Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B1CA038C3F211EFBF188A9D762E951A.roa
File: 8B1CA038C3F211EFBF188A9D762E951A.roa (raw, json)
Hash identifier: MdvZaa3qmOZdA9zxRFVp1Vh8LACbH5JlXvf3+qQWREc=
Subject key identifier: 45:88:2A:9F:35:1C:45:56:6E:DD:E7:9E:B2:BF:0F:51:A3:30:58:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B1CA038C3F211EFBF188A9D762E951A.roa
Signing time: Fri 27 Dec 2024 01:33:16 +0000
ROA not before: Fri 27 Dec 2024 01:33:09 +0000
ROA not after: Sun 12 Dec 2027 01:33:09 +0000
asID: 17561
IP address blocks: 45.194.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61280 (0xef60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 01:33:09 2024 GMT
Not After : Dec 12 01:33:09 2027 GMT
Subject: CN=676e03db-df5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:9e:71:9f:6c:94:c1:2f:33:df:31:78:87:
67:62:25:d2:c4:17:b9:be:fc:11:84:53:d6:ca:6f:
3b:0b:85:e9:e2:e8:c2:a9:87:81:49:ad:0f:93:c4:
42:0c:ae:23:08:68:02:aa:78:50:0a:78:60:d7:fe:
f8:20:4f:fe:b1:d6:f9:a6:4f:38:99:c9:38:2c:f2:
df:4e:b0:3a:6e:05:c6:40:ca:77:b3:5d:8b:81:5f:
00:4f:ce:fa:dd:c0:23:0e:89:4d:39:9f:76:34:5a:
de:89:4d:e7:7a:09:19:f3:f3:88:fb:cf:e8:ab:62:
b4:84:6c:27:e7:1d:b1:22:61:7e:14:2e:a5:05:8d:
00:fb:ec:54:56:59:5d:5e:5e:bb:df:3f:f3:77:af:
9a:e6:62:8e:0e:a4:59:a4:52:36:7f:6b:c9:2b:8e:
1b:08:21:90:d4:80:cf:b5:7b:bd:53:52:3f:c3:44:
13:38:a3:fc:6d:98:31:61:23:ba:fb:ea:52:89:f5:
68:40:3b:c0:1c:74:d0:f6:97:0b:81:64:c0:e9:b8:
44:0f:fb:bd:52:11:c5:b9:fe:fa:be:ad:e0:02:48:
9a:49:d7:1f:b9:28:f0:45:07:04:d8:b1:7c:c5:b8:
8d:ba:37:4b:24:c0:63:10:4a:92:0a:da:48:ca:59:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:88:2A:9F:35:1C:45:56:6E:DD:E7:9E:B2:BF:0F:51:A3:30:58:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B1CA038C3F211EFBF188A9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f4:1a:a2:50:59:f2:d6:e2:7f:8b:fa:a6:2e:34:c1:05:ed:
48:e5:6c:8d:42:3d:01:18:2b:a1:53:53:58:54:5f:c6:89:14:
07:28:41:bd:52:59:4e:47:12:01:16:cc:e7:4b:d7:74:8e:1a:
e2:1c:0b:31:8e:2b:92:38:a3:89:fb:cf:07:f6:d8:3e:4b:29:
53:d5:bc:a2:16:6a:8e:a4:c8:e9:65:43:f7:cc:3d:c7:97:a7:
c1:66:cf:1b:dc:4f:25:ac:f2:ec:2e:46:60:fa:c3:16:a1:a7:
70:cb:c8:0a:a2:52:b9:69:a1:22:c7:02:6b:81:df:f4:3a:68:
12:27:47:29:31:de:66:2b:db:df:54:90:1d:73:c2:da:4a:87:
5f:f4:59:20:88:99:34:ab:8d:b9:89:73:a7:c9:ea:06:c9:6d:
dc:b4:63:f5:21:41:b2:88:45:33:3f:73:44:f0:09:11:ee:30:
54:df:c2:28:40:59:2d:eb:99:6b:f1:5b:b8:02:ef:83:b3:06:
2e:fb:17:8c:a5:96:69:f8:9d:e4:cd:88:67:ae:73:8e:00:f8:
fa:11:8d:5b:02:43:dd:18:d9:cc:54:d9:ea:6c:a7:90:10:c2:
5b:f7:90:d8:35:95:3a:3c:ff:12:94:58:59:98:71:64:ab:a3:
53:7e:d5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:27 2025 by rpki-client