Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78581366CDCE11EFBF860356762E951A.roa
File: 78581366CDCE11EFBF860356762E951A.roa (raw, json)
Hash identifier: e1d87qlHiGjK4xNINx9rBICA1J2eYZnq8AL+akfZC5g=
Subject key identifier: BB:C6:20:55:15:B1:D3:E2:79:2E:38:86:CE:27:8C:F9:E8:6C:97:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78581366CDCE11EFBF860356762E951A.roa
Signing time: Wed 08 Jan 2025 14:40:14 +0000
ROA not before: Wed 08 Jan 2025 14:40:10 +0000
ROA not after: Mon 03 Jan 2028 14:40:10 +0000
asID: 17561
IP address blocks: 45.196.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66038 (0x101f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:40:10 2025 GMT
Not After : Jan 3 14:40:10 2028 GMT
Subject: CN=677e8e4e-7240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:65:95:8d:70:bd:c5:18:24:aa:4c:b1:73:
54:bb:da:94:9f:5e:3c:e8:da:c5:b0:11:2e:42:22:
5f:d7:85:e0:c0:c0:11:c9:db:53:cb:9c:02:50:da:
22:ee:04:53:e8:c5:dc:35:a4:2f:c2:77:10:c1:02:
7c:6f:a6:e8:85:6e:2d:b9:49:a5:28:f4:d7:8a:e1:
1d:40:73:ce:6d:46:62:cf:3d:83:b7:b8:29:02:eb:
b2:a1:0e:85:04:a7:68:a1:bf:58:15:c2:da:31:53:
51:c1:1b:f2:f2:d1:25:f6:43:1c:b4:d7:a3:ce:af:
1d:82:f5:8b:c8:eb:c5:56:d2:11:1f:c6:5f:00:ae:
6d:48:1b:45:db:07:36:83:b6:ef:b9:27:5f:9a:6f:
db:6a:65:99:2c:1a:de:03:17:20:a0:ef:b3:6e:11:
f4:ed:24:4a:65:39:d9:af:ae:55:af:33:f0:6f:7d:
c0:2c:8d:c8:19:20:cf:63:7e:f2:8a:a4:d9:df:5d:
7f:47:fe:6b:af:f1:51:e8:c4:c6:83:1c:b3:22:f4:
87:71:f8:6c:fe:bc:4d:e2:a2:86:1e:d1:a5:74:b7:
58:f8:b1:b8:17:56:04:70:da:1c:16:d8:57:94:d3:
f8:f9:ab:b7:02:66:75:5e:93:75:73:87:0c:d1:0e:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C6:20:55:15:B1:D3:E2:79:2E:38:86:CE:27:8C:F9:E8:6C:97:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78581366CDCE11EFBF860356762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:e8:f1:d5:da:bc:b1:88:88:1a:ad:89:27:ac:72:49:e7:26:
65:f7:a0:d0:fe:84:96:fd:55:5b:94:9f:a2:84:78:3c:5e:94:
b5:92:de:49:d6:0f:85:b1:9a:2c:b0:e8:f5:da:4e:d5:7d:9c:
c6:40:e9:43:fd:f3:70:20:22:c1:cb:e5:9a:a4:b5:1f:f2:70:
65:e7:e0:c4:81:67:b2:2a:d6:e0:1d:80:f3:40:33:34:0e:ed:
25:f4:b0:20:c5:fa:9c:fe:b2:a4:c5:da:96:44:b2:dd:72:9a:
e9:6a:9e:d8:06:cb:06:13:67:e8:4f:64:e1:42:1f:6f:97:79:
fe:2e:7a:ad:d1:99:96:e5:ea:7f:d9:99:0f:74:87:fa:68:c3:
64:1f:3c:7f:c7:6f:31:79:d6:6b:26:86:80:51:7d:34:62:68:
1f:3f:e5:92:f9:b6:41:11:ad:f7:1b:f6:91:a1:87:41:b7:57:
7c:aa:1d:4e:b6:7b:d3:9f:78:d9:a6:58:b6:d0:87:e1:71:e7:
c2:19:61:76:c3:c8:07:92:68:3b:8c:35:82:d3:cf:8f:4b:70:
57:2c:4b:bb:66:5d:b6:12:90:87:a2:57:5d:5a:85:8e:e7:44:
a9:40:12:9c:d6:69:c4:ed:35:20:55:4e:95:a9:89:18:8c:21:
7c:0f:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:55 2025 by rpki-client