Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA96E812C3A211EFBF29E7A0762E951A.roa
File: DA96E812C3A211EFBF29E7A0762E951A.roa (raw, json)
Hash identifier: MWjtgpL7CIpcCFlKjRbPXs5pp3b7N4mM54oKZy+MJxQ=
Subject key identifier: 8F:AB:70:2A:A2:93:95:50:8E:68:88:68:8F:FF:06:69:D9:06:5B:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA96E812C3A211EFBF29E7A0762E951A.roa
Signing time: Thu 26 Dec 2024 16:02:49 +0000
ROA not before: Thu 26 Dec 2024 16:02:45 +0000
ROA not after: Sun 12 Dec 2027 16:02:45 +0000
asID: 17561
IP address blocks: 45.200.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60843 (0xedab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 16:02:45 2024 GMT
Not After : Dec 12 16:02:45 2027 GMT
Subject: CN=676d7e29-8de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:33:f0:fb:24:52:c5:89:30:39:20:66:3a:
ac:40:46:0b:c7:fa:e3:27:8c:ac:59:e9:4a:fa:70:
67:3d:84:82:a8:38:80:32:1d:12:ff:1a:4b:1b:53:
32:82:5b:fa:a9:2d:65:16:04:8f:ec:82:31:b4:7e:
00:31:fb:20:5f:f4:47:51:79:7d:91:de:02:ba:db:
6a:f8:ad:c3:39:95:bd:f5:21:49:58:36:e0:27:1e:
b5:6c:77:20:47:3a:99:f1:ab:b4:ab:e9:3b:c6:85:
27:67:2b:1d:99:28:45:70:c9:93:73:55:14:dd:f9:
46:cb:b8:40:f8:98:63:4a:c8:74:1f:a3:91:64:b1:
ea:f3:da:ba:2c:d1:00:35:31:fb:b7:b9:44:64:b5:
35:1a:89:a4:07:c4:a5:f6:18:54:e6:78:59:85:99:
03:36:57:67:5d:8a:55:6a:65:06:45:d8:79:62:b0:
4f:90:26:c8:b6:41:f3:21:49:2f:dd:f8:81:5b:e3:
87:fd:58:31:ac:75:13:9f:29:cd:da:55:1a:37:35:
18:63:ac:4d:51:f4:81:fa:84:8e:f3:d1:a3:8f:d1:
df:e0:bf:78:67:57:1d:00:51:54:e6:87:9e:69:01:
3b:a9:24:8a:fc:aa:b6:88:09:ce:b5:cc:f9:c2:91:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:70:2A:A2:93:95:50:8E:68:88:68:8F:FF:06:69:D9:06:5B:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA96E812C3A211EFBF29E7A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c0:df:ee:0f:3c:e1:a2:43:05:ad:d2:2c:93:0a:f3:f2:51:
f1:f3:f4:19:5b:87:05:6e:ea:03:95:0b:b7:08:66:b7:5f:42:
67:21:fa:78:14:1e:21:3b:c6:91:05:e3:3f:2a:0a:b2:26:41:
27:f7:51:4d:87:1b:39:6e:b1:7e:5a:8b:fd:56:ee:85:a0:29:
fd:c9:00:52:38:bd:30:09:90:4a:11:1a:e6:c0:23:fc:79:ad:
f9:a5:3c:71:7c:b9:7c:ae:6c:97:30:5f:5d:d7:ee:dd:53:7b:
aa:d9:b3:bf:98:f7:35:dc:19:a4:af:21:4b:0e:bd:ce:ef:77:
76:6f:b1:1f:39:44:16:ec:cf:dc:cb:8e:b2:ea:32:ca:7e:cf:
f4:d5:dc:d1:18:f6:f5:04:18:71:4b:6b:ab:a6:e5:31:d4:d1:
f0:d2:dc:52:ba:b8:cf:7b:7d:f8:75:38:2f:f5:70:05:6b:5b:
3c:38:d9:e5:10:f6:85:23:25:03:16:36:f7:ee:78:2b:ca:56:
a9:28:b4:98:ed:11:4c:f3:26:6f:cc:f8:f6:b0:f8:de:5b:4c:
68:ac:39:dc:ca:66:20:4c:ec:35:ef:d9:e8:87:ff:09:4b:c7:
03:78:26:89:30:84:d6:26:24:e6:bf:9e:ed:13:e6:9c:b3:55:
27:7d:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:33 2025 by rpki-client