Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D13C02C39C11EF9DDFE077762E951A.roa
File: 21D13C02C39C11EF9DDFE077762E951A.roa (raw, json)
Hash identifier: D5nqmkFA8X04Q74aGoPa3q1ug2sL6mgmAifr2DI50mw=
Subject key identifier: FE:00:B5:4A:04:44:E6:35:C5:FE:31:DB:50:82:17:F4:29:89:F7:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D13C02C39C11EF9DDFE077762E951A.roa
Signing time: Thu 26 Dec 2024 15:14:42 +0000
ROA not before: Thu 26 Dec 2024 15:14:38 +0000
ROA not after: Sun 12 Dec 2027 15:14:38 +0000
asID: 17561
IP address blocks: 45.199.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60771 (0xed63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:14:38 2024 GMT
Not After : Dec 12 15:14:38 2027 GMT
Subject: CN=676d72e2-6e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:9e:84:0d:8e:fc:2b:93:7c:3c:cc:32:a6:
81:4f:2d:83:1d:ae:05:d4:32:b2:3c:c7:2c:86:18:
b7:a5:81:fe:f8:14:8c:6b:e9:45:8d:d9:76:00:a2:
8d:0c:1d:56:3a:f2:01:d5:41:82:4e:41:54:9a:15:
1f:bd:5e:50:d6:83:f4:a7:03:86:30:97:c3:e2:3f:
b5:ee:40:f0:70:a6:b0:9c:8a:e9:98:40:3f:13:d7:
b8:d9:a1:15:ee:57:b5:b1:4d:cf:34:b8:a7:01:1e:
59:98:40:b7:88:bd:b3:8f:14:2c:2e:4c:cc:bc:28:
db:d9:1d:6c:3d:4f:5e:e2:d5:e2:bf:19:2e:e2:37:
41:63:c6:0b:1f:81:14:66:b0:06:d9:ff:be:9b:48:
e7:c4:75:bb:4b:a9:5c:73:36:f7:60:f0:33:0d:c2:
4a:a8:76:69:e8:82:ed:d2:46:d9:0e:45:f9:b3:89:
48:96:fe:9c:1e:2a:d2:2b:f2:8a:a9:4b:06:5e:c6:
c1:ba:43:cd:83:c6:e0:a0:31:69:d1:0d:7a:f2:f2:
4f:dd:89:4f:df:19:5d:76:de:50:4d:85:a2:40:95:
25:fa:a1:d8:7f:97:fb:a2:17:a4:87:d5:89:c2:b7:
54:f5:52:2b:84:fa:99:9f:9e:c0:74:40:5e:f8:d7:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:00:B5:4A:04:44:E6:35:C5:FE:31:DB:50:82:17:F4:29:89:F7:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D13C02C39C11EF9DDFE077762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f1:63:5f:2d:9d:ff:e1:b0:e2:82:ca:48:03:36:df:14:4c:
76:82:48:a0:f3:99:97:82:8d:21:64:e3:67:7d:41:35:8d:eb:
5b:f3:98:13:f8:d5:a8:21:e4:93:e8:52:94:cb:12:83:d0:2a:
14:8f:dc:a4:2f:67:c3:ee:28:72:00:4e:1c:59:c5:23:5a:5f:
64:33:e2:08:de:46:13:58:d5:ba:a4:7a:18:19:b1:7b:09:35:
17:98:92:d3:be:aa:ae:a9:62:fc:48:91:53:81:3b:88:bf:0d:
51:ee:53:3a:0e:b6:a3:43:bc:03:cc:3a:99:25:7c:39:a4:b7:
2e:b9:20:45:11:8b:cc:18:22:60:32:d9:5a:08:e6:43:23:36:
72:ee:69:e6:3f:f7:9d:e0:ce:51:47:83:30:c8:f2:8f:ef:1d:
81:76:b6:70:46:9f:5a:62:a7:a4:f3:d3:ff:bb:9a:b6:da:39:
4b:d9:08:fa:d2:a9:ca:b4:41:da:b6:61:ea:ef:21:93:f0:73:
eb:d1:9d:ed:9f:cd:c7:31:d6:e3:4b:fe:ce:19:b2:03:8e:89:
ae:9d:c8:7e:81:da:ea:02:5a:b3:8f:02:62:ea:41:d4:40:b5:
f2:9f:c5:49:97:a8:48:e6:e9:b6:4f:26:72:7b:ca:8e:f9:7f:
73:68:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:20 2025 by rpki-client