Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBB0A59AACA011EF8F126EA0762E951A.roa
File: CBB0A59AACA011EF8F126EA0762E951A.roa (raw, json)
Hash identifier: D+rB1n2lhEdwV0Ud/pIYSS5FkhdPCZmDlWZFLmdlWWA=
Subject key identifier: CF:5F:F3:D4:D1:F1:5D:76:6D:5D:B5:FB:AC:9D:E4:A7:1F:98:B3:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DBD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBB0A59AACA011EF8F126EA0762E951A.roa
Signing time: Wed 27 Nov 2024 09:20:08 +0000
ROA not before: Wed 27 Nov 2024 09:20:05 +0000
ROA not after: Tue 11 Feb 2025 09:20:05 +0000
asID: 399989
IP address blocks: 45.196.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56272 (0xdbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 27 09:20:05 2024 GMT
Not After : Feb 11 09:20:05 2025 GMT
Subject: CN=6746e448-b17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:97:40:be:78:02:28:12:6f:3a:a0:14:a1:
76:88:e0:7d:db:3f:91:4a:f2:98:61:ac:6c:42:88:
a8:47:8f:69:28:53:36:a8:e9:3b:18:28:d4:3c:34:
53:40:f4:41:f0:64:cd:cb:bd:88:a7:6d:d3:a0:c1:
6a:9f:b4:78:b7:c3:89:1b:5a:ab:37:68:8b:5a:29:
8f:13:25:87:b0:88:53:65:9a:3c:83:b4:e1:ee:1f:
ac:87:da:b1:e2:8f:9b:ea:f6:1d:a9:2f:12:e5:40:
0b:49:c3:a8:c7:fc:d9:73:7d:e6:b9:da:1d:6e:9c:
25:d6:aa:26:43:bf:18:e4:a2:4b:92:ce:e4:d1:9a:
f4:6f:29:a9:bf:4c:3f:b1:f5:ad:3a:5b:91:a1:cf:
8f:fb:de:ec:91:74:69:98:b2:1d:64:c8:72:06:4d:
dc:c4:ba:b4:12:bf:1c:96:d7:ae:90:30:37:cc:e0:
0d:8f:0e:4c:0c:c8:f4:07:e3:70:e2:fa:ba:8e:a9:
1c:fd:9b:33:30:70:37:b1:fd:6a:db:b5:9e:87:ff:
a8:f7:b5:e5:cb:c0:31:e8:c4:01:47:ee:9b:08:c1:
c6:aa:a4:5a:e5:92:b0:c2:dc:a9:e9:22:95:71:82:
32:8e:80:91:88:0d:53:54:28:73:20:6d:47:14:10:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5F:F3:D4:D1:F1:5D:76:6D:5D:B5:FB:AC:9D:E4:A7:1F:98:B3:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBB0A59AACA011EF8F126EA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:3f:e4:1b:20:01:65:8d:5d:b2:5d:e7:3b:0e:69:44:34:a6:
3b:f7:58:89:c2:c3:5a:45:7d:9d:0a:a3:9d:0c:2d:8f:9a:6c:
98:5c:93:0f:8f:b1:83:17:6d:17:8e:24:4c:53:4a:69:bd:59:
26:c4:e9:ba:9c:63:44:72:13:ce:26:37:71:85:ca:5c:82:d7:
27:6b:dc:57:06:7b:8b:86:32:c3:b1:44:a2:11:8c:d4:e0:a2:
d9:9d:7d:9e:6b:a9:ce:09:a1:0c:bc:ce:90:ae:98:38:e5:ef:
47:75:81:7d:f0:c1:74:fa:cf:51:52:de:7d:c4:6c:17:4e:7c:
e8:68:be:1e:34:7c:08:9b:4e:5c:af:90:a1:10:e3:d6:a3:09:
cc:11:63:be:2b:48:82:78:d0:2e:f0:77:e2:c2:a9:04:40:75:
31:b4:2a:5e:88:35:9e:fe:89:2a:0f:fa:c2:36:17:45:1d:39:
e6:bc:2a:46:dc:d5:7c:4f:10:06:9a:a6:cb:33:59:01:9a:bb:
16:94:50:78:2c:04:1a:5d:4f:48:76:8a:d1:22:3e:48:3e:ce:
0d:3f:db:43:50:f0:97:f3:25:df:f7:0e:59:23:36:f1:a2:94:
80:f4:6a:1c:90:3a:73:a1:a3:02:b0:d7:62:44:cc:9b:31:79:
d5:61:96:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:15 2025 by rpki-client