Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75C85976C40011EFA5A26182762E951A.roa
File: 75C85976C40011EFA5A26182762E951A.roa (raw, json)
Hash identifier: XecMNMSvPe0jzrHaAjm4Qag/AD+Jkr6sPFXzgMSKcHg=
Subject key identifier: 49:4B:42:4E:A1:D3:2E:2F:AE:FA:E0:BD:6E:37:7A:DD:E9:E1:76:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75C85976C40011EFA5A26182762E951A.roa
Signing time: Fri 27 Dec 2024 03:12:53 +0000
ROA not before: Fri 27 Dec 2024 03:12:49 +0000
ROA not after: Fri 12 Dec 2025 03:12:49 +0000
asID: 984
IP address blocks: 45.195.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61392 (0xefd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:12:49 2024 GMT
Not After : Dec 12 03:12:49 2025 GMT
Subject: CN=676e1b35-4c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:c0:af:13:80:c8:fe:47:f9:f6:31:4e:ee:
cc:e9:4a:9e:09:24:11:1c:9a:a0:63:f1:32:85:a0:
7d:b9:52:13:6d:ba:be:c1:5d:db:b6:7f:c9:62:58:
60:4d:ba:f5:4c:4c:8e:a5:6d:44:5e:5d:fe:fd:aa:
5b:e1:3b:6f:e0:9e:38:2a:74:bf:cf:b8:b6:55:95:
04:b4:80:54:bc:aa:c0:35:15:f2:f2:e2:ec:17:a7:
6f:24:c9:18:1b:98:30:09:4f:57:5c:e6:4d:74:50:
5f:ab:98:bd:15:ee:17:90:0e:64:b3:e8:72:61:05:
98:3a:99:40:92:91:e6:67:4e:ca:2f:e5:dc:74:f1:
e6:ec:78:b3:00:1f:ca:ea:a7:0f:7e:72:87:6a:9a:
c5:b1:8d:f4:66:7a:75:6a:53:66:3a:36:7a:fa:4e:
22:99:f5:6a:a4:b4:3e:70:d5:8d:b4:8b:d5:2e:e0:
26:49:51:49:e2:94:56:ec:2c:fe:aa:35:55:37:29:
e1:7a:f0:df:61:fd:82:39:ec:34:f5:16:c4:bc:9d:
9a:76:a1:41:87:8f:df:30:0c:2e:a4:89:3d:9d:96:
f2:b8:0e:f9:a5:2e:bc:98:3d:9c:2a:5f:c4:4f:88:
a6:79:ea:a5:51:5e:15:be:bd:ed:b4:f9:f3:35:00:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4B:42:4E:A1:D3:2E:2F:AE:FA:E0:BD:6E:37:7A:DD:E9:E1:76:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75C85976C40011EFA5A26182762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.93.0/24
Signature Algorithm: sha256WithRSAEncryption
73:4b:8b:20:58:23:dd:f2:70:db:d9:c7:e6:d2:b6:7d:91:64:
63:5c:8f:d9:d0:6d:f6:3f:b5:9d:f3:3a:60:cb:86:e5:2c:dd:
91:0d:59:8a:9b:88:c7:22:90:94:ff:17:3c:69:82:76:1a:ca:
ff:9e:95:05:8e:f1:0b:be:f8:52:71:a0:bf:3c:70:c6:f7:bb:
c2:5d:69:12:d6:d1:1c:bb:72:14:93:4f:07:ee:7c:a6:e4:54:
a3:9b:f8:fc:75:4c:85:3c:3e:cd:c9:db:88:3e:5c:a4:12:0a:
09:12:6f:0e:df:2d:39:d6:9f:1c:c3:13:a8:94:e4:54:ef:52:
98:5e:b6:e8:9c:e9:e2:de:e7:b7:4c:b4:07:ce:5f:16:06:4b:
8a:bf:7f:f0:70:2c:1b:94:77:d1:16:1c:ac:7f:7d:ec:cb:ee:
89:36:e3:81:03:c2:c2:ff:a3:4d:fe:e3:7d:9e:8f:c5:29:99:
9e:d4:ae:66:87:7b:11:b6:93:ed:d5:c0:6f:ea:77:49:85:e6:
66:b0:fa:5f:0d:66:c8:40:1a:03:f0:13:b2:b1:4f:83:12:85:
b3:bc:94:ad:a0:5f:aa:ea:26:dc:08:8b:71:f1:01:f9:68:c4:
f9:03:56:af:c8:5d:af:37:97:40:2b:a3:17:07:1d:3c:64:3c:
f1:c2:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:11 2025 by rpki-client