Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13012196C3AC11EFB9FE5D5D762E951A.roa
File: 13012196C3AC11EFB9FE5D5D762E951A.roa (raw, json)
Hash identifier: OxwG7MY8+HNBFvsPOPMvs+F7T3xcsD8ZKP0e48AffWk=
Subject key identifier: 44:BA:8E:E8:A7:07:F0:78:55:7B:76:91:DB:CA:9F:89:CF:A2:3A:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13012196C3AC11EFB9FE5D5D762E951A.roa
Signing time: Thu 26 Dec 2024 17:08:49 +0000
ROA not before: Thu 26 Dec 2024 17:08:46 +0000
ROA not after: Sun 12 Dec 2027 17:08:46 +0000
asID: 17561
IP address blocks: 45.200.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60941 (0xee0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:08:46 2024 GMT
Not After : Dec 12 17:08:46 2027 GMT
Subject: CN=676d8da1-4d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:82:60:8b:15:1f:fd:08:b8:c4:b4:6c:17:
c6:94:7a:82:74:99:6c:d2:dc:f3:5e:c5:30:8b:a5:
2b:39:20:46:a0:9b:52:88:64:43:40:d4:fe:3d:4c:
71:c5:3f:1a:83:92:9a:13:72:9c:20:92:3a:50:0d:
ed:e2:2c:71:e1:1e:f5:49:05:0b:eb:96:07:82:53:
0a:a7:51:9e:7b:90:08:b6:0a:d8:ba:c2:37:0e:6c:
ae:3c:f2:89:26:c7:a1:5a:58:47:7d:1a:c5:6d:4a:
da:88:2a:32:95:c2:15:9e:dd:a2:10:1d:91:58:a9:
50:ab:7c:4c:24:da:8e:35:9d:b3:4b:ba:f9:9d:c5:
90:b6:c0:35:9f:85:be:95:d1:f3:8a:18:73:73:38:
84:a7:d4:74:03:74:8f:f0:d8:44:f2:d1:b1:1c:08:
c0:a0:c1:de:bb:03:69:17:60:67:7c:3d:b7:b2:c9:
63:10:dd:c7:8b:4a:a0:bc:3b:21:47:2b:b8:e3:9b:
d1:8e:49:17:be:b2:9d:d2:49:da:47:7a:91:c2:b6:
50:ac:74:0b:54:b8:af:4e:08:a5:2b:12:aa:c7:b0:
b3:dc:ca:73:cf:ac:3a:af:62:0c:81:64:54:83:e9:
07:e5:5b:e5:2a:74:f3:74:7d:23:64:db:73:5b:e6:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BA:8E:E8:A7:07:F0:78:55:7B:76:91:DB:CA:9F:89:CF:A2:3A:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13012196C3AC11EFB9FE5D5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.241.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c3:37:9f:e1:70:c4:c7:2c:9d:28:5b:79:b6:1c:a4:3a:f9:
6f:80:41:08:a8:ff:7c:dd:60:55:d5:0f:07:19:57:91:d7:fd:
16:92:7c:48:c1:ac:b1:58:d8:a4:1d:3e:8e:09:3d:82:fe:fb:
41:03:2e:44:2c:47:aa:44:4c:fc:b1:07:e3:11:ea:76:55:b2:
f3:98:57:cc:fe:cc:e1:fc:60:c1:e2:6a:8e:47:28:45:12:d3:
f4:0d:3d:f2:23:64:05:bc:dc:c5:5f:5f:4a:82:b0:09:4a:fc:
7b:57:f1:a5:62:b1:20:4b:76:0f:28:99:b4:a9:9b:55:a9:5d:
42:4b:d7:38:fe:65:c4:5a:43:29:aa:74:e4:81:a4:85:62:44:
f4:c0:26:49:91:b2:e0:36:ba:65:5f:34:0a:ae:7b:6f:ec:8d:
4c:18:d2:12:c4:cc:14:ee:dc:25:ff:62:d6:ee:11:41:0d:9c:
24:87:4b:0d:22:af:e9:0c:28:3f:84:d6:2a:bf:49:a3:6a:a6:
2a:9c:4e:9a:aa:0a:a0:55:5e:76:6c:b9:a5:4f:e7:09:1c:28:
c5:c9:fc:5f:32:3a:e0:ca:d8:0c:ed:ab:5b:b4:cd:fb:2b:3d:
ed:e1:d4:4f:64:93:1c:cb:c1:6a:12:c3:5d:05:45:d7:f3:6b:
a8:47:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:05 2025 by rpki-client