Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B9D283EB5FB11EFA0884D92762E951A.roa
File: 8B9D283EB5FB11EFA0884D92762E951A.roa (raw, json)
Hash identifier: a2AE3tYDrkQcNp4ag7VnXfBpkMFZPPAO9RV/lIwd/Gw=
Subject key identifier: 1B:07:92:CE:0A:1A:70:07:AD:2F:95:0E:BE:12:F6:D8:FB:8E:2A:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E150
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B9D283EB5FB11EFA0884D92762E951A.roa
Signing time: Mon 09 Dec 2024 07:02:26 +0000
ROA not before: Mon 09 Dec 2024 07:02:22 +0000
ROA not after: Thu 06 Feb 2025 07:02:22 +0000
asID: 149014
IP address blocks: 45.192.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57680 (0xe150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:02:22 2024 GMT
Not After : Feb 6 07:02:22 2025 GMT
Subject: CN=67569601-bd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:fb:36:bf:0a:18:e2:81:c1:98:0e:da:5d:
e0:40:94:1a:34:21:30:6e:75:ac:6f:1b:ee:78:5f:
e4:da:65:7f:15:77:67:94:4e:8e:95:05:e7:4f:cd:
9d:2a:f7:04:b6:a7:ad:58:f5:03:f3:b9:2b:bd:12:
73:01:b2:54:db:16:4b:e3:bd:23:0c:a1:a5:28:06:
8e:8a:9d:4c:59:1f:ae:04:a8:31:75:79:bb:9b:bd:
dd:52:da:d2:ea:e9:68:77:c3:bb:75:fd:72:fd:3d:
13:76:b8:6c:0c:40:40:af:0a:a4:5f:7d:fa:f1:ea:
5d:d4:74:9d:d4:54:4d:4d:88:eb:ea:d0:ce:71:e0:
d9:42:ba:c4:5c:7c:8a:cf:51:97:b4:2d:63:5f:e0:
7b:ee:0c:b2:10:7a:6c:eb:8e:be:36:63:d0:50:cf:
52:eb:6e:3f:ba:b7:4b:36:29:24:cf:16:e4:4b:fc:
a9:70:97:0b:c6:be:21:60:ca:bf:1d:d6:06:4e:1b:
37:1d:df:96:81:fb:81:86:1f:84:26:8e:8d:fd:d6:
ea:63:1e:1a:f1:b7:0a:9a:3c:27:3d:23:d6:45:63:
6c:f1:00:05:10:06:6d:5e:54:91:84:4c:07:a7:20:
5e:f5:9e:b3:eb:8d:5e:73:49:82:7c:4b:3f:8c:89:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:07:92:CE:0A:1A:70:07:AD:2F:95:0E:BE:12:F6:D8:FB:8E:2A:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B9D283EB5FB11EFA0884D92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.180.0/22
Signature Algorithm: sha256WithRSAEncryption
16:6c:5d:8a:22:16:4d:d2:3d:70:48:3b:92:bd:46:22:c6:00:
8b:2b:10:9d:17:30:36:3c:df:2b:26:da:df:5c:39:dc:61:9f:
d4:0f:16:2f:2f:32:2c:88:ad:4b:1c:7d:af:db:99:53:7f:b3:
0c:a5:54:28:16:0c:70:07:c9:66:db:9d:a1:80:e9:95:68:cc:
58:13:1a:96:1c:13:df:25:4e:16:3e:7e:7b:cb:eb:62:a5:ef:
19:66:99:33:ab:2c:12:01:6e:b8:8f:be:67:d8:b1:0d:80:c9:
34:5f:79:02:2e:58:f7:f0:b8:ae:f7:dc:51:62:1d:fc:c7:ad:
dd:7f:76:94:c6:f2:31:07:b9:19:1f:e4:03:94:dc:0e:34:13:
55:f6:a2:c7:88:1d:f9:be:bb:cc:33:52:3f:99:9a:f7:7a:45:
66:1f:ca:01:6a:43:58:58:7b:25:6e:ce:09:84:85:05:b1:dc:
76:1b:49:5e:9b:da:e0:42:6e:9c:49:6a:96:fe:0d:36:1a:c6:
0a:db:cd:df:7f:97:0c:ea:69:9d:1b:5b:1b:39:7f:e0:46:c4:
62:59:10:b9:56:0c:6e:73:76:7c:2e:ee:40:b1:2f:d0:0e:e7:
80:49:12:cf:71:2d:10:65:b1:31:2f:45:4e:90:2e:6b:05:cb:
7c:cc:55:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:03 2025 by rpki-client