Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC81EC20C3E211EF8AA36DB2762E951A.roa
File: AC81EC20C3E211EF8AA36DB2762E951A.roa (raw, json)
Hash identifier: wvKZrGLAxJ4apFA9DX8UJKvvxvU7SsQANINS3XjGFoo=
Subject key identifier: E0:D6:05:FA:BC:E7:D6:93:02:95:42:00:42:B1:10:6B:AD:0E:FD:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC81EC20C3E211EF8AA36DB2762E951A.roa
Signing time: Thu 26 Dec 2024 23:39:40 +0000
ROA not before: Thu 26 Dec 2024 23:39:36 +0000
ROA not after: Sun 12 Dec 2027 23:39:36 +0000
asID: 17561
IP address blocks: 45.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61191 (0xef07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 23:39:36 2024 GMT
Not After : Dec 12 23:39:36 2027 GMT
Subject: CN=676de93c-8bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:df:cc:fc:83:d1:0e:99:88:a2:ed:ae:3f:
6e:34:cb:25:92:7f:4c:2e:74:81:0c:6c:c1:6c:a6:
0f:ea:22:b2:83:d9:7c:6a:72:a4:a3:07:5a:f3:11:
8b:de:5a:81:1c:87:8f:b6:9b:f9:7a:b6:07:52:aa:
08:3b:c6:6e:60:c7:1d:1c:3b:36:bc:7a:9f:8c:8a:
9d:d0:0d:2e:ca:fe:51:3b:c0:e7:66:79:cc:f4:33:
13:ff:a4:0c:99:80:a2:96:6f:9e:e5:4b:00:35:fb:
f2:29:50:25:a5:8a:05:a0:b6:1a:d8:ec:d6:7b:a8:
d1:7f:13:2c:e5:d8:0b:40:8a:ad:73:af:0c:3b:65:
34:89:61:14:83:15:21:15:b6:3c:47:5d:92:16:a4:
7a:31:5f:56:5d:96:8e:99:90:c1:79:c0:f8:b9:8b:
e8:c4:ae:b8:33:87:aa:77:ce:a7:d2:2f:1f:3f:f4:
92:98:15:8d:48:50:63:61:35:d6:d5:62:8c:c3:4a:
cd:66:21:68:d0:35:b0:f3:08:91:ef:ab:1c:87:b8:
5e:99:f0:78:60:be:a6:cc:da:71:da:a5:83:b0:05:
b0:57:14:60:69:38:5d:d3:db:81:6c:18:da:92:b5:
60:09:50:07:40:4a:6a:03:49:8d:7e:19:e1:94:55:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:05:FA:BC:E7:D6:93:02:95:42:00:42:B1:10:6B:AD:0E:FD:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC81EC20C3E211EF8AA36DB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a9:ab:4a:48:58:a8:62:4f:14:d3:2f:1d:c4:51:fc:de:ab:
fe:8d:96:37:c2:73:4f:1d:6f:7e:9c:88:10:3e:de:68:cb:55:
9d:dd:cd:79:00:8a:25:f3:e9:dc:a8:97:46:b8:99:25:4c:e1:
ce:99:77:5c:ee:ad:06:71:38:9e:19:b4:d5:a9:37:3e:13:ab:
49:70:0e:2b:60:9e:93:f2:98:b7:1a:13:3f:8b:96:35:fa:45:
01:61:3c:1f:ce:28:9d:64:c4:eb:ba:e0:38:2b:16:50:41:b9:
76:13:7b:55:b1:5a:83:9c:c5:3a:52:25:18:58:ef:9c:ad:fd:
62:d4:42:4d:f5:d7:2e:3d:34:f2:63:3b:2c:29:9d:4d:f8:42:
c2:46:88:38:c3:43:13:1b:2f:c6:f8:8b:c9:e8:eb:b4:8f:29:
76:33:3f:0c:09:1f:da:e6:c1:ef:b7:19:c6:59:22:6e:3f:cc:
3d:40:fb:f9:70:d9:d6:06:f4:f5:69:33:ba:0f:3c:f1:1c:96:
8f:24:42:f7:b6:e6:54:45:a4:b0:03:b9:0b:b1:0f:1f:5f:9e:
2a:52:77:de:59:9e:f0:6f:a1:66:0d:01:b3:64:2a:95:5e:de:
01:c2:6f:2f:49:33:c4:65:b2:db:30:81:78:cb:20:fb:54:bb:
f2:8a:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:35 2025 by rpki-client