Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72DA1210C39011EFBB9D18AF762E951A.roa
File: 72DA1210C39011EFBB9D18AF762E951A.roa (raw, json)
Hash identifier: AcYE0xQikopi1ya6hQj5Wjdx8jYYhsPE7Qi+ewg/tL8=
Subject key identifier: A3:8E:02:1A:07:D5:A2:A8:B9:B2:07:DC:4D:BC:1E:68:07:65:CA:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72DA1210C39011EFBB9D18AF762E951A.roa
Signing time: Thu 26 Dec 2024 13:51:04 +0000
ROA not before: Thu 26 Dec 2024 13:51:00 +0000
ROA not after: Sun 12 Dec 2027 13:51:00 +0000
asID: 17561
IP address blocks: 45.196.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60643 (0xece3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:51:00 2024 GMT
Not After : Dec 12 13:51:00 2027 GMT
Subject: CN=676d5f48-6729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:7e:fd:10:fc:2a:f1:5e:71:dc:4d:7d:78:
3d:88:ad:79:9e:d2:37:10:22:d5:cd:90:2c:8f:30:
c8:b2:6c:b0:2a:25:71:41:9e:e9:a4:28:a7:52:31:
74:9c:cd:a4:36:ab:77:6d:86:4f:08:a9:1c:3f:0c:
1f:c6:f5:1e:3f:84:64:c8:f8:27:53:cb:a3:f4:a5:
5a:b9:8a:42:ac:77:03:15:6e:05:e9:31:85:2a:ef:
60:25:18:b6:79:06:0b:05:b5:04:b4:50:bc:ba:38:
e0:74:1f:a3:dc:47:ed:87:1b:a3:84:fe:46:42:7d:
b1:1e:20:10:e3:44:d5:46:35:7e:c1:00:35:b8:6a:
3b:2d:26:10:24:cb:21:86:08:a9:cd:6d:49:ba:49:
1e:ac:36:d8:e3:84:a5:53:17:cc:2b:b5:79:a2:78:
65:67:54:75:b5:40:46:d1:6f:87:97:82:a1:84:f6:
89:40:a5:50:a7:75:b0:07:27:cf:8b:16:d6:e9:fb:
e6:52:d2:76:4a:81:18:a6:8d:90:20:42:d8:2b:ee:
b9:2f:55:2c:60:76:07:b4:a0:5b:f6:79:33:fe:0a:
42:a1:22:d3:24:f7:b7:b4:e1:9a:77:5f:90:cd:42:
81:4a:c3:89:ee:d0:07:86:ba:ab:61:36:5a:c2:94:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:02:1A:07:D5:A2:A8:B9:B2:07:DC:4D:BC:1E:68:07:65:CA:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72DA1210C39011EFBB9D18AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4e:cb:d4:8d:2a:9a:d3:74:bd:fc:ae:41:58:1e:3b:74:2e:
5d:97:f9:43:56:16:a5:d2:24:57:bb:67:47:b8:fc:88:53:c3:
92:5f:6d:78:c9:bd:04:79:b0:9e:c6:80:62:5c:8f:16:ef:27:
d7:23:c0:c4:40:b3:ec:e8:de:94:22:dc:29:76:39:31:43:8f:
d1:de:4c:07:5e:a4:77:f1:38:e0:36:2b:1d:42:67:90:5f:5b:
fb:36:12:e9:07:09:81:84:17:98:2b:fa:6f:96:b7:f0:2e:3f:
c9:94:04:5c:05:48:b1:95:cc:cc:f5:dd:73:53:73:c0:7d:9e:
34:4a:70:c6:d7:30:f7:9d:0e:f8:27:33:bf:1a:8d:89:47:ff:
10:04:74:61:f4:b6:2c:bd:19:7c:ea:55:5b:7b:bd:22:a7:9c:
dd:5f:f6:e4:12:2c:16:fc:54:a8:0c:da:1c:ab:41:ea:79:a5:
d9:29:14:ba:11:cc:51:f0:47:fa:09:fb:57:b9:df:5b:d6:1f:
8a:e3:6a:50:d9:52:1e:08:b5:43:07:22:f1:88:fc:6f:3f:14:
c6:37:6e:89:4a:61:73:76:de:cc:de:ac:7a:84:e2:2d:a5:9f:
1a:7e:5c:3c:7a:53:bc:a2:9e:c5:a2:d1:61:ce:76:20:f9:2d:
db:4a:64:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:04 2025 by rpki-client