Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ACBAA16B5FD11EF8047E99E762E951A.roa
File: 6ACBAA16B5FD11EF8047E99E762E951A.roa (raw, json)
Hash identifier: cTHjh+pRUEnneqX6ZJDz/HmX/xAQVUoNjnEZupjJUNA=
Subject key identifier: 56:E2:F7:F5:0E:7B:FD:EE:D1:E3:81:9F:44:1D:C8:6C:28:5B:E2:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E166
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ACBAA16B5FD11EF8047E99E762E951A.roa
Signing time: Mon 09 Dec 2024 07:15:49 +0000
ROA not before: Mon 09 Dec 2024 07:15:46 +0000
ROA not after: Thu 06 Feb 2025 07:15:46 +0000
asID: 137443
IP address blocks: 45.192.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57702 (0xe166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:15:46 2024 GMT
Not After : Feb 6 07:15:46 2025 GMT
Subject: CN=67569925-7e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:63:2c:53:94:79:ce:1f:f6:82:a8:16:cd:
e4:ad:5e:99:7c:c8:ff:9c:fd:ad:7f:5f:ba:4a:df:
50:31:b2:c1:96:35:92:7d:dd:c5:dd:55:fe:77:91:
25:98:b7:85:78:ad:25:ec:26:9f:cb:06:7e:cc:7f:
26:55:82:fe:1e:72:07:0e:c9:fb:14:bd:f9:b6:cc:
ea:9b:ec:cb:b8:e2:ac:11:ee:ef:d4:20:8f:4e:03:
d2:fe:5d:2a:41:18:a1:3f:e3:e8:82:ee:fa:99:7b:
bc:38:41:a8:ba:b4:0f:3d:d1:c8:ef:6c:8a:11:2f:
e6:d6:e1:e4:89:a8:4d:ec:c2:2e:80:eb:67:56:76:
9c:05:70:6b:cc:3b:3b:91:76:d4:d1:bc:12:54:d5:
e5:19:a1:fa:33:09:c4:38:54:85:89:25:08:0b:2e:
61:72:49:04:b9:d9:38:eb:77:e2:8a:88:af:97:57:
d0:e2:60:f7:c5:ea:ee:a4:e1:4c:0f:10:7f:d9:08:
69:b5:de:d9:30:b1:94:1d:6c:53:67:6f:28:53:d8:
0d:f8:59:5e:c4:d8:ca:5e:a8:fa:3f:1a:75:59:76:
3f:38:d3:f6:96:a8:9c:62:8e:5c:a4:d6:a9:55:ab:
9b:58:55:06:07:f5:0e:09:36:cb:ba:f7:42:f4:10:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:F7:F5:0E:7B:FD:EE:D1:E3:81:9F:44:1D:C8:6C:28:5B:E2:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ACBAA16B5FD11EF8047E99E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:d9:29:c4:aa:c2:16:97:e0:6c:69:4a:25:0c:f2:66:ae:b5:
bc:b9:35:f7:86:6a:c3:54:9b:10:24:77:5f:06:7a:6b:f4:d3:
2f:99:de:80:ee:af:3e:db:d4:a2:ff:b8:e4:c0:a2:59:75:2a:
a3:32:fd:dc:30:69:ef:2c:b4:d8:22:c7:49:67:91:02:9c:fb:
95:04:2e:14:9b:a5:b6:a5:35:02:50:37:78:a3:d1:f2:46:44:
80:9d:43:3d:a9:ae:8a:cc:2e:f4:4e:99:86:b7:bf:a1:6a:ac:
9b:d6:ea:7e:54:20:18:f4:f4:e5:45:30:d1:82:e0:01:e0:d4:
03:90:eb:58:63:f5:47:c9:e3:63:78:b4:fa:88:b9:d1:f7:24:
56:6c:58:16:e3:b0:02:06:bb:c3:f4:73:4d:3e:a0:cd:19:fb:
16:48:24:03:28:fb:64:bd:54:4e:f3:1d:fe:b5:38:57:ef:70:
7c:8d:64:ef:9b:e5:5c:73:66:4a:94:82:9f:7f:ac:5c:ea:7b:
d1:c0:3e:7a:32:ea:2a:41:17:28:51:98:85:91:21:ab:b1:23:
c6:9d:97:55:82:53:25:7f:b5:e3:26:61:83:4c:27:8f:71:ed:
ad:a6:40:48:5d:79:13:15:f2:4f:a1:3d:ce:3a:5e:c5:a3:8d:
ab:78:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:22 2025 by rpki-client