Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6012BEE0C38911EF91B21783762E951A.roa
File: 6012BEE0C38911EF91B21783762E951A.roa (raw, json)
Hash identifier: ONAw2UaGy85vTJViziobuOsOya9EYcfcagvrKvEE7N4=
Subject key identifier: 02:B2:4D:B1:85:A3:20:A1:88:51:15:14:00:22:4C:CD:90:F0:D2:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6012BEE0C38911EF91B21783762E951A.roa
Signing time: Thu 26 Dec 2024 13:00:26 +0000
ROA not before: Thu 26 Dec 2024 13:00:22 +0000
ROA not after: Fri 12 Dec 2025 13:00:22 +0000
asID: 984
IP address blocks: 45.196.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60567 (0xec97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:00:22 2024 GMT
Not After : Dec 12 13:00:22 2025 GMT
Subject: CN=676d536a-e9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:50:06:cc:92:c3:ce:99:e6:47:fa:59:de:
9b:78:cc:7d:90:97:9e:bf:80:77:65:58:77:a7:2d:
7a:fb:2d:b8:ac:48:15:03:d7:82:e8:c4:f1:d6:2f:
41:04:4d:81:3d:c4:66:b1:5b:b5:c6:f5:95:82:fa:
4c:c4:24:11:c6:80:e3:7e:99:af:1f:a0:b3:2f:c3:
26:29:f8:2b:0b:74:e7:b6:58:e6:b5:61:be:ac:f2:
f2:61:ba:9e:e2:f6:79:37:5d:38:74:e4:ad:84:43:
17:61:22:b3:bf:22:55:cc:b7:6e:46:47:c2:37:ef:
b6:98:4e:c7:75:e9:64:40:68:07:89:19:be:12:a2:
75:7b:8c:4a:0d:29:4d:85:b4:40:b9:e1:74:16:06:
8d:fc:c0:25:85:90:f9:b8:d8:42:3e:57:5d:d0:2f:
d1:ae:82:57:01:dc:f6:43:e0:c7:0f:2d:a2:3f:cc:
88:de:e6:ed:ed:ac:7a:e4:e0:18:86:c0:ba:a7:74:
99:c2:03:b4:02:e4:62:0a:c4:83:a8:8f:cb:18:dd:
c9:3b:79:24:09:16:ae:81:7e:6f:69:3a:eb:19:b2:
86:10:74:49:65:89:22:ea:e8:1c:51:1b:a1:85:b8:
e3:5f:6d:d7:6a:59:88:3e:1c:08:69:e7:d4:3c:4a:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B2:4D:B1:85:A3:20:A1:88:51:15:14:00:22:4C:CD:90:F0:D2:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6012BEE0C38911EF91B21783762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a7:1a:98:d2:4a:2a:e6:3f:47:56:d0:fe:5c:82:a0:b5:81:
3a:ff:f6:b9:0a:17:b4:94:70:9e:6b:12:0e:05:83:be:7a:49:
b3:2b:8e:a6:33:c4:5e:37:31:e1:93:6d:86:82:ad:1c:4b:e5:
71:d4:1a:28:b8:55:cb:2e:02:e1:f0:a5:9b:b4:43:af:ad:3f:
e2:37:52:0f:6d:fb:40:b2:72:5d:47:38:fe:45:e6:47:ef:b9:
87:c6:d8:6e:26:a1:df:25:d8:ae:04:98:50:e4:64:03:07:7b:
46:b6:1b:34:83:4c:f2:0e:a9:9e:c1:25:d6:36:38:5e:c3:de:
1e:27:9a:f2:9a:ef:f2:6f:0b:9b:7d:f2:23:d6:72:43:0f:85:
19:9a:37:08:66:4e:98:75:0b:42:0c:55:5b:fe:49:ee:ae:79:
c9:cb:e7:ca:b8:74:65:41:68:34:d9:f6:a6:10:81:7d:19:5f:
01:98:c1:f0:cc:c9:56:6c:f9:17:ec:db:31:8a:bf:73:7b:20:
b1:6d:d0:86:a7:86:a1:d7:28:05:0a:66:07:50:45:42:20:c8:
6b:cb:0a:0e:e5:60:3d:65:f7:6e:32:cc:f2:d6:7c:fc:85:8a:
d5:f7:64:5f:ed:6d:f1:ab:58:e5:95:65:74:92:91:2a:04:43:
f5:78:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:25 2025 by rpki-client