Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23D1634CC39711EF87B5C859762E951A.roa
File: 23D1634CC39711EF87B5C859762E951A.roa (raw, json)
Hash identifier: qicB9bP3uHfo2btDHDzH1NvMULi/CBiUD4jqpz0Of/I=
Subject key identifier: CD:F5:A1:E6:2B:54:BB:F4:C7:FF:25:B8:BF:C2:6E:1C:BD:8D:37:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23D1634CC39711EF87B5C859762E951A.roa
Signing time: Thu 26 Dec 2024 14:38:58 +0000
ROA not before: Thu 26 Dec 2024 14:38:54 +0000
ROA not after: Sun 12 Dec 2027 14:38:54 +0000
asID: 17561
IP address blocks: 45.197.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60717 (0xed2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 14:38:54 2024 GMT
Not After : Dec 12 14:38:54 2027 GMT
Subject: CN=676d6a82-dd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:ac:9f:cf:b7:5e:99:ae:97:2c:67:49:85:
57:3b:e4:49:fe:31:b1:e3:f3:53:e0:54:a2:0b:32:
d3:9a:09:39:75:9f:be:2b:75:d9:0d:bc:14:8e:d1:
da:b8:3b:15:5e:26:99:7c:a2:75:56:15:da:f3:5c:
ab:1d:61:30:c3:23:4c:82:3a:64:9f:76:87:7f:7a:
2a:10:b5:bf:af:0b:d3:a8:ca:a3:d3:0e:c9:9b:7f:
73:2b:eb:db:26:95:2a:4c:d5:42:25:3d:2b:08:0d:
f7:8a:cc:9e:3d:ae:b0:22:18:15:91:b0:f6:f1:7d:
49:6b:e3:20:ec:41:bc:1b:3d:9f:1d:90:52:13:7c:
0b:bc:85:cf:c0:9c:75:fe:ba:fd:2a:0c:34:1b:4d:
84:9a:2d:51:92:b0:9e:ca:f2:57:69:82:cc:3b:21:
f0:fb:1f:b7:b6:16:50:80:b3:a4:4c:67:22:43:90:
e0:90:3b:23:fe:11:53:50:d3:1b:7c:fc:c2:e2:31:
d2:4e:ac:59:d9:4c:87:bf:f0:f2:fc:6e:6a:fa:89:
1d:af:17:89:aa:12:d3:08:02:71:71:f1:9c:84:36:
c3:56:cf:09:6d:c6:dc:82:e9:a1:9e:5f:b5:f4:98:
a9:4a:14:4f:b2:3e:d4:7f:9e:3b:ae:c7:c5:b4:34:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F5:A1:E6:2B:54:BB:F4:C7:FF:25:B8:BF:C2:6E:1C:BD:8D:37:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23D1634CC39711EF87B5C859762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.25.0/24
Signature Algorithm: sha256WithRSAEncryption
72:62:b1:ac:40:2f:e4:57:bd:bf:d0:84:3f:03:3c:10:58:84:
23:ba:8d:6a:a5:52:7b:8c:c4:0c:83:05:15:d8:32:35:15:e9:
9e:3c:15:fa:90:1f:04:1d:8c:d1:0a:6e:e8:8d:c8:d5:89:f4:
74:ea:58:d3:2c:2c:dc:a9:33:07:4e:39:ad:32:67:03:f5:a5:
36:13:da:24:b1:46:0b:05:05:84:42:34:fe:1e:1d:e0:ee:1e:
2d:5f:3d:62:1b:46:88:fe:1a:8d:ab:06:19:1c:2f:9d:fc:93:
00:75:d6:94:71:6b:d8:47:d1:9e:f0:ce:3c:11:7f:db:f0:18:
0d:25:5f:2c:09:b9:a8:46:c3:44:ce:c7:c5:75:06:fd:fb:c8:
ee:dc:13:36:58:6f:f7:e4:65:4a:e1:78:2e:d8:98:04:bb:0e:
b2:b0:f2:ac:f5:d4:aa:e0:a8:28:18:5e:ef:ab:06:ba:ad:c8:
68:69:a6:9a:02:63:4c:1f:5a:ae:c5:8c:ee:12:66:9c:b6:da:
21:01:f2:90:e7:a6:d5:f8:fc:7a:f0:e6:a7:81:60:4a:3e:58:
74:e1:0c:39:48:6d:ab:26:16:91:a4:7b:1f:56:20:68:3d:83:
80:4c:9e:ac:2e:6b:1b:94:34:c1:63:ee:54:9c:ef:7f:89:64:
b5:2b:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:13 2025 by rpki-client