Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46A1C2E6C3FF11EFB91A427B762E951A.roa
File: 46A1C2E6C3FF11EFB91A427B762E951A.roa (raw, json)
Hash identifier: ggjwxFpPz4VYVNaLPcfLr1WNtxrrc/STKSnllvDw0a0=
Subject key identifier: 7A:EF:0B:54:97:C6:CF:DD:C2:AC:83:5F:01:F7:94:C5:A4:1E:8D:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46A1C2E6C3FF11EFB91A427B762E951A.roa
Signing time: Fri 27 Dec 2024 03:04:24 +0000
ROA not before: Fri 27 Dec 2024 03:04:20 +0000
ROA not after: Sun 12 Dec 2027 03:04:20 +0000
asID: 17561
IP address blocks: 45.195.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61380 (0xefc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:04:20 2024 GMT
Not After : Dec 12 03:04:20 2027 GMT
Subject: CN=676e1938-aba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:fd:93:c6:70:37:4c:7f:47:4e:e7:2e:8e:
68:f5:4e:19:4c:4b:23:94:a7:a6:62:e2:2a:4f:da:
d2:42:34:61:28:33:ae:d6:4c:ba:d8:4d:db:21:c0:
d0:32:ce:82:b9:80:36:52:00:69:03:7f:24:73:25:
cc:d7:28:ee:42:2d:a4:97:61:92:b6:23:fa:53:70:
45:0c:d6:df:57:27:b6:61:72:b8:38:2e:66:54:13:
b1:50:e9:36:46:b9:ff:a8:d7:87:a6:08:89:a1:37:
87:a1:f2:60:33:b1:d6:df:5b:67:f2:77:9c:1c:6d:
9c:e3:d7:99:f7:99:a3:c2:2c:05:0f:08:f3:54:cd:
a3:6b:4e:4f:73:80:a0:9c:9a:f6:49:57:3d:69:c2:
e7:e9:aa:c9:71:b2:e7:12:70:22:83:46:ac:88:d4:
03:d3:19:b8:aa:27:d6:1e:51:1f:89:9a:e1:e9:e3:
60:4a:3f:fa:a2:52:5f:df:77:94:cb:5c:4f:20:a4:
22:f5:91:3a:c8:5a:a7:d5:84:5c:5c:09:33:92:e3:
80:bb:e8:de:45:33:7c:69:44:ab:b2:c4:e0:33:7f:
97:f2:93:74:44:24:1e:c5:99:ac:44:9a:59:b1:8b:
75:8c:cc:7f:dc:40:d7:c0:ae:94:39:e3:ca:f8:7d:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:0B:54:97:C6:CF:DD:C2:AC:83:5F:01:F7:94:C5:A4:1E:8D:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46A1C2E6C3FF11EFB91A427B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.83.0/24
Signature Algorithm: sha256WithRSAEncryption
13:19:22:24:05:b3:af:b9:09:2f:92:18:47:77:36:5c:3e:62:
69:e9:6f:15:7b:e6:f2:4d:a7:60:d6:a9:a9:1b:0f:08:75:55:
35:a1:6c:15:b0:09:6d:7e:98:ea:0e:d1:95:62:ac:cd:e4:9b:
b2:58:fc:f4:34:27:fb:c3:50:d0:cb:d4:6c:c8:6e:d5:03:5a:
f5:7b:5a:0a:4d:4d:bf:66:2c:4c:fd:96:a8:87:d5:10:f7:8d:
81:45:02:1d:72:27:5b:9b:35:9a:74:28:c1:be:38:62:58:61:
3f:bf:f5:61:37:de:dd:36:52:38:c0:b1:77:72:ee:5d:f1:71:
96:92:e1:d8:1b:60:f0:7b:04:0d:1b:26:a2:19:06:01:cb:56:
af:3b:37:ef:f8:ad:d4:65:6c:0e:e1:f4:1f:c7:a5:c7:31:9b:
e0:99:f9:28:8a:76:6a:6e:bf:3c:83:8e:51:c8:13:43:0e:bb:
ba:66:65:74:4e:ce:23:d2:25:1b:2d:2a:43:13:0b:ea:77:df:
9f:f1:68:af:04:77:c7:c4:d8:f1:66:ba:0d:4a:5b:3a:6e:70:
85:30:0e:51:8c:a7:dc:81:db:83:6b:6b:dc:36:1b:7a:66:81:
f9:18:85:8c:86:5d:77:ad:b0:42:87:72:24:6d:c7:5d:e1:ae:
f4:f9:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:40 2025 by rpki-client