Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F12050ACCDCD11EF844CCA51762E951A.roa
File: F12050ACCDCD11EF844CCA51762E951A.roa (raw, json)
Hash identifier: jE1Es/SXzU8cpZPJJtfS8bjROCDI4GEv5WiIS5LmdbI=
Subject key identifier: 07:9E:58:9E:2F:0C:48:A8:E2:13:22:0C:5F:BE:E5:08:71:06:CF:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F12050ACCDCD11EF844CCA51762E951A.roa
Signing time: Wed 08 Jan 2025 14:36:27 +0000
ROA not before: Wed 08 Jan 2025 14:36:23 +0000
ROA not after: Mon 03 Jan 2028 14:36:23 +0000
asID: 17561
IP address blocks: 45.196.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66034 (0x101f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:36:23 2025 GMT
Not After : Jan 3 14:36:23 2028 GMT
Subject: CN=677e8d6b-a6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:06:9b:72:96:92:8f:d0:17:48:d6:f8:25:
31:5d:fc:26:96:b0:48:1a:b3:1d:81:04:bd:67:31:
87:5f:42:2d:17:8b:66:92:4d:93:6c:65:d3:3f:9a:
44:a1:c2:e9:98:16:56:58:f4:f1:67:d0:c2:31:83:
18:16:39:b6:bc:fe:e9:60:71:0c:89:dc:14:80:c0:
c4:c6:3a:23:ca:98:9a:ef:2a:46:04:2b:73:9e:6f:
31:c2:46:27:d0:af:54:91:f4:66:41:21:56:3c:06:
d9:79:40:03:9a:e3:b8:12:b4:19:f4:b9:d9:52:3b:
ab:46:2e:4c:d1:e1:c4:f5:26:9c:1d:77:d4:fe:12:
08:1a:1b:09:12:b0:aa:ee:fa:5e:50:9e:fd:2e:e6:
85:83:02:6d:09:f5:d0:e9:19:17:ee:0b:55:36:39:
39:03:43:d0:46:57:f1:07:db:cb:90:4a:ba:93:da:
b5:4a:5c:32:3a:c7:ae:f1:b1:01:6d:6b:eb:34:4d:
9a:8d:53:06:cf:b8:39:0d:5b:eb:b7:ef:de:49:ea:
29:bf:ba:61:67:1b:2e:72:8c:78:16:d4:bb:0c:04:
2e:d8:55:45:8a:dc:49:a2:2d:a6:02:d4:0a:2c:80:
9a:59:ad:4c:8d:03:4b:80:db:86:bb:e7:e0:ad:47:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9E:58:9E:2F:0C:48:A8:E2:13:22:0C:5F:BE:E5:08:71:06:CF:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F12050ACCDCD11EF844CCA51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.193.0/24
Signature Algorithm: sha256WithRSAEncryption
19:49:7e:13:90:48:f7:6a:8e:ac:63:9b:75:98:ee:87:d8:40:
8a:a9:62:9d:72:20:ff:d6:c8:46:03:c1:37:dd:66:b9:70:59:
e8:fc:9b:3f:7e:9c:64:b6:c0:09:2a:5a:26:fe:76:b5:af:9f:
00:81:ab:52:f9:4b:c9:4d:9c:f6:2e:74:3c:0a:98:27:3b:e5:
b8:39:38:20:35:e9:76:64:71:6a:67:15:0c:31:cc:04:de:d2:
39:25:68:be:1b:5b:ba:25:19:37:29:e5:7a:6e:23:fe:10:bb:
c6:9b:9d:ae:4a:26:ec:08:cc:8a:9f:0e:35:92:89:bf:10:9b:
76:d1:a0:80:d7:ef:72:56:59:c0:28:df:fc:27:15:03:5f:3d:
05:ac:7d:8e:76:2a:55:d2:75:1d:4f:c6:4f:10:ae:3e:e3:78:
60:4b:98:d7:9d:38:92:3a:33:9b:07:a0:d9:8b:2d:64:7c:22:
21:88:0a:d1:53:e2:b5:4b:c7:c5:7c:2f:a7:03:7e:54:ac:74:
89:b4:1c:5d:7a:52:67:4f:ca:39:b2:4a:53:7e:55:d2:5b:34:
3c:02:6f:c8:d9:51:64:58:b0:c9:bb:91:29:c2:81:18:7a:b9:
ad:8e:54:1c:11:c8:f7:89:d4:5f:7d:9e:d9:16:01:fd:25:43:
f7:24:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:22 2025 by rpki-client