Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BEE8D4CC3A811EF82578C45762E951A.roa
File: 1BEE8D4CC3A811EF82578C45762E951A.roa (raw, json)
Hash identifier: 14bM35CXfb6YxBrL+BxuL9lGmVlyBwIZFz1cRkYhhR8=
Subject key identifier: 9B:B6:3B:F7:40:B1:69:65:D6:F0:C8:A1:F8:70:7A:78:E2:47:62:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BEE8D4CC3A811EF82578C45762E951A.roa
Signing time: Thu 26 Dec 2024 16:40:26 +0000
ROA not before: Thu 26 Dec 2024 16:40:23 +0000
ROA not after: Sun 12 Dec 2027 16:40:23 +0000
asID: 17561
IP address blocks: 45.200.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60899 (0xede3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 16:40:23 2024 GMT
Not After : Dec 12 16:40:23 2027 GMT
Subject: CN=676d86fa-015b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:71:fc:06:96:5b:31:47:49:3f:2d:fa:75:
ce:e5:5e:8e:c1:32:0c:a9:58:1b:4c:52:fe:44:12:
9a:42:82:0b:d7:91:88:84:67:d4:9f:77:a7:a5:ec:
7d:12:a6:e0:f3:e6:66:e2:e7:15:1d:e9:4e:2b:0a:
03:69:e9:bd:e9:2a:25:86:4c:29:a9:83:47:e2:1d:
24:9a:9d:93:e0:5a:54:d9:f5:53:50:80:4e:29:c6:
69:c2:30:ad:1d:4d:83:89:ab:50:53:dc:86:70:98:
a9:8d:a1:c5:36:7e:68:58:94:28:44:12:60:54:87:
57:51:77:b4:5c:24:39:58:5c:74:ab:7a:49:6f:20:
20:86:5f:15:d3:ce:3d:28:c1:88:eb:fe:46:8c:25:
dc:1c:bc:e5:3a:04:a2:88:8b:8e:db:d7:66:cb:da:
7f:23:1c:de:a1:3f:0e:41:22:02:c9:a4:77:9e:78:
58:ac:90:b2:f0:74:83:ff:51:6e:74:21:54:4d:bd:
1a:b8:af:b8:52:85:c7:8f:a6:76:d1:70:8e:33:53:
a5:9c:a6:76:dd:20:ff:c7:d6:e7:d5:d0:aa:1d:43:
22:a7:50:13:e3:ed:ab:be:db:7a:da:4b:de:fe:d4:
c6:ba:3e:95:b1:2e:86:8f:af:23:32:76:67:a3:0b:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B6:3B:F7:40:B1:69:65:D6:F0:C8:A1:F8:70:7A:78:E2:47:62:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BEE8D4CC3A811EF82578C45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.220.0/24
Signature Algorithm: sha256WithRSAEncryption
37:06:22:2b:34:2a:ab:1c:59:6c:e6:e6:26:08:6d:68:aa:dc:
93:b7:f3:0f:a3:e6:47:73:2a:86:69:04:68:29:ce:f6:18:c6:
a0:96:ea:bc:76:59:9a:71:3a:e0:1f:2b:fc:3a:26:c7:20:d9:
77:c1:3d:1a:46:78:c2:db:26:11:8e:17:32:ab:f8:22:d1:36:
1c:e4:da:b3:bd:62:ed:ee:1c:7c:dc:47:ee:da:be:1a:6e:d8:
ba:1d:6c:60:a8:ac:a9:fb:1b:63:f2:4f:17:97:54:01:6a:09:
31:5f:d7:b0:71:41:e4:94:3f:f5:ac:a8:f0:cf:bd:fa:95:50:
a2:9e:90:19:ea:4a:20:7f:bf:37:20:d5:35:d3:d4:22:59:c8:
98:ad:60:fc:20:be:16:92:09:e1:a2:e2:9e:54:1a:38:1f:d8:
4c:e2:fb:af:0f:08:9a:93:47:6e:93:64:33:a9:51:b4:0b:12:
4c:59:f5:d5:07:ff:2b:f7:e2:bc:0e:1f:f3:9b:bc:49:0e:87:
42:0f:a1:fe:35:1c:ed:75:2a:4b:84:31:82:94:9c:20:c1:f9:
20:2a:77:1c:00:09:55:84:09:77:d7:5a:bd:db:d0:cb:7b:50:
8f:9f:07:a0:5c:22:79:cc:58:99:3f:30:12:2b:7c:a8:4e:c9:
8d:df:b3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:08 2025 by rpki-client