Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8731D86C40011EFA1FB4186762E951A.roa
File: D8731D86C40011EFA1FB4186762E951A.roa (raw, json)
Hash identifier: 9icSGdcUoZHuZ120xq5fMf4yT8eiQCKZcYeEYzr/EY4=
Subject key identifier: AD:A4:27:0A:5B:A9:09:B9:73:8E:53:C5:28:C7:98:02:ED:B4:72:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8731D86C40011EFA1FB4186762E951A.roa
Signing time: Fri 27 Dec 2024 03:15:38 +0000
ROA not before: Fri 27 Dec 2024 03:15:35 +0000
ROA not after: Sun 12 Dec 2027 03:15:35 +0000
asID: 17561
IP address blocks: 45.195.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61396 (0xefd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:15:35 2024 GMT
Not After : Dec 12 03:15:35 2027 GMT
Subject: CN=676e1bda-21b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:e4:6c:45:71:f5:6a:b6:4e:0b:31:fa:01:
5a:10:ac:a3:99:c7:4c:ad:d8:2e:ad:d9:d7:ca:7f:
24:3e:14:2a:b6:d3:7d:c4:ea:be:c3:ee:6c:e1:cc:
d1:ee:88:4d:62:fb:27:0d:19:3b:e4:f0:af:55:d4:
8f:b5:46:18:bd:7a:41:c7:4b:34:dd:24:09:01:f8:
2a:8f:b9:3a:bd:eb:28:82:a5:0a:b6:49:fe:e5:66:
99:66:a2:03:83:a9:14:02:36:f8:48:b9:b9:1f:e5:
23:28:de:7f:4c:3d:2a:d6:cb:0a:f3:81:b3:c6:c4:
11:80:8d:08:bc:8b:db:d4:a1:0f:8f:37:77:e3:bb:
20:ba:56:18:b7:f8:ae:09:7a:5f:7b:f7:a9:41:20:
dc:eb:01:fd:8c:2b:7c:b7:89:36:8a:27:49:0e:ef:
ab:8c:7b:6f:51:3e:7f:0e:5a:6e:e1:1c:15:fe:40:
59:d8:03:09:7f:c3:56:ea:d2:30:cc:15:50:8c:d6:
4a:47:37:05:b8:07:cf:f1:a6:48:a5:27:83:0b:2d:
61:8f:c0:00:3c:d9:76:f7:98:55:7d:af:ed:32:4c:
f6:ec:8e:98:e7:5f:7f:c8:38:c8:fd:68:a5:62:e8:
b6:e2:35:a8:ef:b2:7a:34:4d:31:7c:cd:94:38:85:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A4:27:0A:5B:A9:09:B9:73:8E:53:C5:28:C7:98:02:ED:B4:72:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8731D86C40011EFA1FB4186762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.95.0/24
Signature Algorithm: sha256WithRSAEncryption
53:dc:d5:5c:f5:79:09:ed:cf:a1:7a:01:35:aa:06:a0:6c:58:
0d:07:a6:75:c6:ba:1e:ba:5d:08:e2:c2:e8:43:ea:f4:f8:22:
a0:48:5f:07:06:ad:31:c1:67:64:a9:6b:76:39:2e:35:b8:fe:
82:10:3c:9d:96:07:b6:54:65:1d:31:a1:64:f0:2d:c6:5e:de:
19:15:8d:46:89:d3:c3:db:f9:2c:6e:c9:80:8f:a5:c9:c2:8a:
5d:ab:61:48:08:8a:b4:a3:ff:39:86:57:88:7f:77:cd:89:6a:
ab:74:61:f9:3d:a1:94:ba:82:f3:20:ee:50:7d:8c:7a:47:31:
35:6a:10:e5:d8:50:e2:e2:cc:9e:81:6c:2e:50:c0:68:69:ca:
0b:6c:c9:22:7e:08:ab:6b:68:e9:72:bd:de:08:93:79:e4:19:
49:d8:88:53:21:53:36:c8:af:e2:c1:55:91:33:a4:ed:36:a0:
0e:60:cf:c3:3d:7b:db:70:b9:d2:60:04:f3:9e:1d:20:41:07:
e0:8d:10:3f:15:97:13:c0:9a:19:cc:ba:71:37:78:74:24:1a:
85:83:ab:be:68:29:d2:8d:f7:a7:26:56:7f:47:5e:2d:c4:d2:
f2:08:2e:cb:f3:17:31:c4:cd:cb:c4:2d:1d:66:43:7a:24:3b:
d0:63:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:39 2025 by rpki-client