Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93A98684C39411EF8D8FB24A762E951A.roa
File: 93A98684C39411EF8D8FB24A762E951A.roa (raw, json)
Hash identifier: mzSIGlQw9xVgW3+BEFy4M+j9AgRXDacwHE/JiujqFzc=
Subject key identifier: 1C:5F:A9:91:68:09:91:2C:DF:16:33:EF:48:20:C0:30:45:7D:61:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93A98684C39411EF8D8FB24A762E951A.roa
Signing time: Thu 26 Dec 2024 14:20:37 +0000
ROA not before: Thu 26 Dec 2024 14:20:33 +0000
ROA not after: Sun 12 Dec 2027 14:20:33 +0000
asID: 17561
IP address blocks: 45.196.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60689 (0xed11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 14:20:33 2024 GMT
Not After : Dec 12 14:20:33 2027 GMT
Subject: CN=676d6635-84d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:ac:52:4f:75:2a:0f:ce:98:c7:57:dc:c0:
75:f7:e0:b7:71:9a:c7:0d:f7:69:64:21:9e:6d:e8:
b1:b7:b0:eb:b8:05:b2:ce:a0:1d:6a:13:b6:e6:3e:
4e:e4:b0:c4:02:ce:b3:da:b7:80:92:d3:9d:5d:94:
07:1d:02:b4:2c:5b:47:38:22:10:d1:9e:24:35:65:
44:c0:c0:da:2a:ee:50:87:0e:15:24:15:09:8f:c9:
95:95:4d:f5:16:d1:9d:ce:6f:44:bf:97:17:79:e2:
83:b4:3c:0f:4c:af:c1:fb:8f:b1:b2:42:db:6f:5a:
09:f7:e3:d6:6c:d2:01:ae:a9:eb:f4:5c:3e:76:99:
a0:73:c7:22:c9:0a:37:25:89:0d:43:f0:68:28:24:
56:72:54:b3:02:ff:28:81:94:f8:fe:69:9a:a4:af:
48:57:0f:87:60:ce:01:38:7f:e9:ec:ce:70:36:e2:
7c:a5:e4:bb:12:c2:f0:14:76:f9:ab:63:fe:51:2f:
cd:9f:0c:a3:ee:5b:b7:80:ba:32:57:b8:21:9b:4b:
d3:d1:57:05:d1:22:92:ad:6a:bd:56:36:e1:f2:0a:
79:d3:f8:56:32:39:2b:34:76:29:1f:6f:f8:ae:6f:
14:33:90:21:27:7b:42:fe:41:c9:d6:12:12:e4:2a:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5F:A9:91:68:09:91:2C:DF:16:33:EF:48:20:C0:30:45:7D:61:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93A98684C39411EF8D8FB24A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d5:e6:10:b8:27:2b:6e:03:d6:0c:5c:12:53:13:76:d3:ad:
c4:7f:6b:db:c5:d9:24:8b:90:a8:ea:e7:15:67:74:e8:3c:02:
34:f8:c4:16:50:c2:2a:18:c0:17:78:96:19:bb:72:23:3a:95:
0e:11:2d:19:d5:e5:83:22:4c:31:62:47:8b:5c:4f:43:6c:1b:
82:68:72:48:dd:66:4c:d6:60:42:3a:28:6d:91:1e:ba:3d:76:
39:cb:ac:ba:92:0f:ae:1c:04:1d:10:d8:ed:7c:0d:ac:16:f6:
f7:41:29:91:db:a9:02:33:97:36:69:c7:78:bd:bf:a7:3c:7a:
b1:bb:f1:1d:6b:f6:41:86:c2:07:82:c5:19:f5:72:cb:ac:d3:
49:51:78:6d:7b:25:d7:84:8a:a3:e6:9b:c5:51:8d:16:3b:63:
11:b2:37:b4:af:d6:63:36:b2:ca:34:4c:85:5b:7e:ab:c8:19:
f3:d8:7d:39:51:6a:8e:be:f0:25:a4:d5:1c:7e:08:d6:26:62:
49:c7:42:47:b4:e6:37:c1:e7:b5:f4:eb:88:e0:4b:fd:0d:c6:
c1:5f:98:54:e0:fc:89:04:be:ab:75:5d:6c:21:06:1d:fa:d4:
a5:e5:1d:6b:9f:07:b1:f4:0f:7b:ce:01:04:1b:92:6f:d9:16:
9e:e5:05:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:30 2025 by rpki-client