Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF7F4ACEB5FB11EFB0FA2A94762E951A.roa
File: BF7F4ACEB5FB11EFB0FA2A94762E951A.roa (raw, json)
Hash identifier: SiWcy8xc+dlNGk/zm8Klbx/I7dHRKvaX404OKCiANEE=
Subject key identifier: 04:1D:29:C6:53:67:27:E5:F8:7A:E8:09:06:75:3D:FB:FB:3C:87:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E152
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF7F4ACEB5FB11EFB0FA2A94762E951A.roa
Signing time: Mon 09 Dec 2024 07:03:53 +0000
ROA not before: Mon 09 Dec 2024 07:03:48 +0000
ROA not after: Thu 06 Feb 2025 07:03:48 +0000
asID: 149014
IP address blocks: 45.192.178.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57682 (0xe152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:03:48 2024 GMT
Not After : Feb 6 07:03:48 2025 GMT
Subject: CN=67569658-7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:86:29:69:e4:a9:2b:b9:2b:07:23:1e:a5:
d0:13:bc:bc:93:5d:be:a8:d0:14:45:70:81:be:48:
21:5b:70:9a:a8:0f:49:c2:11:39:b9:23:ed:85:1c:
e3:14:7a:4f:6a:4a:0e:b6:0a:8b:bf:0d:a3:70:dc:
69:7e:cb:f2:dc:c3:87:fd:21:42:91:e8:e4:a6:b3:
f5:f3:ab:6e:29:c1:59:ed:e0:24:bc:ee:0b:65:ab:
0b:c2:a2:91:b5:d3:c5:c1:fd:d4:b7:84:1b:6e:4b:
ea:4c:d7:85:52:75:70:9c:72:ee:41:19:28:b4:d5:
24:20:36:eb:42:de:5c:30:ce:c7:db:09:21:85:bd:
24:f9:3b:af:d3:2c:a0:3e:74:bd:c9:03:34:72:2f:
3f:ac:55:d3:0e:25:e1:ec:a5:14:b5:19:0b:68:4d:
5e:00:94:bc:d1:f5:7f:98:76:62:ac:ce:7d:8e:18:
6a:c1:7e:bc:a3:62:f4:a4:5e:34:23:eb:e3:55:ed:
35:3f:1f:f4:46:3e:d9:10:5f:79:79:8b:09:e5:fd:
3d:35:58:03:9f:ff:f0:e1:4d:6e:d4:07:f3:57:b7:
8c:f6:23:d1:b8:e5:6d:c6:21:ab:6f:73:11:56:39:
82:a9:92:3a:26:2a:0b:c6:0c:06:7f:3a:df:e5:77:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1D:29:C6:53:67:27:E5:F8:7A:E8:09:06:75:3D:FB:FB:3C:87:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF7F4ACEB5FB11EFB0FA2A94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.178.0/23
Signature Algorithm: sha256WithRSAEncryption
43:ad:79:38:f4:a0:6d:97:d6:7b:77:25:76:0b:af:2f:53:25:
01:88:c7:55:37:eb:82:1e:f0:52:05:16:58:c5:9e:19:52:0a:
10:4c:d2:5e:b6:9d:97:be:b7:e6:fb:a2:58:d0:a0:f1:f8:40:
30:26:1b:bf:8b:c9:75:75:88:16:fe:98:9f:bd:11:c3:3c:35:
b2:0f:6d:7b:44:2c:c2:95:c5:8b:30:bf:f6:f4:f9:19:63:07:
4a:71:67:74:e6:15:20:0b:b2:0b:cb:d6:c6:2a:56:ec:47:29:
2b:11:8b:6d:5e:aa:bb:dd:9c:57:f9:c8:5f:c3:da:43:43:e3:
49:a6:8d:1c:39:50:6f:e6:08:7f:8a:85:76:ff:09:64:38:82:
cd:5f:a8:e0:06:38:b9:84:f6:1f:61:cf:46:8d:98:61:ab:a2:
cf:25:04:9b:29:34:be:bf:35:47:6f:4f:3f:54:20:40:b5:54:
cd:41:a6:e8:a2:30:69:60:f3:6e:5d:7a:76:db:14:d6:92:3e:
11:72:04:34:c6:59:1b:9f:41:38:69:85:5b:76:2d:b5:d7:05:
ef:c1:6e:1c:e7:ff:dd:5f:f6:5e:1b:88:34:63:9c:b7:b8:8a:
1c:46:69:42:f4:28:06:9b:b4:80:c3:53:14:3b:3f:4e:86:8b:
24:9f:5a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:38 2025 by rpki-client