Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D427F940B60911EF970A096B762E951A.roa
File: D427F940B60911EF970A096B762E951A.roa (raw, json)
Hash identifier: u3SUjWqQQoTGkX/lW0ZPM9qUcdgg2LY8qpuifhcqpBk=
Subject key identifier: 52:65:7B:02:16:96:ED:B1:10:BD:49:68:23:DE:CC:1B:58:05:18:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E196
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D427F940B60911EF970A096B762E951A.roa
Signing time: Mon 09 Dec 2024 08:44:40 +0000
ROA not before: Mon 09 Dec 2024 08:44:37 +0000
ROA not after: Thu 06 Feb 2025 08:44:37 +0000
asID: 149014
IP address blocks: 45.192.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 08:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57750 (0xe196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 08:44:37 2024 GMT
Not After : Feb 6 08:44:37 2025 GMT
Subject: CN=6756adf8-70a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:45:08:0e:02:b8:f0:e6:17:2b:0b:05:42:
f3:34:71:34:ec:25:96:7b:17:6d:01:d9:a5:4a:35:
f2:b8:e9:83:08:88:1d:b1:fd:bd:48:27:85:e9:31:
55:d9:eb:06:e3:e8:c9:26:e5:16:42:af:6c:39:fb:
63:49:b8:17:d7:03:28:81:0c:f7:0c:39:88:91:10:
ee:f6:5a:8c:da:01:4b:04:89:c4:59:20:71:7d:2c:
4a:7b:e4:a5:ad:19:cc:fe:ff:45:f3:17:16:59:bb:
80:39:73:b8:38:80:67:6f:2f:5a:f3:eb:76:a4:e8:
84:3c:53:ab:de:f1:81:cb:97:07:26:67:df:aa:87:
20:a7:b7:1e:eb:06:5f:28:7a:a3:3c:9b:d9:78:4f:
75:5a:44:fc:46:43:75:16:71:0c:3d:bd:96:3e:50:
93:88:fc:4c:f7:ac:4a:0a:ba:7a:f3:76:2b:56:40:
e3:a2:51:00:fe:32:49:be:2d:f9:e1:4d:02:51:f0:
30:1c:01:af:2a:0f:4c:fc:93:40:64:65:27:76:75:
ba:72:fc:af:71:93:96:7f:56:f2:5c:00:1e:76:8a:
f0:b4:70:cb:9c:f3:e8:eb:a9:98:0b:9a:3a:a1:df:
ee:e2:a7:43:b2:47:61:c7:48:d8:7e:a0:ec:9f:d2:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:65:7B:02:16:96:ED:B1:10:BD:49:68:23:DE:CC:1B:58:05:18:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D427F940B60911EF970A096B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.177.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7d:3e:1e:61:2f:d6:d1:e7:e8:6b:93:a3:e0:2a:63:73:bc:
1c:33:5f:b9:18:ff:03:f1:87:cd:89:40:fc:14:df:07:2f:af:
62:c3:62:33:1c:eb:53:8d:67:b9:cd:b3:82:24:96:02:24:e2:
e6:ba:46:d7:8d:3c:3e:e3:00:4f:d5:1f:af:7b:86:95:8d:79:
db:2c:57:8a:78:cf:46:4a:cc:fb:35:e7:01:83:0e:62:c2:19:
36:25:5f:e5:90:b5:03:78:e8:c1:1f:46:28:32:5c:22:b3:69:
3d:1e:4a:6a:d6:cd:f8:a4:7a:8a:31:4e:dc:7f:ab:ae:82:55:
56:43:ab:b4:d7:12:55:0c:26:ee:5f:f9:ee:48:17:30:61:e7:
1e:6c:25:ab:0a:18:d7:36:a8:da:62:57:be:79:34:42:e2:7b:
70:9c:4f:7f:9a:e7:ad:63:83:95:96:ed:ef:b5:c5:5e:6b:9e:
79:ba:41:4e:20:8a:e2:9e:4e:dc:ee:8f:80:94:8c:c5:ed:3d:
09:22:fc:78:74:6a:a5:3f:60:28:eb:7b:53:a6:47:f5:bc:2b:
e6:ee:be:3d:07:33:75:c9:61:ff:98:73:13:aa:f1:aa:ff:94:
63:fd:ba:be:4d:da:b2:e0:a8:61:73:18:12:d2:45:3e:72:61:
e5:ae:15:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:41 2025 by rpki-client