Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BEDAE2C40311EFB6B5D895762E951A.roa
File: 25BEDAE2C40311EFB6B5D895762E951A.roa (raw, json)
Hash identifier: 9vlugk1ZLQ7Kz+NTTwNoDNNtNjiFDXB671g/u6qMAQU=
Subject key identifier: BD:5B:B4:63:49:90:F6:BA:13:EB:CE:E1:D4:45:D5:0A:0E:89:81:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BEDAE2C40311EFB6B5D895762E951A.roa
Signing time: Fri 27 Dec 2024 03:32:07 +0000
ROA not before: Fri 27 Dec 2024 03:32:03 +0000
ROA not after: Sun 12 Dec 2027 03:32:03 +0000
asID: 17561
IP address blocks: 45.195.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61420 (0xefec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:32:03 2024 GMT
Not After : Dec 12 03:32:03 2027 GMT
Subject: CN=676e1fb7-c49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:a2:16:26:f7:db:81:86:f2:ea:d4:78:0b:
05:2f:69:e8:6c:a1:5f:59:90:ef:95:6a:54:ab:87:
6f:4d:c6:06:80:23:66:9c:bb:1f:e1:91:cf:0f:f0:
2f:37:ca:90:e6:b8:83:0f:78:06:d0:19:a2:c2:04:
3c:18:0e:95:1e:d8:69:68:07:1a:8d:39:6b:2c:9b:
75:b3:35:f2:e6:06:76:90:e3:9b:5a:09:2d:cc:30:
5a:e0:f2:b9:fc:02:3d:02:13:33:48:43:00:a2:93:
c2:5d:40:1d:fd:fc:ea:2d:59:48:f2:d7:0e:43:64:
fa:87:96:cf:bc:8a:7b:06:88:48:a2:02:10:c8:f2:
23:f9:d7:ea:1e:02:7e:46:17:1b:4d:b9:12:6f:52:
93:5b:66:23:24:59:bd:77:6e:af:bf:bc:c9:23:e6:
24:a3:aa:23:d8:e8:65:d0:db:8b:3c:a9:f0:ff:8d:
35:1d:e2:47:90:0b:3e:37:fa:12:90:33:17:17:68:
49:d2:61:c6:06:85:09:5c:5b:5b:65:46:66:22:76:
f7:3e:a9:fa:ff:e2:53:8f:ea:c0:84:2e:a7:86:9a:
32:c4:df:d1:3b:8b:9f:7f:86:0b:59:f6:df:5c:3e:
95:ff:fe:21:50:31:d3:42:c7:b3:52:fe:31:fb:83:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:B4:63:49:90:F6:BA:13:EB:CE:E1:D4:45:D5:0A:0E:89:81:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BEDAE2C40311EFB6B5D895762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.199.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:72:5a:bc:b7:e7:74:bd:00:f0:5c:2c:c5:cf:1e:2c:99:68:
86:d6:0b:dd:71:7d:2a:70:b1:84:f1:ea:52:9b:79:ce:47:3d:
10:6e:5c:bc:73:ba:2d:bf:8e:bb:89:fd:58:bf:25:13:a3:51:
e0:46:22:27:18:d6:4f:a6:00:f1:99:41:dd:dd:db:3c:a1:f4:
8b:fd:1d:04:9e:cf:70:45:1d:79:d8:95:af:80:1d:66:d3:d7:
3c:33:af:cc:2f:af:ea:ba:d3:20:ce:de:7d:15:70:5d:0d:26:
3b:9e:23:b4:23:a9:d0:96:11:73:69:b6:34:cc:4a:b8:17:1f:
17:22:b9:20:98:67:b0:0a:91:42:18:f2:88:5c:e9:e5:13:8d:
85:39:9c:44:f5:df:37:37:e3:91:63:a2:ba:37:24:9a:21:6e:
72:07:92:5d:b8:a5:b5:37:d2:2e:ea:d5:16:4b:b9:7a:a9:ad:
bc:e5:30:6e:7b:58:e5:9d:a6:1f:4c:42:b9:0d:61:db:9c:4d:
f8:5e:92:58:9d:6f:47:e1:20:0b:da:b5:40:e7:3f:8d:89:fd:
10:9a:ce:85:8b:ab:7c:05:68:f3:40:7a:70:79:12:82:6f:15:
03:e3:a9:c4:51:9f:aa:c4:83:67:b1:1c:4e:66:ab:cc:1b:71:
42:a7:2b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:52 2025 by rpki-client