Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E278640C3A711EFA8EB69BD762E951A.roa
File: 2E278640C3A711EFA8EB69BD762E951A.roa (raw, json)
Hash identifier: YjkUT4p/bRpJhu93EBCotpv3O+cpS4KJtZ5TwbncEtA=
Subject key identifier: 60:7B:D9:B3:84:79:93:7C:85:B3:7B:1C:44:F4:5F:D4:27:AF:58:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E278640C3A711EFA8EB69BD762E951A.roa
Signing time: Thu 26 Dec 2024 16:33:47 +0000
ROA not before: Thu 26 Dec 2024 16:33:44 +0000
ROA not after: Fri 12 Dec 2025 16:33:44 +0000
asID: 984
IP address blocks: 45.200.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60889 (0xedd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 16:33:44 2024 GMT
Not After : Dec 12 16:33:44 2025 GMT
Subject: CN=676d856b-809b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:dc:89:23:45:0d:13:ed:4c:dd:28:03:fe:
70:9c:10:58:ed:fb:8f:54:99:e3:c6:56:d7:8c:6e:
68:d9:16:e5:6a:43:53:9b:82:82:27:f3:e2:57:d3:
8d:ff:45:b9:cb:2e:bb:15:2f:3d:ef:ae:30:51:75:
a6:9e:80:6e:b1:44:9b:74:9b:a4:be:79:12:cb:dd:
91:02:43:d1:f9:4f:c9:63:f8:b3:9c:1d:d2:36:be:
c1:7c:74:7d:a9:8c:b2:fa:8d:5e:5d:be:11:b4:8e:
56:a2:75:b8:52:80:fd:7e:d8:5b:a0:c5:06:2b:9a:
74:8b:66:26:bd:b9:bd:89:46:34:1f:2a:9d:a7:62:
9a:fc:1d:cf:ff:cc:28:e6:c9:a7:1e:a7:cc:f7:94:
89:ec:08:5c:ef:8d:62:40:16:71:0c:ce:e9:eb:77:
dc:4f:33:81:22:25:73:22:43:d1:68:53:8c:7e:94:
10:e0:ef:d5:26:f4:b3:4b:3d:08:f7:87:bb:49:40:
b7:27:83:83:c6:59:07:93:43:bd:28:cc:0d:f9:e8:
40:f5:8d:cd:45:4e:de:25:40:99:33:bb:6a:6b:e2:
6e:ff:1e:48:9d:7d:3e:a0:b6:11:e5:59:be:30:dc:
7f:52:30:2c:03:21:e2:2f:75:13:ed:5c:bd:07:21:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:D9:B3:84:79:93:7C:85:B3:7B:1C:44:F4:5F:D4:27:AF:58:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E278640C3A711EFA8EB69BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.215.0/24
Signature Algorithm: sha256WithRSAEncryption
20:24:b8:b2:f7:dc:c9:5d:16:8b:46:9f:ec:15:fa:bd:23:46:
32:6d:66:0a:82:31:1a:41:64:52:87:48:d9:26:44:a5:82:c5:
1e:d9:18:2f:94:4e:3d:8f:b3:85:08:1d:fa:75:8e:3f:08:a9:
a0:55:af:53:9a:2e:04:dc:37:b1:b0:ec:28:c8:28:87:83:a8:
9b:d6:d8:ab:7f:16:10:1e:8c:f8:c1:75:6c:23:68:98:d0:78:
b1:79:f3:0b:32:17:cd:39:33:e3:ac:8b:dc:a6:17:78:58:d9:
e5:87:cb:e0:e3:f0:13:dc:a7:34:da:bb:8d:bd:68:79:a2:8c:
7e:3a:be:6c:61:11:5c:0a:3e:5e:05:12:9f:b1:51:66:f2:9d:
42:bc:76:8b:c9:5e:b2:cf:5a:9d:09:e1:16:5b:26:b4:8a:68:
ea:5d:8c:2e:72:05:60:ff:9e:93:46:47:0b:41:97:41:6b:25:
a4:75:0a:db:cc:ef:a6:2e:1e:1c:92:60:ce:c6:3b:6d:5b:62:
2c:54:4b:98:3e:d2:6e:38:09:79:ad:fd:1d:0e:f5:87:b0:c0:
f9:36:07:8c:25:45:d0:84:65:5e:06:f7:7c:52:9b:09:2f:1d:
4b:7c:ed:10:01:d3:d0:d1:99:ce:cc:3e:47:e3:62:2d:38:a4:
bb:eb:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:54 2025 by rpki-client