Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6917D78B5F811EF9AE01281762E951A.roa
File: A6917D78B5F811EF9AE01281762E951A.roa (raw, json)
Hash identifier: qKuODeCg2fBqGPGJWbBVg7MwE+Vn96rdkDwWkP9tB5g=
Subject key identifier: C6:E2:97:EB:93:82:7D:4B:63:75:1B:AB:D2:89:2B:5A:CD:C2:7F:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E138
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6917D78B5F811EF9AE01281762E951A.roa
Signing time: Mon 09 Dec 2024 06:41:42 +0000
ROA not before: Mon 09 Dec 2024 06:41:39 +0000
ROA not after: Mon 19 Oct 2026 06:41:39 +0000
asID: 150706
IP address blocks: 45.195.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57656 (0xe138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 06:41:39 2024 GMT
Not After : Oct 19 06:41:39 2026 GMT
Subject: CN=67569126-ac82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:5f:4d:d8:98:78:e8:6f:4b:e4:d4:34:f3:
87:c9:77:ba:03:57:63:a5:95:41:e0:f8:0a:be:3a:
b0:d0:ca:ca:9a:94:84:fa:f7:91:a6:2b:fd:3a:29:
2e:e4:81:6d:db:a0:72:16:5a:67:36:13:39:64:ef:
cc:1d:a4:d5:96:2a:ea:10:54:66:66:d6:a6:01:23:
e1:e9:d5:85:fc:d6:25:58:75:dc:5d:cc:44:b7:56:
2b:b8:d9:47:fa:cb:24:1b:08:63:f2:0d:37:e0:a2:
ca:ed:c9:6c:c8:8c:c2:73:d9:10:cb:f0:e4:69:1c:
bc:d6:de:8c:a9:a2:7e:a5:87:34:96:6b:05:82:bf:
59:68:75:c8:6c:9f:bb:eb:ed:d6:ca:0f:67:e3:de:
c0:10:85:92:2d:59:3b:1a:f8:6a:c7:fa:5f:bc:2b:
57:c6:e2:1b:95:8b:c8:85:9d:f5:ef:16:35:0b:6b:
c8:9a:31:58:0c:41:a2:cd:1d:a5:f9:8b:23:97:3b:
64:96:84:cb:29:2a:75:23:2b:99:9e:9e:84:a1:93:
13:1d:41:8a:52:d9:2b:94:25:d1:ee:57:70:fb:8e:
a6:e4:1e:5c:3d:07:88:b6:e2:30:56:ea:d9:a4:41:
e7:17:51:33:95:24:d2:bf:db:7b:8b:9e:0e:51:39:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E2:97:EB:93:82:7D:4B:63:75:1B:AB:D2:89:2B:5A:CD:C2:7F:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6917D78B5F811EF9AE01281762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.56.0/23
Signature Algorithm: sha256WithRSAEncryption
76:8c:33:0e:17:a4:23:c9:72:e3:aa:95:4f:ac:aa:4a:c6:e7:
8d:e1:eb:40:14:02:b1:e4:ad:a0:de:8c:d1:74:1a:7f:ef:9e:
22:89:8d:a4:9f:0f:66:51:5e:cb:55:6f:5b:8e:b2:3f:cc:c5:
5c:3d:9d:11:61:55:29:87:08:fb:a8:db:99:e3:fa:aa:ce:1f:
4d:c8:cc:31:82:2d:57:e6:6b:05:70:ba:12:68:69:fc:fc:7e:
72:71:05:3d:69:c3:d1:36:fb:2e:57:a5:81:7f:32:21:ff:54:
5d:ec:35:62:ba:34:98:f1:8c:96:a4:0d:83:62:25:41:0f:fd:
69:6d:0a:97:71:45:0b:3b:d8:44:4a:c0:8e:47:c3:61:ae:38:
8b:67:ea:2c:84:de:18:c0:5d:a3:c4:bc:b0:7b:cc:79:6e:d5:
14:2e:ef:70:75:2e:e7:bb:68:ad:8a:98:be:09:35:64:26:28:
e3:e4:9f:e6:f3:27:a9:c3:39:fb:f0:67:27:68:b6:ac:25:9d:
c7:c5:44:5d:97:12:8b:3b:7c:96:36:3d:c6:ce:20:2f:8b:79:
d7:28:1d:6e:88:b5:9c:f0:59:19:41:cb:e7:15:71:80:05:2d:
db:8a:d2:ae:3b:c6:f5:13:42:0b:b5:a6:23:0d:37:65:d0:2f:
9a:6e:ad:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:50 2025 by rpki-client