Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D4F3088B5FC11EFA23E6C98762E951A.roa
File: 6D4F3088B5FC11EFA23E6C98762E951A.roa (raw, json)
Hash identifier: YMUSRIW7jG9nn3UsjiCj4hrVjMGhs66ZcXbyZPnFry8=
Subject key identifier: 6E:7B:76:F3:AB:A9:08:7F:58:BE:6E:F2:D7:26:37:DE:4C:C3:88:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E15A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D4F3088B5FC11EFA23E6C98762E951A.roa
Signing time: Mon 09 Dec 2024 07:08:44 +0000
ROA not before: Mon 09 Dec 2024 07:08:40 +0000
ROA not after: Thu 06 Feb 2025 07:08:40 +0000
asID: 137443
IP address blocks: 45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57690 (0xe15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:08:40 2024 GMT
Not After : Feb 6 07:08:40 2025 GMT
Subject: CN=6756977c-9e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:2e:1b:3c:a3:48:23:16:81:ce:0c:d1:b9:
a6:e8:fd:dd:00:2d:86:af:46:4b:13:60:a6:3e:f9:
66:98:0b:79:ba:73:d0:5d:dc:e6:22:21:dc:85:96:
a1:20:28:0e:0c:84:5f:ee:f0:87:72:1e:ab:0b:da:
e7:7e:93:bd:82:b0:d0:cb:2d:0c:fb:b1:85:56:86:
7c:66:fb:05:83:22:0d:ea:24:cf:4e:57:6f:74:9a:
4b:28:b1:bd:8b:69:19:57:0a:86:b4:ae:af:21:af:
f4:4e:13:ae:e5:95:ba:bc:89:88:58:1a:eb:62:b6:
e5:f6:17:8b:19:11:86:55:06:1c:bb:2e:4e:c9:d1:
cd:1b:df:85:cd:f1:f4:f2:a6:42:85:54:c0:7a:98:
6f:e8:97:26:29:cd:cc:79:a0:6a:24:47:d0:5a:db:
67:69:9b:d7:dd:a5:1d:ba:77:4a:69:40:78:90:69:
1a:93:ee:aa:d7:07:0f:fd:7e:f8:1f:d6:86:6f:ab:
ab:00:cd:04:f4:76:5c:de:38:17:44:2f:66:80:4a:
2b:fa:34:02:d7:9c:19:23:77:82:cb:1c:47:a9:9b:
99:da:7e:5d:1c:b4:25:dc:6c:f6:2b:a9:56:27:98:
37:6b:07:d2:4a:97:ba:22:9a:2b:4f:40:34:f7:c1:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7B:76:F3:AB:A9:08:7F:58:BE:6E:F2:D7:26:37:DE:4C:C3:88:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D4F3088B5FC11EFA23E6C98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:f9:c5:eb:c3:f4:b4:a9:f3:4a:13:23:86:22:19:a9:8d:ba:
81:87:d7:c7:7e:69:4b:b3:96:c7:ef:93:55:3b:bc:1f:31:fc:
86:92:3f:54:30:d1:fa:a9:0c:72:0c:40:57:43:75:84:ab:58:
56:c5:60:36:86:79:68:31:39:ab:b1:af:65:af:f1:e2:43:df:
04:ef:70:b5:ee:f1:05:85:5b:a9:b3:b4:91:bf:ee:1a:7f:54:
d4:39:12:4f:2d:a0:4e:7e:fd:35:86:b4:90:b3:19:c1:ba:77:
4d:f1:bc:a5:ad:02:e9:cc:dd:fa:2a:29:42:19:38:1f:21:8d:
f2:f2:7a:29:df:6e:a5:a0:1e:88:bb:f5:79:f1:da:ad:26:dc:
9a:16:91:79:e9:4e:6a:f3:df:b0:9f:f6:9d:e2:6b:4a:32:22:
60:6e:96:f8:da:02:ab:55:aa:90:3e:d7:36:24:c2:72:00:0c:
7b:b0:50:10:e8:c8:3e:e7:4d:bc:19:36:cd:58:1c:84:d8:e5:
11:64:e6:92:0a:63:ea:95:a6:02:fb:f8:57:50:a5:7c:02:d5:
0c:5a:b1:84:ab:ef:68:29:04:0a:26:ee:f4:29:d6:23:82:a2:
b6:77:75:00:5d:53:22:cd:ae:9f:6f:d3:61:54:b7:f2:23:ed:
53:25:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:32 2025 by rpki-client