Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BC5C2E8C40111EF9575A78A762E951A.roa
File: 9BC5C2E8C40111EF9575A78A762E951A.roa (raw, json)
Hash identifier: Iu9xDBwp+4vy7NsIyt+R/BGxe9VYqWoKyOgxRFtNK98=
Subject key identifier: 8A:E5:5A:B6:28:23:DF:1E:FF:80:E4:E7:23:80:18:2B:AE:8A:AF:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BC5C2E8C40111EF9575A78A762E951A.roa
Signing time: Fri 27 Dec 2024 03:21:06 +0000
ROA not before: Fri 27 Dec 2024 03:21:02 +0000
ROA not after: Sun 12 Dec 2027 03:21:02 +0000
asID: 17561
IP address blocks: 45.195.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61404 (0xefdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:21:02 2024 GMT
Not After : Dec 12 03:21:02 2027 GMT
Subject: CN=676e1d22-b8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:8a:cb:47:37:83:c4:fb:bb:87:b5:65:57:
7b:69:d6:35:69:22:20:1a:1a:e1:0e:70:b8:8b:59:
c3:43:71:92:28:c0:ee:bd:07:7e:28:9f:52:a2:3e:
59:5a:4a:75:60:cf:6d:63:1b:cb:e0:f1:c9:9b:85:
9d:54:34:08:b1:23:70:1b:10:23:ee:48:a2:0a:2d:
fd:2f:ee:e6:2a:05:7f:83:68:01:c0:05:bc:8f:f9:
0a:99:4a:fc:b3:fd:79:6c:b7:50:c2:3b:92:35:4c:
80:e0:08:74:6a:90:4e:78:fe:f6:c8:3b:a5:17:58:
f2:a1:c8:c2:cc:54:2b:89:30:a2:a6:68:be:09:fd:
e0:82:ae:b1:bb:6c:bd:c0:f3:1d:88:08:be:fb:1f:
0f:d1:46:8c:d3:56:e4:d2:0c:3c:a8:b9:5a:87:ef:
c5:38:91:68:3f:69:90:05:2c:3c:f7:ec:b9:1b:43:
93:45:16:12:5f:b7:01:da:41:b3:49:82:b4:1c:1c:
15:96:0a:f9:03:17:0b:38:4a:4f:79:90:86:de:0a:
0d:83:7f:6f:14:cc:df:84:29:04:01:09:07:54:c2:
60:bc:57:35:e8:5d:16:96:13:81:0b:55:55:d0:00:
ff:a8:36:bb:4d:26:b1:7c:79:13:b3:76:82:44:17:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E5:5A:B6:28:23:DF:1E:FF:80:E4:E7:23:80:18:2B:AE:8A:AF:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BC5C2E8C40111EF9575A78A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ef:b2:55:2d:89:ee:19:32:76:6d:a4:e8:48:3a:1f:69:ee:
0e:14:63:6c:26:28:55:8c:8f:65:97:ac:d8:44:19:0d:f9:f2:
7d:7b:54:f7:e7:9f:d3:2e:eb:eb:d6:ab:10:b0:6d:78:33:6d:
74:89:f4:63:35:f8:29:46:dd:d3:dc:b6:d4:d6:97:46:9c:2f:
9a:b7:2c:1e:b9:fe:2e:82:b0:e6:1c:03:12:c0:5b:cc:fb:d7:
16:2b:01:a5:ba:76:80:81:2a:f3:10:a7:1a:75:c5:89:2b:de:
be:60:e2:86:98:d6:eb:b4:45:79:13:b8:eb:b9:6d:ff:d5:cb:
85:2e:7e:9b:6e:d9:ae:74:b8:93:66:b2:2a:ef:d9:2c:9c:8b:
65:a2:32:0c:c8:7e:1b:98:69:38:88:75:67:ed:c3:5a:26:57:
a4:51:a2:5e:d5:60:70:3b:f3:a4:b1:9b:2c:46:e0:41:d8:d7:
c6:57:44:c4:f0:0d:d1:f6:df:8b:b6:11:28:25:ee:eb:94:9a:
78:07:18:3d:2f:89:e4:31:eb:0d:70:d9:d8:ae:8d:8d:50:73:
14:41:d8:68:c4:55:ea:e4:9b:95:cc:f7:10:79:87:c1:a3:28:
9d:22:51:f4:98:35:4a:96:3c:e0:37:ee:b4:87:0b:36:57:eb:
f5:3a:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:55 2025 by rpki-client