Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B0975A0C40111EFB16F2089762E951A.roa
File: 6B0975A0C40111EFB16F2089762E951A.roa (raw, json)
Hash identifier: eowMfynkn7W8fNzdqGe7Xu1OdMsvHjxl/uA5U3megHE=
Subject key identifier: 49:14:C5:20:5A:F9:C2:72:FA:AA:CC:78:1F:BA:F4:DD:E1:22:D8:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B0975A0C40111EFB16F2089762E951A.roa
Signing time: Fri 27 Dec 2024 03:19:44 +0000
ROA not before: Fri 27 Dec 2024 03:19:40 +0000
ROA not after: Fri 12 Dec 2025 03:19:40 +0000
asID: 984
IP address blocks: 45.195.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61402 (0xefda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:19:40 2024 GMT
Not After : Dec 12 03:19:40 2025 GMT
Subject: CN=676e1cd0-fe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:38:ed:ea:47:94:46:67:74:0c:c9:3d:b4:
8c:55:4e:60:5f:a0:e1:86:ef:f0:77:4a:3c:66:83:
ad:e1:7c:06:1a:d6:67:40:e2:ad:62:69:ae:55:32:
f1:55:8e:99:e2:07:4e:16:40:0c:89:85:3a:f1:4d:
51:73:14:9e:92:f0:3e:30:79:4f:64:ef:c2:8d:cf:
c7:98:7b:12:37:1d:c6:f3:d9:56:29:35:fa:8e:14:
09:63:d3:c7:64:9b:5c:6a:9e:db:10:a0:8f:30:08:
19:a5:5c:73:50:0f:04:a5:f5:83:43:20:37:38:19:
cb:dc:ab:f2:61:12:39:60:1a:57:83:2d:ad:13:8d:
e9:78:cf:86:80:14:64:87:e2:a0:e0:ff:12:84:39:
59:91:cd:57:8e:2b:1a:10:35:c7:5d:9b:d6:01:3a:
cf:94:78:3b:bb:82:e0:c8:80:57:8e:1e:69:e9:1c:
48:92:0d:eb:6e:a0:42:b3:f6:15:75:74:a4:f6:75:
2c:ed:18:3b:86:6c:1e:d8:15:d0:f9:1e:1a:ca:0a:
2e:69:aa:00:e1:0d:08:cf:b7:5d:92:96:ea:2b:19:
b7:03:38:aa:0c:b2:9e:18:4e:4f:e9:1f:ae:f4:ae:
7d:f8:b4:c4:02:a5:f9:d2:a6:1c:8d:72:a7:f3:1c:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:14:C5:20:5A:F9:C2:72:FA:AA:CC:78:1F:BA:F4:DD:E1:22:D8:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B0975A0C40111EFB16F2089762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/24
Signature Algorithm: sha256WithRSAEncryption
47:72:cc:2c:6a:41:2d:e0:f6:c2:b3:fe:a4:1f:51:fe:4c:1d:
bf:d3:48:b7:c5:d9:ea:4e:a5:73:86:63:2f:08:42:2c:3b:6e:
48:6e:5a:0f:ec:f0:b3:b5:93:9d:a1:f2:07:2c:cd:e0:60:84:
59:7c:cf:16:21:3c:3e:39:9b:1a:ac:31:f7:3c:55:2b:47:86:
3b:dc:c6:71:cf:d4:3d:77:6a:1b:b9:d3:0e:22:69:92:ae:3f:
19:8d:1d:5b:b9:8c:b0:71:fd:9e:03:5c:29:a1:05:5e:4f:c5:
d7:3e:2b:0e:eb:41:51:26:5f:6e:64:f0:07:8d:e6:7e:7d:f4:
40:58:90:ab:2e:68:b4:9a:f0:d2:e2:d9:7f:a4:e8:c6:47:89:
b7:8f:ed:93:22:a6:0a:90:ca:ae:ae:0b:f7:2e:e2:d1:25:89:
7a:33:3b:da:74:13:3f:2c:5e:d8:ce:e1:10:23:33:51:13:13:
ae:56:96:52:ef:41:d6:a2:f4:06:75:e1:b8:04:0f:3e:e7:a7:
43:13:69:60:62:35:28:0c:5d:7e:0d:fc:e0:c8:2d:9f:20:dc:
75:c4:71:91:18:d6:07:32:91:30:45:3f:10:8b:6c:6f:df:78:
b8:02:11:73:40:d8:67:4a:6a:4c:cc:01:ac:f8:30:4e:08:87:
fb:4a:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:46 2025 by rpki-client