Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3313ABD4C3B611EFBD17999B762E951A.roa
File: 3313ABD4C3B611EFBD17999B762E951A.roa (raw, json)
Hash identifier: ZZ1fcPjuxMdeXDHUYd5quk9tAq5wjJH9xdQxGDaud1M=
Subject key identifier: 92:23:73:22:30:A9:56:45:7E:6A:61:9F:DA:B3:12:57:4E:58:BF:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3313ABD4C3B611EFBD17999B762E951A.roa
Signing time: Thu 26 Dec 2024 18:21:18 +0000
ROA not before: Thu 26 Dec 2024 18:21:14 +0000
ROA not after: Sun 12 Dec 2027 18:21:14 +0000
asID: 17561
IP address blocks: 45.207.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61047 (0xee77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:21:14 2024 GMT
Not After : Dec 12 18:21:14 2027 GMT
Subject: CN=676d9e9e-6f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:fb:cd:a9:ad:57:08:93:f4:7e:a8:01:a1:
82:f1:b5:7c:1a:a2:ec:8c:dc:50:b3:fa:56:ad:8c:
78:c6:5f:f5:ef:f0:18:06:16:53:8a:96:54:58:f8:
3a:64:09:60:f8:49:d1:d0:69:7f:97:f4:cb:6b:a6:
34:af:2b:d3:1b:21:e1:c0:cc:e9:d9:d2:19:16:9e:
90:fe:00:5a:42:94:0c:e0:7b:83:dd:06:16:e8:f9:
14:03:15:06:2e:98:4e:5e:38:87:05:99:2d:7b:ee:
83:59:56:fe:6f:33:24:c6:01:46:75:aa:18:d2:2c:
66:52:56:62:8f:78:2a:7f:f9:ed:8d:67:27:bb:65:
8f:bd:62:0b:fa:09:1e:1a:24:ef:23:56:8e:62:75:
e0:0e:2d:d9:8d:de:fa:1a:44:f1:c5:10:cc:f9:52:
25:38:ca:62:d6:40:3a:04:7e:5e:48:08:01:22:8b:
4f:f0:cd:09:2a:77:f4:88:ac:d3:48:bb:25:41:f6:
49:b1:8d:8b:15:4e:c9:79:8b:95:ff:00:45:c5:92:
dd:a8:d2:3f:08:4c:03:e3:57:cf:94:53:b7:7a:0c:
31:86:16:25:3f:51:1b:ba:d7:3b:2e:6a:8a:31:eb:
ea:7a:14:87:1f:3f:c2:06:7c:fa:73:e2:b1:2c:91:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:73:22:30:A9:56:45:7E:6A:61:9F:DA:B3:12:57:4E:58:BF:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3313ABD4C3B611EFBD17999B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:cf:a7:63:4a:bb:05:d3:4c:ed:c5:10:e0:b6:9f:02:b8:84:
79:11:b3:0d:ed:31:cc:d3:cd:a7:ea:81:0f:c8:79:47:99:40:
1f:82:56:e0:2f:c4:19:12:44:19:ab:70:38:bf:d9:c2:cf:f5:
60:bd:65:23:2c:92:9d:10:97:5c:79:5f:48:4c:f9:37:d4:3a:
f8:3f:91:87:ba:a5:cd:42:3f:92:3e:4a:81:5b:07:4a:8e:9b:
66:d7:e1:f3:9b:07:82:d6:a1:bb:4a:81:b6:78:bd:35:fb:18:
60:57:b2:49:8a:f6:77:25:e2:b1:1e:16:b3:97:78:b9:41:46:
81:14:48:c9:7a:68:a3:c8:6d:a2:4a:cc:5e:07:2d:be:a1:32:
b4:b5:7d:91:8c:79:e9:16:80:c9:c0:9e:b9:db:d2:8d:f4:c4:
90:6c:af:fe:3d:6e:e4:14:a1:c8:f3:54:cc:72:d5:eb:37:ae:
9f:c5:36:d4:c2:7e:30:3c:f6:63:94:86:49:54:87:f3:49:c5:
56:5e:2f:e5:45:a5:a0:88:4e:bb:13:6d:37:0f:29:83:1f:60:
85:ac:38:d8:3b:f1:42:2a:ef:44:c8:7f:38:e8:17:e1:5f:b5:
d2:6d:cc:0f:d2:5f:28:41:96:6f:a9:3b:e8:27:36:49:76:b5:
cc:f6:46:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:04 2025 by rpki-client