Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E976A2E6C38E11EF868E3FA5762E951A.roa
File: E976A2E6C38E11EF868E3FA5762E951A.roa (raw, json)
Hash identifier: GYtJfGdGCRoz8jkNQdxam3tRlTeLMxoHsfa5oTp/c94=
Subject key identifier: 40:BF:8F:54:F6:0E:44:AD:9F:E4:F5:86:66:FC:CC:C9:AC:60:E9:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E976A2E6C38E11EF868E3FA5762E951A.roa
Signing time: Thu 26 Dec 2024 13:40:04 +0000
ROA not before: Thu 26 Dec 2024 13:40:00 +0000
ROA not after: Sun 12 Dec 2027 13:40:00 +0000
asID: 17561
IP address blocks: 45.196.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60627 (0xecd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:40:00 2024 GMT
Not After : Dec 12 13:40:00 2027 GMT
Subject: CN=676d5cb4-0e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:0e:25:00:23:3a:2d:21:f5:0b:b7:46:1c:
87:25:bd:e0:a0:3d:29:c3:17:1a:54:6d:5b:70:d6:
2f:f7:87:4c:86:6a:00:47:65:e2:fe:0c:00:63:0c:
45:ee:5d:03:ae:b2:99:79:0a:59:02:10:a8:53:06:
9e:75:80:de:40:63:48:aa:47:62:9a:23:06:5a:1f:
a7:04:12:a2:1d:32:85:41:f7:cd:36:9f:cd:be:82:
f0:a3:92:cd:40:8c:6a:c7:b1:95:8f:c2:b8:4c:b7:
b9:a0:8f:2d:01:df:ec:3d:d5:fc:20:a2:b4:3f:ad:
a8:ed:5b:ca:56:2f:e2:ed:02:ff:dc:a1:c1:25:f0:
0a:d7:f5:47:b4:2e:e3:e7:a0:e3:fc:80:7a:bb:d0:
49:7d:63:85:47:ff:93:a9:6d:c7:3b:d3:c2:73:0e:
8a:ce:e0:0d:ee:11:e2:31:6f:d7:be:1c:2a:6d:2e:
8c:84:d8:4d:0c:d2:7d:73:76:46:ae:b5:26:e0:24:
8d:b4:e8:a4:8c:10:6d:41:5d:db:b9:7e:59:ae:e3:
31:81:67:45:c5:a9:59:bc:b0:1d:dd:ed:b0:1b:c3:
e0:2f:88:b1:68:f6:99:d3:5b:24:03:2c:2c:25:ec:
c9:a7:1a:59:b2:67:93:36:52:f9:49:5e:c3:78:d0:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:8F:54:F6:0E:44:AD:9F:E4:F5:86:66:FC:CC:C9:AC:60:E9:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E976A2E6C38E11EF868E3FA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.219.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b3:74:db:90:c6:0b:d2:28:a2:08:ee:32:4d:ca:e4:b6:00:
4c:22:b8:96:d4:91:c8:44:0e:31:f7:11:ef:3e:93:6c:75:21:
72:a8:87:a7:f2:7e:03:1f:9c:3b:2d:9e:c6:70:04:d9:d3:3f:
f3:2e:69:e5:fb:01:91:de:b1:9d:0c:a4:da:ac:02:cd:32:db:
81:3d:e3:ce:aa:84:a2:8f:de:5f:42:8a:4b:f8:de:da:97:a5:
04:40:36:14:fb:12:26:90:ca:76:13:1f:d9:e0:59:21:22:2e:
bc:06:e7:d5:5c:7d:23:4d:0b:b5:da:05:a7:c7:1b:8b:bc:cd:
1d:32:52:03:3b:a2:bb:c8:97:05:ae:9a:ac:c9:b7:76:e5:92:
49:83:3d:7e:77:11:60:68:d7:48:d0:c9:05:4c:c4:6b:16:80:
e4:3e:68:70:5b:fb:22:53:be:d7:29:0a:76:43:bc:9c:f9:fd:
84:ff:e0:da:98:d5:0e:f6:7f:2f:c9:45:9a:e2:26:a2:ef:0c:
53:5a:50:24:a5:60:5f:a4:56:42:a2:6c:5b:6c:4b:20:e4:28:
7d:d3:4e:a1:75:75:c3:08:94:6d:fe:b4:8f:33:a8:e5:75:cd:
62:cc:11:87:04:c1:87:c7:13:af:6e:5f:d2:f6:70:cf:cd:63:
ba:50:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:40 2025 by rpki-client