Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90C74A64B60611EFA9113F58762E951A.roa
File: 90C74A64B60611EFA9113F58762E951A.roa (raw, json)
Hash identifier: uOOYlAqbisQuoJSLLwz/bxWNdd70E3YiJKaefTxlLn8=
Subject key identifier: AE:AE:0C:35:AC:46:97:A2:33:19:6A:90:59:6E:31:AB:DC:5A:3D:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E188
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90C74A64B60611EFA9113F58762E951A.roa
Signing time: Mon 09 Dec 2024 08:21:19 +0000
ROA not before: Mon 09 Dec 2024 08:21:04 +0000
ROA not after: Thu 06 Feb 2025 08:21:04 +0000
asID: 150706
IP address blocks: 45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 08:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57736 (0xe188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 08:21:04 2024 GMT
Not After : Feb 6 08:21:04 2025 GMT
Subject: CN=6756a87f-ac28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:6b:8c:1d:2f:3b:14:67:9e:1b:89:1d:5d:
b2:be:9b:73:2e:22:b8:19:d6:08:c7:18:ee:a0:64:
46:30:90:87:48:98:4b:f5:b1:de:88:22:ed:b4:51:
2a:4c:3c:7b:ff:42:dc:6b:23:c3:1e:82:92:f1:08:
f4:c1:18:12:55:3b:60:9d:90:af:3e:c0:39:b1:5e:
20:1a:fd:7d:56:1e:96:7d:c6:14:ab:a8:0d:ef:02:
2a:53:17:55:d2:ab:26:3d:c7:e0:17:dc:ff:29:08:
57:f7:ea:44:81:a8:13:ca:40:a5:fc:1a:3d:23:62:
1f:a2:2d:5f:05:48:ff:7b:9f:22:46:94:ec:18:64:
bb:61:bb:57:cd:fd:cb:25:58:fd:99:b9:b2:1d:ff:
9a:10:f9:6a:b1:77:5c:29:64:30:99:f3:dc:9b:9f:
98:77:2d:05:bb:fd:8c:08:d3:c6:f8:be:30:06:1f:
67:56:aa:45:56:b0:39:a1:fb:9e:fb:1a:c3:f3:dc:
f4:4a:e7:05:78:76:c2:06:8a:17:1d:a8:13:26:f9:
09:af:3c:ab:dd:a9:3c:17:23:33:59:59:60:b4:87:
e9:57:20:d7:ec:da:cd:f3:ab:b8:9a:fc:6f:91:f9:
39:59:b2:cb:2d:63:65:b8:af:9a:65:d0:56:59:d4:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AE:0C:35:AC:46:97:A2:33:19:6A:90:59:6E:31:AB:DC:5A:3D:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90C74A64B60611EFA9113F58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.188.0/22
Signature Algorithm: sha256WithRSAEncryption
11:76:43:b5:ee:24:c5:a1:d8:ca:7f:6f:ae:5f:36:5e:45:e9:
98:3f:99:09:c7:ed:2c:1e:9b:e7:be:4f:87:34:2f:2d:6b:c6:
83:f6:98:64:4f:c5:b9:cf:b7:7c:86:3d:28:59:4c:6a:84:f4:
23:44:47:5d:3a:d0:96:a4:77:04:18:8e:b3:bc:88:2d:54:a6:
ba:b8:4a:4a:dd:8a:14:45:a2:a6:63:58:f9:bb:23:e7:7e:19:
82:4f:2b:ae:79:57:9d:f0:6d:70:01:76:f4:18:ca:ba:dd:72:
23:5d:fc:ad:cd:45:e6:58:5f:bd:2f:ab:93:f0:0f:2e:f6:f6:
79:bd:8f:7c:96:c5:40:3e:72:fb:33:62:f2:44:05:20:ed:18:
d6:f4:3f:f0:40:5e:a1:4b:a8:49:87:d0:1a:ad:86:0a:57:35:
e0:dd:f3:72:0f:96:d2:2e:d9:e8:7a:e1:47:4f:da:20:59:67:
45:39:32:5c:ab:3e:a3:7b:df:16:e6:9c:93:d7:37:34:68:d2:
66:7d:81:55:35:fa:71:57:ee:0b:6b:c6:6d:46:3e:d1:14:a2:
c7:2e:40:ae:7a:42:05:d9:06:ba:00:dc:a0:db:6b:ba:8f:da:
78:10:8c:12:e9:d0:26:2f:bc:d1:e2:6b:20:60:d7:63:43:15:
ae:e9:eb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:31 2025 by rpki-client