Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D23FF6AC39811EF97386862762E951A.roa
File: 9D23FF6AC39811EF97386862762E951A.roa (raw, json)
Hash identifier: tnG+eHWHWCF4qS3qY9UGjoJQpCvcWf7nq9MUHGX0rJE=
Subject key identifier: 08:82:A9:F2:28:8D:BD:B0:4B:8B:9B:93:FD:1B:25:F9:33:47:6C:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D23FF6AC39811EF97386862762E951A.roa
Signing time: Thu 26 Dec 2024 14:49:31 +0000
ROA not before: Thu 26 Dec 2024 14:49:27 +0000
ROA not after: Sun 12 Dec 2027 14:49:27 +0000
asID: 17561
IP address blocks: 45.197.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60733 (0xed3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 14:49:27 2024 GMT
Not After : Dec 12 14:49:27 2027 GMT
Subject: CN=676d6cfb-92ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:41:07:66:2d:cf:e2:c5:87:48:6e:d9:36:
45:75:4a:48:d0:4b:71:57:49:0b:ea:c8:b7:81:e0:
87:2a:2f:2b:31:1b:f7:68:05:e4:8b:3d:9c:09:7d:
b5:fd:2b:01:5d:c6:91:12:0c:1e:74:0c:6c:e6:40:
22:ad:e3:d2:5d:dc:62:8d:72:60:1e:16:65:f3:7a:
d2:c7:8f:f7:53:f2:f9:26:eb:78:fc:b9:10:9e:19:
0c:9f:c2:e2:cf:ae:c5:68:12:70:09:e0:11:8b:54:
24:ba:20:f8:91:db:73:e7:9e:ac:90:7c:5e:c5:66:
12:1b:b0:99:0e:19:78:48:ae:ef:86:1e:51:3a:20:
26:37:7e:1b:0f:bc:74:59:d7:e8:9e:9d:e8:2a:d9:
9b:64:bc:ee:27:c5:f5:22:b9:c1:b1:da:3c:aa:17:
a2:7e:24:7f:82:8f:f3:2a:0a:1e:49:e2:0c:9a:01:
f8:98:7a:23:e3:8f:9f:80:23:8e:33:c9:06:13:ff:
22:98:27:d9:e9:ff:0a:61:07:a3:73:4b:c3:3a:ad:
4d:0f:ec:2c:c2:62:28:76:e1:2f:c3:74:4a:f5:d4:
10:06:53:32:e7:96:92:70:11:33:e7:4b:af:55:28:
a6:48:17:56:17:c3:3a:ce:95:40:8e:36:e1:1f:05:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:82:A9:F2:28:8D:BD:B0:4B:8B:9B:93:FD:1B:25:F9:33:47:6C:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D23FF6AC39811EF97386862762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.134.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ec:d4:f8:f8:f2:52:02:b2:5d:e7:30:1c:11:0d:41:f7:f2:
ce:ec:de:7b:68:26:a2:c4:41:28:be:14:90:49:11:d3:c7:66:
ff:e6:c5:ed:94:96:c7:ec:a7:3d:45:80:a5:89:4a:b7:70:a6:
6d:0a:0a:4d:a8:b8:0f:b6:96:4d:0d:06:20:e0:4d:e1:7b:93:
68:01:cb:49:5e:22:99:ff:81:72:4a:51:1c:cc:41:50:7d:45:
26:71:9f:93:15:0e:a8:40:94:5e:21:d9:37:c5:e9:bb:07:9e:
ec:2b:6d:d3:92:15:8e:ff:08:70:b4:a0:b3:91:60:51:b6:98:
b0:ef:ad:e9:d7:16:f1:62:c5:1d:5c:a6:be:d7:4a:08:6c:08:
bb:39:97:6d:05:52:2b:98:2b:f6:ec:3d:ec:b4:74:04:6e:71:
7c:e6:e2:a2:47:d7:e6:63:ed:7b:4b:53:c0:7f:01:a2:7c:9c:
9b:e8:53:bb:b0:d9:f4:95:cb:5d:bd:e2:de:8b:b5:26:dc:95:
e4:73:6f:e2:07:5e:47:7b:48:c1:6d:fe:9f:54:70:42:9a:dc:
9b:68:d4:e8:7a:b5:30:ad:55:2b:cb:2d:ab:50:67:0a:16:9b:
03:54:d1:1f:f9:f9:b7:85:bf:34:48:35:b4:90:71:fa:12:d1:
f3:d2:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:42 2025 by rpki-client