Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB1B7988BEDA11EF8763615B762E951A.roa
File: CB1B7988BEDA11EF8763615B762E951A.roa (raw, json)
Hash identifier: Beg2GqZhdZl9WVNFZtw8j6ptRSLg8YGgrWxdgHijYbE=
Subject key identifier: F1:F3:A0:5F:59:1B:E0:60:2D:D6:26:B3:CC:E4:D2:41:23:AB:2B:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E771
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB1B7988BEDA11EF8763615B762E951A.roa
Signing time: Fri 20 Dec 2024 14:00:39 +0000
ROA not before: Fri 20 Dec 2024 14:00:35 +0000
ROA not after: Thu 06 Feb 2025 14:00:35 +0000
asID: 42831
IP address blocks: 45.198.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59249 (0xe771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 14:00:35 2024 GMT
Not After : Feb 6 14:00:35 2025 GMT
Subject: CN=67657887-cb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:2f:c6:96:72:44:4f:59:c8:cb:44:8c:e2:
ce:ca:7a:b5:c7:39:f4:c6:bf:cf:fd:d9:97:1c:5e:
3c:e3:d0:60:2a:bf:23:0d:57:c6:9d:4c:08:be:bd:
9f:c4:fd:a3:45:26:39:a2:ef:8d:06:51:ee:47:24:
8d:60:11:9e:e4:36:55:e5:38:a5:89:1e:b1:90:2e:
58:38:cf:63:23:32:c2:97:fa:10:64:62:7b:8c:8c:
8e:fc:cb:53:c1:26:1e:5e:78:a6:b8:86:f1:23:92:
1f:7a:21:d2:ff:4d:76:31:85:8c:f1:cf:67:a5:50:
c8:a3:38:49:f2:9c:f2:29:0b:dd:36:7c:fe:61:6d:
9f:1c:55:05:f1:8a:c5:77:7c:77:7b:6a:2c:04:64:
15:56:b5:46:6c:96:fe:44:92:31:0e:e4:78:44:67:
a5:56:a8:ae:f3:af:be:0e:f4:68:07:cf:9f:9e:2a:
a3:f3:db:0a:88:cb:7b:37:ce:75:52:79:3a:9d:ba:
b5:09:64:f5:8c:59:dd:5c:9d:e2:82:53:3e:b4:6d:
b6:1a:a9:cd:0d:e0:84:31:ad:85:2c:67:7d:66:e2:
de:99:be:21:87:88:b9:8b:6a:a8:68:cf:eb:4d:6b:
87:25:c3:36:35:55:80:86:84:10:8e:79:73:a1:1e:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F3:A0:5F:59:1B:E0:60:2D:D6:26:B3:CC:E4:D2:41:23:AB:2B:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB1B7988BEDA11EF8763615B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.128.0/19
Signature Algorithm: sha256WithRSAEncryption
64:ad:53:dd:cd:ea:b7:78:f1:61:01:29:d0:5d:73:7c:1b:65:
9f:2a:44:47:a8:c5:3f:2a:93:4c:e1:66:d8:5f:24:e8:e7:c7:
34:2c:c1:0a:55:67:fb:06:1a:26:74:93:a8:1b:e3:af:69:78:
e2:30:5b:d0:ef:a6:e3:80:c7:4a:0e:10:2a:f7:90:36:65:74:
c9:a3:d8:cd:6e:cf:56:b1:4e:9b:28:2c:bf:e9:7f:dd:46:fe:
fe:f2:85:15:25:35:21:a3:e4:d2:57:f5:d8:8d:b6:16:7b:07:
f5:a6:35:75:61:6a:e5:0e:eb:4e:69:de:a0:a8:5f:18:7f:91:
ab:bb:78:10:db:66:ef:b3:95:a7:55:f7:43:6a:0c:e4:2c:d4:
3a:39:66:25:27:a5:6d:7f:ef:8d:33:d2:77:4e:c7:b4:71:e1:
77:26:88:cb:72:27:c2:52:d3:25:85:d8:62:8e:9d:1d:9c:bd:
67:1b:9c:71:60:18:93:c4:fd:c4:bb:64:40:7b:68:f6:54:39:
5f:df:2e:11:26:32:8c:6b:ad:6e:bf:db:fa:97:af:40:29:aa:
56:5f:67:70:56:76:52:86:b3:bc:c1:11:bb:d3:36:39:12:4d:
a9:af:d2:61:1c:73:2b:a1:6a:34:6a:29:0b:01:ee:ae:e3:99:
0f:33:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:16 2025 by rpki-client