Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DBD2696CDCF11EFB2FA6F5C762E951A.roa
File: 8DBD2696CDCF11EFB2FA6F5C762E951A.roa (raw, json)
Hash identifier: bm8WZEBVGIqhHDDA0mFt7XX+rZSoyjaT+uwEM0MqNfI=
Subject key identifier: 74:43:B1:24:2F:B7:82:24:32:F4:DB:47:07:9A:64:94:82:3C:88:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DBD2696CDCF11EFB2FA6F5C762E951A.roa
Signing time: Wed 08 Jan 2025 14:47:59 +0000
ROA not before: Wed 08 Jan 2025 14:47:55 +0000
ROA not after: Mon 03 Jan 2028 14:47:55 +0000
asID: 17561
IP address blocks: 45.196.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66046 (0x101fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:47:55 2025 GMT
Not After : Jan 3 14:47:55 2028 GMT
Subject: CN=677e901f-765d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:79:94:3f:b5:23:a7:b7:38:94:2d:d2:d6:
cd:53:c7:f9:d0:a1:f8:bd:11:51:a4:1c:43:f2:3d:
cf:89:ba:07:19:a1:ab:a1:06:b3:6d:17:1c:27:8b:
ce:d5:6e:63:e8:24:36:69:2d:63:ec:97:8b:ad:1c:
21:27:65:f7:2b:88:4b:7f:ae:a4:c5:2c:29:95:73:
d5:7e:0e:c4:3a:05:fc:e7:10:f3:6f:bf:27:2e:3e:
9d:b5:bc:9a:c7:30:8f:a0:99:2a:25:e1:48:31:15:
d7:be:2e:64:c6:4e:e3:40:f3:b5:c9:f0:7a:99:c8:
cc:fa:ba:8e:38:d7:cd:fb:5d:9f:48:ee:af:3d:6c:
cb:8a:2b:9f:fa:ab:6d:c7:20:8c:fa:11:16:09:e4:
58:fd:dc:7b:2f:58:ce:3c:fa:96:73:f5:9a:1a:9e:
4c:b7:10:1f:a8:91:46:e6:b7:e9:cd:86:a6:00:91:
b6:4e:67:38:34:3d:cf:92:63:e0:d3:b3:ae:82:b6:
6d:cc:90:fc:b3:a1:12:cf:9c:6a:5b:e2:ae:2b:f1:
4e:f7:4c:56:cb:84:d9:1b:07:d9:65:f7:02:f4:00:
87:94:05:39:2a:7f:f8:51:ce:81:6c:3c:ed:0e:2e:
12:f4:ff:c1:b6:96:a4:29:cd:74:7b:65:f7:b7:6f:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:43:B1:24:2F:B7:82:24:32:F4:DB:47:07:9A:64:94:82:3C:88:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DBD2696CDCF11EFB2FA6F5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.201.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ea:c7:f1:56:84:2b:b5:6a:b7:9e:50:ae:78:42:ff:79:22:
e3:e1:17:0f:79:64:4f:3e:a6:d2:0b:c6:77:d4:a8:b9:c7:52:
17:8c:80:56:5d:86:69:46:20:ec:69:af:6f:17:51:80:b2:24:
90:3c:a5:18:62:d5:c2:33:83:d9:c0:39:2d:10:87:d2:a0:26:
7d:a4:a3:d8:40:31:7f:db:16:df:2f:8e:9f:4c:da:37:43:8b:
09:41:9d:7c:78:73:9c:51:b6:0e:50:43:fb:3a:39:d5:52:80:
06:a4:9e:51:82:5c:10:1e:1a:73:4a:09:0a:b1:1d:84:86:d9:
ed:c1:e2:28:c8:9a:20:61:03:22:65:f0:93:3b:4d:fc:8d:43:
69:20:08:03:9d:27:45:97:ea:80:e9:02:44:a4:43:ca:c4:2f:
ce:74:e5:19:65:d9:79:98:5b:f1:ef:64:a4:85:2e:5d:0a:40:
b3:8b:91:86:b1:a1:26:6c:b2:06:4d:10:34:38:65:31:6d:4b:
26:ac:82:c5:4f:82:2f:3c:05:c9:fe:ac:6f:f4:ee:39:dd:2e:
36:ed:2e:e4:79:ff:63:b6:5c:13:d9:49:55:6b:2b:f7:fc:e1:
10:32:04:03:ed:f8:0a:41:30:98:85:55:58:01:40:6b:e7:95:
9f:c4:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:54 2025 by rpki-client