Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0B9C988B5FC11EFB7AAD39A762E951A.roa
File: F0B9C988B5FC11EFB7AAD39A762E951A.roa (raw, json)
Hash identifier: u6SMLa6Ik/mA3mEOnSFzZO+2pEl85PLWQYDlZHgslWM=
Subject key identifier: A9:0B:C2:05:ED:6E:E7:3C:08:3E:1E:F3:F6:D2:7C:F1:6E:30:AF:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E160
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0B9C988B5FC11EFB7AAD39A762E951A.roa
Signing time: Mon 09 Dec 2024 07:12:25 +0000
ROA not before: Mon 09 Dec 2024 07:12:21 +0000
ROA not after: Thu 06 Feb 2025 07:12:21 +0000
asID: 137443
IP address blocks: 45.192.178.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57696 (0xe160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:12:21 2024 GMT
Not After : Feb 6 07:12:21 2025 GMT
Subject: CN=67569859-15d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:2d:b5:95:31:38:6a:b7:59:9f:ec:6e:f5:
3f:78:d3:91:3a:93:57:98:98:3a:a5:0d:90:37:2a:
92:13:cb:a4:95:aa:67:f6:d4:2b:13:6d:09:a8:ce:
04:51:0e:5e:30:c9:27:3e:3c:2e:cc:46:a6:cf:b4:
e1:cf:64:b2:8d:02:ca:b9:1e:1a:95:d7:4e:75:d0:
37:ea:52:24:ac:31:fb:bc:28:09:a9:27:e5:13:b7:
02:72:a8:57:f2:ee:bc:e6:68:99:16:aa:0a:58:04:
ec:89:ca:2a:c8:aa:52:4a:31:da:c9:34:a1:db:cb:
18:6f:50:9c:cb:c6:8c:fd:d5:81:2f:e9:81:95:bf:
79:db:a3:2f:dd:1d:01:45:41:57:62:17:2f:a7:6a:
0e:8c:06:6e:2f:9c:5c:a1:33:70:f0:d2:d6:95:9e:
39:b7:97:db:22:6b:a7:1d:6c:11:97:3d:f6:0a:19:
8d:64:aa:19:e3:3d:14:42:04:1d:c1:f9:d9:75:3a:
bd:cd:73:4e:4a:bc:3d:4d:97:f7:0c:1c:65:1f:7c:
60:e9:05:14:60:d5:3b:5c:ba:75:1e:9d:dd:3b:2f:
ee:d2:5b:b9:28:7e:f5:a2:d1:98:5e:5a:50:c8:d7:
2d:6d:be:fa:98:f9:6c:b4:86:77:7f:db:3e:75:dc:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0B:C2:05:ED:6E:E7:3C:08:3E:1E:F3:F6:D2:7C:F1:6E:30:AF:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0B9C988B5FC11EFB7AAD39A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.178.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:fb:5e:5a:79:2c:16:c7:fa:2b:81:53:00:cf:a9:a3:22:66:
3a:f8:72:46:f1:e9:6b:62:86:90:3e:56:25:f3:e1:55:f7:57:
82:bb:48:7d:e5:f1:15:75:d0:3d:a9:62:2b:de:07:70:d1:26:
10:77:66:ac:2d:a2:78:d5:a0:c4:83:23:ed:49:37:e0:a9:64:
11:56:b4:4f:61:78:26:ae:4d:d7:75:ee:d1:ff:86:4c:c7:1b:
99:9b:fc:53:73:25:37:81:cc:1a:4a:9c:0b:18:b5:9f:c3:ab:
00:76:24:56:e9:20:a7:fa:50:cf:09:26:43:72:49:a7:a6:06:
97:45:af:9b:d9:b5:56:17:b2:0f:e5:19:70:00:db:71:3b:2f:
d4:31:77:9d:79:48:2e:7b:49:9e:d5:95:17:b5:e4:c0:fe:75:
13:af:4c:57:db:a8:d3:cf:b0:0e:2f:ec:e3:54:c1:ae:e7:ea:
b8:4c:b0:72:cf:3d:38:f8:fc:24:1f:67:e4:b8:de:28:0d:82:
99:84:59:1b:8d:38:2e:79:1d:b9:2b:d2:db:78:52:ee:f5:ff:
b0:91:c8:31:74:b8:5c:48:89:05:d4:b7:12:ea:59:68:fd:ac:
e7:0e:61:fb:bc:d9:9f:8f:50:5a:c3:6c:80:36:22:83:10:fa:
37:a8:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:14 2025 by rpki-client