Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B74902C3EC11EFA16EAA73762E951A.roa
File: D3B74902C3EC11EFA16EAA73762E951A.roa (raw, json)
Hash identifier: SWATM6TvQYsTNy021OrfVbhIVvIAfrq/IIXHNa9tj/4=
Subject key identifier: FC:C4:7D:A1:82:7D:67:DC:0B:42:C2:C3:35:7D:91:31:65:89:DA:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B74902C3EC11EFA16EAA73762E951A.roa
Signing time: Fri 27 Dec 2024 00:52:20 +0000
ROA not before: Fri 27 Dec 2024 00:00:17 +0000
ROA not after: Sun 12 Dec 2027 00:00:17 +0000
asID: 17561
IP address blocks: 45.192.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61219 (0xef23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 00:00:17 2024 GMT
Not After : Dec 12 00:00:17 2027 GMT
Subject: CN=676dfa44-a15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:75:03:17:53:8e:d3:0c:f1:4d:47:f5:8b:
9a:d3:21:a8:45:47:35:ba:d9:92:88:f6:22:90:57:
b0:32:44:ec:6c:67:65:b4:fd:a3:3c:81:79:59:a0:
34:9a:72:13:c0:46:69:b8:ab:a9:db:49:47:36:98:
c7:31:80:ad:e2:7a:36:60:2d:ef:98:46:9d:b9:44:
35:df:0f:49:d3:f9:ea:e0:fa:61:47:15:a2:d5:28:
d3:f9:f2:2b:43:a4:6a:11:db:d9:c1:d6:3c:00:7c:
2e:38:b6:23:07:6c:91:4f:8f:9e:41:4c:da:fe:74:
a3:e1:12:84:fe:05:86:4b:ec:b1:a7:cb:e3:cb:91:
09:cd:63:a7:25:2e:0c:56:a0:1f:81:21:4a:67:02:
b3:06:bb:28:8a:07:94:74:48:35:b2:77:8b:69:ea:
35:94:bd:05:99:a3:7f:22:fd:c1:fc:ac:cf:6c:00:
03:75:97:6b:e1:bc:87:29:c2:14:ad:c5:12:ef:58:
bf:86:74:2d:0f:0a:d5:3f:4f:eb:40:9a:c0:a9:33:
30:d1:99:f2:cf:c8:b0:50:63:91:5a:9b:08:b1:f6:
6a:33:a1:3e:88:78:f9:07:cd:e9:49:4e:51:85:48:
41:61:13:b9:dc:71:13:c8:6c:68:4a:50:20:8e:40:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C4:7D:A1:82:7D:67:DC:0B:42:C2:C3:35:7D:91:31:65:89:DA:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B74902C3EC11EFA16EAA73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cd:22:1f:74:7b:0a:82:67:95:cc:18:3b:39:14:bb:a9:10:
1c:d9:c7:b5:89:0d:36:c0:4d:7c:e5:bf:fc:cf:bd:e3:93:fe:
2d:15:10:38:49:2a:4c:86:7a:67:7a:81:7f:ee:49:6e:b6:06:
ef:25:af:44:b9:49:a8:84:89:66:ce:1a:d6:ed:14:1d:15:ff:
48:a1:8e:a4:85:2e:e4:bd:4c:53:3a:eb:22:28:eb:92:c9:6c:
df:2f:ac:fc:02:2e:99:98:af:da:e8:cc:7d:33:c7:43:66:04:
1f:05:76:84:ee:b7:9a:8a:be:e1:22:3c:6b:7a:42:a5:a1:8a:
35:08:e5:25:31:98:9e:e5:85:25:0e:17:72:16:d3:f8:9b:52:
66:13:2d:7d:36:c0:8d:da:18:3c:d3:b2:a3:eb:52:79:81:8f:
47:73:db:0d:62:01:9a:04:7e:a9:63:de:4a:2f:62:55:07:a0:
f4:db:13:6c:06:01:71:14:62:90:a7:9b:e5:83:44:50:f8:d9:
f4:e4:2c:fc:92:b9:ee:b9:46:83:00:2f:e4:26:80:08:e6:49:
1e:62:d3:02:59:29:47:6c:0c:7c:d2:2d:37:26:05:5d:e4:30:
b1:9a:97:8a:2f:62:33:c7:21:33:9e:3e:d8:ca:83:55:31:c4:
82:f6:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:05 2025 by rpki-client