Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26B76F8EC3BA11EFA6471BB4762E951A.roa
File: 26B76F8EC3BA11EFA6471BB4762E951A.roa (raw, json)
Hash identifier: zcdKqJ7eDAy2S5IRGEqUqydvdClu3RulNWKLFAuIFPQ=
Subject key identifier: CD:BF:53:9E:77:85:D0:3D:45:BF:91:03:55:5E:A1:5B:71:CB:F9:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26B76F8EC3BA11EFA6471BB4762E951A.roa
Signing time: Thu 26 Dec 2024 18:49:35 +0000
ROA not before: Thu 26 Dec 2024 18:49:32 +0000
ROA not after: Sun 12 Dec 2027 18:49:32 +0000
asID: 17561
IP address blocks: 45.207.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61087 (0xee9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:49:32 2024 GMT
Not After : Dec 12 18:49:32 2027 GMT
Subject: CN=676da53f-2fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:86:9a:d0:ae:ea:79:96:60:b0:c3:b4:a7:
58:57:dd:f1:cd:84:09:a7:9e:49:bf:e1:a5:5e:c9:
5d:bd:6a:93:f1:65:d3:9e:db:7e:3e:e9:23:da:ac:
48:cf:01:98:ec:d1:41:41:fd:38:d8:97:e9:7f:b3:
54:9f:ab:2b:10:d7:75:a5:33:3e:ac:0b:bc:86:8d:
ec:d5:a2:2a:1c:45:1a:e5:62:df:1a:98:4f:b9:ee:
f1:ee:a7:47:8b:29:60:39:5d:bf:cf:39:a1:78:22:
35:46:a9:f0:ce:2e:84:c5:2b:e8:f9:f4:66:38:b6:
35:8d:53:11:70:05:db:43:75:e2:70:ec:20:d2:1e:
f7:a9:5f:32:48:86:c9:3f:8f:70:d0:5d:c9:f2:88:
a5:38:21:23:7c:f4:61:c2:14:40:59:9e:99:08:07:
e8:88:e5:89:27:88:c3:51:1c:f8:ac:ea:d6:3d:2d:
4e:aa:6f:f2:c3:cc:ee:1b:7a:3b:91:df:3d:1d:c6:
7e:f8:02:ce:49:40:9a:68:dc:c4:a3:8f:52:24:d7:
bb:43:fb:bd:b5:a1:9d:4a:14:18:18:66:45:0d:27:
5d:69:25:e8:05:a4:c4:e8:a7:08:74:62:fd:94:e9:
e9:3c:39:74:d9:b5:ec:a2:25:de:72:e2:6e:82:55:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:53:9E:77:85:D0:3D:45:BF:91:03:55:5E:A1:5B:71:CB:F9:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26B76F8EC3BA11EFA6471BB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:50:9c:84:3b:80:92:f5:6e:53:39:6e:24:31:3e:9b:9c:ca:
cc:b7:44:cd:ab:cc:d8:97:cb:77:cc:71:36:38:4e:ca:cd:c7:
7a:fb:5b:35:c5:85:0e:ce:9a:2e:62:f6:6f:62:84:a9:72:9b:
a7:7b:ba:c4:4f:94:36:4e:5d:24:48:2f:f0:2f:45:c7:94:f9:
f6:c3:a1:0f:d8:a7:11:22:30:09:76:c7:b3:e6:3e:01:7a:f7:
46:73:4e:ed:35:bf:35:59:d3:55:54:18:e0:c7:40:4f:3e:a9:
de:7c:b4:ed:2e:ff:d4:61:a2:48:43:79:3b:f1:ee:26:e4:53:
d1:8b:ac:b9:22:a7:5d:72:c8:69:da:91:3f:b7:83:e3:e2:3e:
d3:f5:5b:f5:00:7c:94:f2:35:44:7f:cc:bd:46:9c:cc:e8:4d:
a5:54:38:14:a8:f4:eb:2c:58:78:5d:36:ae:d6:12:39:68:a5:
e0:41:79:72:54:63:36:c0:8c:21:73:49:da:67:da:e4:66:2f:
3d:27:39:58:fe:bc:ff:3d:1e:87:bb:4a:76:e9:d7:21:ec:ec:
19:b5:b0:4c:3b:b8:0f:8f:34:ae:c5:41:40:d1:7b:e5:28:24:
f3:b2:c6:16:b2:93:f8:48:f5:da:1e:4f:2e:29:72:d0:9c:f7:
b1:f1:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:07 2025 by rpki-client