Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C08C5BEC3EE11EF9D68737F762E951A.roa
File: 5C08C5BEC3EE11EF9D68737F762E951A.roa (raw, json)
Hash identifier: b08H/OTtauiVLu4YUm4yHps9wJ3RZF4x3DrsSay4ag8=
Subject key identifier: 16:C3:15:4B:CF:48:33:E5:63:46:0C:07:45:F7:A5:5A:AE:74:66:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF34
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C08C5BEC3EE11EF9D68737F762E951A.roa
Signing time: Fri 27 Dec 2024 01:03:19 +0000
ROA not before: Fri 27 Dec 2024 01:03:15 +0000
ROA not after: Sun 12 Dec 2027 01:03:15 +0000
asID: 17561
IP address blocks: 45.192.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61236 (0xef34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 01:03:15 2024 GMT
Not After : Dec 12 01:03:15 2027 GMT
Subject: CN=676dfcd6-6735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:f4:92:3b:b3:ae:09:9d:b1:e6:b3:c1:45:
82:a5:ae:0f:c3:ff:7b:ee:ce:fd:3f:92:36:46:80:
c4:6e:98:a4:8e:4a:76:b6:34:eb:71:5e:7a:46:0f:
bd:7b:59:fa:0f:94:35:a3:8d:b3:02:d2:41:ac:81:
ca:49:ae:e2:23:7b:0a:22:6f:0b:43:49:93:57:bb:
fb:02:27:9b:11:42:b4:1a:66:13:f9:42:85:23:9c:
c8:f4:05:29:67:2f:ac:87:40:54:48:bc:83:d0:97:
93:e1:17:ec:e8:79:84:a9:ce:65:ba:0a:56:34:12:
05:2a:56:99:d9:a2:20:4f:97:6f:fd:d9:fa:86:40:
f6:d7:b6:8f:42:5e:06:99:89:69:f8:23:7b:3b:b9:
24:d9:78:ac:c3:87:17:1f:75:f9:e8:33:00:6b:10:
27:fa:70:65:e9:00:e6:00:b7:d5:ff:d4:5c:ff:d9:
2f:36:3a:f8:cf:e4:cf:ca:85:62:5d:0c:22:ef:97:
44:59:44:53:12:60:c6:20:f3:71:26:71:4b:e8:87:
2b:3c:89:af:61:ed:a9:d8:aa:72:5f:2a:ae:a9:1c:
87:43:43:7b:51:e2:1d:29:d5:19:96:31:24:fb:63:
c7:06:da:78:e4:df:17:a9:07:8c:d5:88:75:3c:36:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C3:15:4B:CF:48:33:E5:63:46:0C:07:45:F7:A5:5A:AE:74:66:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C08C5BEC3EE11EF9D68737F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.234.0/24
Signature Algorithm: sha256WithRSAEncryption
20:0c:60:62:6f:12:56:13:8a:6a:67:b5:09:34:07:ef:28:74:
cd:f5:71:fa:36:57:5c:8b:30:fe:07:cb:f5:f8:65:c4:63:1d:
5b:36:f7:03:fa:22:b7:bf:85:cf:9a:c9:0d:26:6a:5d:66:e0:
5f:67:24:06:af:98:92:31:78:14:61:0c:40:8d:ab:a2:a6:a4:
4b:d2:4e:d0:03:01:83:fc:8a:d7:b3:4a:ac:d6:0e:64:51:79:
87:d3:56:71:9c:d7:ee:d0:83:ea:c4:4e:b0:7b:c1:42:07:86:
79:c3:95:24:1a:a3:18:01:7e:2f:7a:83:83:0c:5e:4e:57:ab:
65:c6:fb:d4:ff:9f:89:00:65:2f:d8:0c:5a:99:70:13:7e:bb:
63:08:da:fc:50:d4:dd:9e:ac:be:64:a7:be:e9:78:58:15:89:
4d:78:b4:88:c2:ca:8f:8d:3b:2b:01:c2:87:61:93:44:e5:7a:
cc:69:e2:f9:99:35:49:43:85:86:13:2f:f0:33:26:96:2e:30:
b4:ad:5a:3c:dd:02:e7:39:1b:bf:1f:b5:56:56:45:53:33:6b:
22:fa:85:a7:ce:90:66:6f:0f:53:38:b9:2a:9c:98:11:de:20:
be:0d:fa:cd:d2:19:8b:f5:b4:1a:c8:35:de:2c:52:77:9b:75:
c6:1c:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:25 2025 by rpki-client