Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D489FAC3FD11EF86E75D6C762E951A.roa
File: 26D489FAC3FD11EF86E75D6C762E951A.roa (raw, json)
Hash identifier: HQwvK9DDUKNaHZ5OHNFFndIEmwisjcpxUwkR6kx+p7k=
Subject key identifier: 50:F2:85:F8:0D:96:A4:26:1F:C6:8D:A5:71:3E:6A:B6:EF:FA:7C:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D489FAC3FD11EF86E75D6C762E951A.roa
Signing time: Fri 27 Dec 2024 02:49:12 +0000
ROA not before: Fri 27 Dec 2024 02:49:08 +0000
ROA not after: Sun 12 Dec 2027 02:49:08 +0000
asID: 17561
IP address blocks: 45.195.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61366 (0xefb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 02:49:08 2024 GMT
Not After : Dec 12 02:49:08 2027 GMT
Subject: CN=676e15a8-6cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:5c:d9:c2:7c:e4:80:b6:47:81:07:2f:38:
f1:ff:11:5e:23:55:18:82:4e:35:c0:65:76:63:c8:
fa:38:d2:96:ce:27:84:2a:41:fb:56:6f:b6:94:25:
db:43:d7:fa:e8:16:da:8d:02:72:78:29:5b:1d:a9:
bf:4a:e0:9b:b9:c9:73:10:d9:fc:f4:fc:e3:16:26:
84:c4:ce:30:30:35:df:41:39:2f:22:12:aa:74:21:
e3:c5:65:e7:00:bb:7b:61:2e:85:bb:d9:28:1b:06:
93:23:61:f8:65:03:7a:01:92:a2:cf:fc:3d:b7:59:
99:f8:ca:13:07:8a:c9:b5:16:20:bf:4b:b9:be:45:
68:66:9d:d5:81:dc:14:f7:ec:64:f3:00:2f:78:6e:
39:30:0d:49:2a:fb:84:de:a8:bf:7f:fa:2b:ad:1a:
34:b6:8b:c5:ec:b9:ac:5a:89:ab:bc:61:22:c8:27:
ae:78:83:75:3a:82:79:7d:26:db:98:02:c1:91:67:
7e:c9:0a:77:78:5d:2f:b8:aa:cc:d8:53:17:e7:21:
07:bf:9f:d8:c6:d1:96:9c:b6:6f:d8:03:bf:be:65:
02:23:ea:3c:a0:b3:25:66:f4:ec:48:30:94:7e:21:
34:1a:23:4d:49:52:9b:2c:52:9e:49:67:f4:0c:3d:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:85:F8:0D:96:A4:26:1F:C6:8D:A5:71:3E:6A:B6:EF:FA:7C:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D489FAC3FD11EF86E75D6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.62.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4c:34:83:28:6e:2a:8a:89:56:1c:02:bd:8d:25:60:41:74:
b5:95:b5:7e:26:9f:75:11:9a:f2:b1:8c:da:a1:3e:2c:5a:fd:
a0:ec:30:5b:6b:d4:94:b4:12:42:6d:3d:22:bc:48:af:4b:ce:
40:5b:91:2a:93:33:3d:f8:be:8a:29:b5:e0:5e:7b:55:ec:6f:
a1:a0:f2:20:e5:c3:6a:99:6a:1e:57:33:6d:11:91:da:a2:a1:
89:f8:5d:48:91:8a:f7:77:d8:2e:ca:78:38:8c:62:73:4d:ac:
27:8e:5f:f9:4f:3f:f6:0d:ff:1d:a7:c2:bb:66:81:92:1d:67:
3c:1e:5f:46:14:c3:36:41:a1:c6:69:6e:63:b6:bc:cb:00:b6:
b1:2d:bd:86:18:42:bf:5e:4c:2f:59:7e:da:24:65:35:95:99:
5d:9a:0a:c5:ab:43:05:50:ed:7d:16:7d:24:e7:e7:cc:5b:84:
01:f1:2c:0f:be:75:53:ae:c1:33:68:82:e3:79:12:29:22:d7:
c3:ed:04:cb:78:62:9b:17:4b:dc:36:e5:86:de:6b:f9:2a:ca:
fc:cd:57:13:c8:b9:44:3f:96:56:90:60:9c:54:8c:77:f9:fa:
ec:e3:c5:18:30:7d:ae:58:d2:49:b0:66:e7:2f:ea:f3:28:bc:
6c:79:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:25 2025 by rpki-client