:27:dd:4c:b6:02:c3:c4:53:23:
85:9a:32:73:cb:ac:b6:1e:1b:86:02:02:43:ad:04:
ba:b8:f8:cc:c8:e9:dd:08:e8:c5:97:98:46:cf:c5:
62:d4:65:76:d1:00:01:5b:ee:6d:7a:27:a4:3f:33:
4c:3c:eb:4d:70:fe:41:59:ca:14:30:5e:00:32:07:
93:73:a2:fd:c3:c5:ae:8a:7c:d8:9e:ba:9e:49:79:
3c:93:1d:22:c4:77:78:88:5c:31:c5:55:4d:c7:d3:
64:78:6c:a3:7f:32:a4:05:4f:3a:9a:76:29:85:1c:
62:e4:8b:f4:f9:00:df:f6:de:aa:67:07:ee:4b:73:
5c:e6:92:c4:91:d0:f3:b6:cc:d4:21:0f:8f:88:9b:
43:03:6a:cd:3b:10:4c:8c:a8:96:5c:0a:ac:60:a8:
0f:f8:37:86:df:00:88:90:0d:d0:b8:a4:5a:4a:4e:
8e:98:3f:0c:39:09:f7:07:a4:e2:37:b2:9a:dc:9e:
3d:14:c4:d4:6d:71:66:40:c1:42:79:30:d7:49:6e:
6a:81:65:37:2a:68:52:db:97:26:5e:9c:96:a1:cc:
06:c2:8c:37:b4:9c:14:39:a5:d4:a3:c6:00:62:fd:
b5:fb:ec:0a:89:8e:6b:aa:a8:3b:29:52:c1:49:b0:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F6:42:D2:BA:D2:8D:64:38:19:C0:A6:A1:74:CF:36:8F:9B:F6:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44D94E32C3E311EFA166A0B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.215.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b6:46:c1:33:7a:8a:c8:4d:44:9e:44:79:78:c5:5f:4c:5a:
ad:d4:09:ae:e9:5c:d8:7a:6b:3a:08:ed:04:48:45:98:79:ea:
5a:4a:bf:45:5f:50:8f:ca:f4:a5:01:12:99:6e:70:39:b7:2f:
17:66:9a:0c:31:d9:e2:94:24:06:cd:4a:f8:63:17:ea:c2:63:
5f:47:be:a9:bf:51:22:57:20:45:8f:f2:73:73:0d:b0:10:52:
58:0e:65:4f:87:47:cb:17:63:67:ae:15:24:f2:6f:c5:2a:0f:
36:47:48:a0:7c:48:1b:01:89:49:5c:dc:a9:e9:0d:76:ad:bb:
51:ab:b3:e6:bb:49:b7:3e:34:7a:88:b8:82:96:c6:3d:ef:6a:
75:ff:11:99:3d:81:74:da:0d:44:a3:69:ee:87:87:75:a1:b9:
8c:2a:4a:da:65:2c:8d:ac:7d:22:e5:1a:c9:89:10:f0:1b:63:
da:35:1e:59:5a:9d:32:4a:d0:c4:70:80:32:98:e2:da:23:04:
3d:6e:f6:61:09:fd:40:02:2f:fd:58:ae:99:43:a9:6b:0f:90:
fe:b7:d5:7b:7d:de:e2:88:e7:52:f0:8a:2a:48:b0:d0:75:0b:
bd:5f:f6:dd:00:a2:03:fb:11:e2:c0:e5:7c:e9:d7:d5:8f:81:
ff:88:27:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:50 2025 by rpki-client