Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED0E5340B5FB11EF89057494762E951A.roa
File: ED0E5340B5FB11EF89057494762E951A.roa (raw, json)
Hash identifier: YJzRyCRT8J1EZm/INK+W4LEZ5CkgLLyXyjn5ETXE/Io=
Subject key identifier: 5E:37:F1:E3:9B:BD:42:A4:60:76:EB:9F:7F:FF:6F:56:2A:2D:09:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E154
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED0E5340B5FB11EF89057494762E951A.roa
Signing time: Mon 09 Dec 2024 07:05:09 +0000
ROA not before: Mon 09 Dec 2024 07:05:05 +0000
ROA not after: Thu 06 Feb 2025 07:05:05 +0000
asID: 149014
IP address blocks: 45.192.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57684 (0xe154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:05:05 2024 GMT
Not After : Feb 6 07:05:05 2025 GMT
Subject: CN=675696a5-1d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:78:f2:fc:c3:e5:85:40:8c:db:ce:8d:e6:
99:99:2e:ac:eb:e2:05:36:49:b4:45:06:07:86:f7:
4b:4d:60:4d:5e:6a:00:e5:6a:bd:16:2e:ff:68:5c:
2b:92:9c:69:e1:cf:4c:75:4f:51:4a:a2:a5:64:56:
e3:3b:7e:ab:55:4c:03:99:97:22:74:6f:fc:7a:b0:
0c:b2:0b:22:d6:35:59:8c:71:a7:31:05:af:d0:fd:
77:f5:16:88:a7:fc:e6:7f:07:5d:32:18:b7:2f:f8:
b5:4b:3c:91:b0:7a:64:50:dc:21:88:ed:65:76:01:
f7:98:1b:0e:6d:f9:c6:f8:5b:76:b0:22:e8:76:b2:
04:a3:41:49:f5:bc:4d:67:04:79:3b:e0:ee:28:c4:
5b:c5:47:4d:98:07:37:ae:47:2a:0f:e1:65:f4:d5:
8a:ff:a2:51:c0:87:31:8e:f6:4d:05:2d:a1:31:d7:
c4:69:c0:80:60:e5:15:ce:25:dc:a1:d6:37:c7:7d:
51:02:5e:bc:59:11:e4:8f:39:d6:10:6b:90:39:70:
e3:b4:eb:fa:96:b1:55:ac:95:89:e9:e2:57:67:41:
d0:cd:35:7c:cf:30:ae:9f:9e:2a:ff:53:5e:c6:99:
e7:5e:d1:05:f3:53:a2:81:a3:a2:cd:f8:2a:b5:6b:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:37:F1:E3:9B:BD:42:A4:60:76:EB:9F:7F:FF:6F:56:2A:2D:09:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED0E5340B5FB11EF89057494762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0e:c4:94:9b:b9:2b:71:53:8c:cf:68:fd:df:07:09:33:ff:
af:7c:af:48:5d:30:2e:40:9d:09:2a:12:bd:b0:32:84:8b:e5:
1f:9a:50:dd:a2:98:3d:65:58:92:19:6f:45:e2:e0:0c:26:9e:
5b:34:a2:f6:18:c3:40:42:2d:0e:ca:30:15:3d:d4:2e:e9:ac:
e0:50:ea:44:6c:a7:ff:3c:27:91:04:9f:d7:ef:bc:7e:34:94:
a2:d9:f5:00:41:d2:0b:34:95:63:95:35:e1:61:35:f8:af:ff:
f7:0a:34:c2:23:4f:4b:30:e5:37:ff:06:c9:44:15:81:10:dc:
e4:7a:6a:48:05:3f:c6:15:51:89:1e:d1:a5:08:e2:38:e3:ba:
89:b1:4f:75:fa:65:f5:fc:5a:b1:e5:d7:ba:13:c8:24:9b:2b:
dd:4c:6e:da:9f:4f:30:db:72:a1:f0:d4:e1:80:5a:82:4b:81:
d9:99:e8:90:b6:7d:17:fb:fd:be:57:60:f5:8f:ee:dc:b4:71:
db:50:0d:10:98:4c:6d:45:6b:42:5e:d9:bb:39:65:99:19:13:
62:83:f8:9b:99:bb:b0:b9:0e:08:b1:aa:da:b5:c6:3e:93:16:
90:2a:3d:1d:a9:93:9c:bb:ac:f7:31:d3:d5:3e:f5:f2:06:35:
ea:77:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:29 2025 by rpki-client