Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ADEA262C3EF11EFBE837686762E951A.roa
File: 4ADEA262C3EF11EFBE837686762E951A.roa (raw, json)
Hash identifier: WddZzmhzh3e0hoLf31OeHHHY+wsjY/oVDemq1NsGu8U=
Subject key identifier: 71:4A:08:32:64:89:C3:D9:85:55:9F:26:C8:74:87:05:89:F8:AF:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ADEA262C3EF11EFBE837686762E951A.roa
Signing time: Fri 27 Dec 2024 01:09:59 +0000
ROA not before: Fri 27 Dec 2024 01:09:56 +0000
ROA not after: Sun 12 Dec 2027 01:09:56 +0000
asID: 17561
IP address blocks: 45.192.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61246 (0xef3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 01:09:56 2024 GMT
Not After : Dec 12 01:09:56 2027 GMT
Subject: CN=676dfe67-7a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:16:31:b3:0c:ea:c8:40:3f:02:81:93:13:
32:52:1f:0f:27:1f:46:0b:37:ce:77:98:b1:f9:5d:
0d:84:96:3e:27:29:7d:2a:87:cb:32:cc:3f:61:c2:
e3:19:6a:61:79:1d:95:b5:08:df:f5:ce:ec:fc:f2:
fd:7d:09:62:dd:00:18:25:47:b1:61:ef:99:e2:fa:
73:37:a7:29:e2:6e:ed:a9:d2:e1:0b:01:7c:fa:46:
68:0c:64:4d:64:0c:1b:db:5c:56:56:01:41:aa:2c:
b0:a7:55:7c:8f:b5:e0:c6:27:92:fc:59:77:bd:6c:
da:2e:26:f6:e8:39:12:b9:a7:b3:ef:34:4f:05:2d:
a8:01:09:26:54:25:9f:75:7c:61:f2:1e:fa:96:e2:
8e:53:ab:c4:a8:b2:f9:16:06:30:fb:e5:4a:41:ed:
e0:1d:6f:06:ab:05:12:00:d7:54:22:bd:86:3b:fb:
95:c6:3c:2d:0c:f9:8f:ed:6d:9f:a1:f5:8d:a9:e0:
55:1b:f4:a7:11:ef:2e:d3:ed:f0:19:0d:64:c9:2c:
b7:5a:75:ce:e4:5f:c4:81:6a:9b:1d:83:49:e4:e0:
a9:fc:a3:e6:7d:29:9a:da:9a:d1:d1:0f:4e:84:13:
32:9b:44:e2:22:ae:06:e6:cf:61:72:59:bf:4a:cb:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:08:32:64:89:C3:D9:85:55:9F:26:C8:74:87:05:89:F8:AF:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ADEA262C3EF11EFBE837686762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d4:70:b4:bd:9a:88:9c:1a:f2:af:6f:e6:b7:41:a9:ad:51:
b0:53:28:d0:3b:70:28:fc:ca:c0:c1:5f:88:c7:39:f1:d2:e0:
0a:d8:f4:cb:08:8e:a5:82:36:d2:47:d9:76:fe:bd:68:31:58:
e5:22:7f:a4:35:0c:4c:85:3a:c5:d2:54:1e:37:f8:23:78:80:
f9:d0:3f:a4:4f:54:75:b3:67:66:c8:47:28:63:7e:ec:75:1b:
e2:f5:b3:66:ab:a0:fd:2d:9e:8d:c7:ab:74:1d:34:a2:49:ec:
73:cd:ec:33:fd:f9:f9:1a:d8:d4:b7:2a:ee:3d:9d:1a:83:38:
1a:b3:cf:b5:e7:ae:ba:22:83:dd:c2:d7:2f:07:a6:30:c6:71:
9b:73:e1:25:3b:92:d0:6c:bc:b5:88:c5:7e:76:d5:06:fc:17:
a3:f5:90:e1:46:5a:96:bb:67:33:28:22:0f:07:7f:b7:d2:64:
1b:16:a5:7c:ba:ad:17:dc:cc:dc:49:c2:99:06:5b:d3:49:0e:
a7:e3:56:f4:40:65:f6:48:d1:46:32:7a:4e:d8:d2:3b:b9:08:
20:66:0e:eb:72:20:87:88:8b:5d:d3:fb:75:4b:8d:98:7e:19:
b5:79:11:fd:d7:22:54:43:04:38:86:4f:33:2c:a8:57:22:fa:
54:63:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:53 2025 by rpki-client