Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/907215D0C40211EF87D7A491762E951A.roa
File: 907215D0C40211EF87D7A491762E951A.roa (raw, json)
Hash identifier: dPukDs/jQwbLUtf/UCA+F0nmqgLRBdtAoZYV70OTSio=
Subject key identifier: 2E:60:CF:8F:3F:EF:87:06:A0:96:E9:A9:EE:21:1A:FB:68:AA:0B:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFE6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/907215D0C40211EF87D7A491762E951A.roa
Signing time: Fri 27 Dec 2024 03:27:56 +0000
ROA not before: Fri 27 Dec 2024 03:27:53 +0000
ROA not after: Fri 12 Dec 2025 03:27:53 +0000
asID: 984
IP address blocks: 45.195.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61414 (0xefe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:27:53 2024 GMT
Not After : Dec 12 03:27:53 2025 GMT
Subject: CN=676e1ebc-4f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:1e:ae:2c:ae:79:02:5f:85:ac:9b:24:92:
82:55:d7:d8:e6:3c:29:36:a3:ea:75:61:66:f2:cc:
fc:4e:0c:dc:18:8c:fd:6c:0c:84:9b:5d:26:3e:b4:
0a:b9:f2:09:f8:4c:f5:e9:b4:b7:c9:6e:d3:fa:27:
ea:81:9b:b9:41:58:57:96:f4:70:65:b5:24:1a:42:
40:5d:46:f6:33:57:2e:d6:53:66:d5:0d:a0:d2:2c:
d2:79:44:18:6d:5d:aa:b5:b8:ae:db:ff:c1:56:46:
df:e5:58:0f:23:7a:e2:e7:dd:f0:a3:83:d7:82:82:
69:f3:30:b4:22:6a:63:89:2c:72:17:b4:98:36:0c:
d5:c5:41:b6:03:1f:5f:a4:a4:2c:06:82:41:42:43:
c3:40:69:81:a1:11:1c:d4:df:e9:f8:22:61:f9:1e:
d5:1a:85:5c:04:d5:9e:e8:e0:d6:13:a0:67:31:bb:
e1:31:2e:0a:18:ca:2b:e1:53:51:ba:02:df:67:c1:
71:cf:9d:d6:26:9b:45:a2:27:d4:66:18:d2:c5:8e:
e0:ad:6b:e9:55:92:ff:3a:ff:58:c8:b4:66:8c:d1:
ef:95:0d:c1:2f:21:47:97:62:6c:db:89:15:de:22:
bd:7f:29:84:39:af:05:50:2f:85:7a:05:fb:fc:c1:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:60:CF:8F:3F:EF:87:06:A0:96:E9:A9:EE:21:1A:FB:68:AA:0B:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/907215D0C40211EF87D7A491762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.195.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:58:e7:31:61:a2:44:44:37:35:d8:30:4b:84:ac:0d:b2:a9:
f8:a8:3c:d9:d6:cc:29:15:0f:41:4d:69:72:d0:74:2e:50:56:
66:4d:fa:0d:a4:0f:cf:f6:07:be:4e:65:73:cb:4f:d2:9e:c1:
07:55:9e:7c:c0:d9:9c:0e:f4:2f:00:aa:e2:0e:1a:76:26:38:
07:85:3c:f8:61:dd:39:73:c5:8d:e9:16:62:bb:0f:66:a3:38:
cc:62:34:d2:32:36:1b:0c:3a:67:4e:65:63:63:c3:56:d7:00:
50:c5:eb:ef:d0:fb:6d:a5:2a:63:46:4b:4b:b3:27:bf:df:3d:
d3:55:ba:e7:17:a2:30:a1:ff:ce:c6:50:fb:a7:68:09:70:85:
6d:b7:5e:c1:b5:cb:a9:3a:65:7a:c2:10:fc:bb:00:af:28:31:
1e:d0:32:6f:a6:c8:88:5e:b6:80:24:a3:d7:be:08:a1:d9:e0:
81:16:be:a9:99:4e:eb:72:75:91:00:7d:9a:79:04:f1:20:aa:
95:10:98:39:e6:6c:97:12:37:6e:dc:5e:13:81:68:4d:04:17:
49:86:d7:d6:ce:f3:27:c1:13:83:aa:ea:4e:8f:4f:71:23:34:
16:c7:34:6f:10:d4:3e:ea:73:df:a0:7a:e0:a9:91:ef:54:b9:
1b:7e:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:01 2025 by rpki-client