Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C27D7EBE8811EFBAAFC959762E951A.roa
File: 36C27D7EBE8811EFBAAFC959762E951A.roa (raw, json)
Hash identifier: tRbcr85E5ly9j6oRnbKkC/u78qzdG/fhfEmaD9lSqGA=
Subject key identifier: 2C:72:F0:09:B9:BE:A1:E4:02:41:D2:F8:BF:B3:10:10:85:00:75:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E6A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C27D7EBE8811EFBAAFC959762E951A.roa
Signing time: Fri 20 Dec 2024 04:09:32 +0000
ROA not before: Fri 20 Dec 2024 04:09:28 +0000
ROA not after: Wed 10 Dec 2025 04:09:28 +0000
asID: 984
IP address blocks: 45.206.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59042 (0xe6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 04:09:28 2024 GMT
Not After : Dec 10 04:09:28 2025 GMT
Subject: CN=6764edfb-04bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:b1:d7:83:07:9b:19:8a:7b:04:6c:9d:79:
fd:e4:24:93:d0:b1:6b:08:43:46:8a:77:c1:71:0f:
6e:52:22:33:15:44:6d:39:40:ea:16:4a:5b:5f:08:
e2:f2:c1:c7:3f:3a:b5:36:a4:a5:7c:f1:48:31:b6:
41:d3:b4:04:1f:c5:2a:eb:5d:30:07:ae:48:81:d2:
d5:59:c8:70:c6:3b:c2:0f:98:90:83:cf:8c:b5:cf:
5d:53:17:39:37:89:84:ed:ec:65:c9:fb:f1:15:aa:
b8:22:60:78:d5:84:65:25:96:32:03:2e:cf:9f:cf:
2f:a0:ef:6e:59:5b:ae:1e:e1:ed:29:62:6d:54:9b:
4d:6a:64:a9:73:d5:33:df:df:5f:a2:18:59:6e:e3:
8a:8b:53:22:2d:21:9b:04:61:70:e6:af:7b:ce:56:
82:00:d7:02:c3:bf:90:01:7a:d3:4a:f5:5a:64:3f:
0a:36:f8:16:e9:4b:db:1a:3d:25:82:b4:ee:20:c4:
dd:bf:ad:8c:b7:b4:c4:71:ef:c1:84:62:fc:c1:c9:
8e:72:0e:27:1a:47:42:b4:4c:ea:d8:6b:8a:fb:3e:
d2:14:e8:16:40:ca:77:cf:4f:f7:a1:e8:be:d0:65:
01:0b:a3:49:d4:e2:25:7f:19:55:78:38:2f:ca:6a:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:72:F0:09:B9:BE:A1:E4:02:41:D2:F8:BF:B3:10:10:85:00:75:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C27D7EBE8811EFBAAFC959762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.212.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3d:e0:0e:d9:5f:df:8e:35:38:ca:ec:9d:01:85:32:e0:09:
10:12:27:44:76:2b:b6:20:bb:04:a0:13:57:ba:84:33:b1:80:
4b:ff:49:c4:56:88:0f:5a:81:26:d2:cf:3d:23:56:85:5d:c8:
5b:e2:d4:44:2b:9a:e2:d7:d9:e1:a2:7e:40:4d:9a:98:0f:be:
34:4d:0c:e5:85:54:d2:41:5a:a4:e5:1e:7e:e4:1c:a2:af:5d:
7e:34:c8:94:8a:28:ef:04:18:82:0c:e8:32:48:1e:94:3f:62:
e1:b5:a0:9a:cf:87:3d:8a:b9:7e:2a:91:b5:f2:3d:30:b4:93:
de:04:8d:22:4b:99:5e:59:84:38:01:6a:df:80:93:e5:a9:79:
2e:de:a3:13:d6:e7:80:f1:17:91:de:7f:99:98:0b:4f:28:d5:
ed:3b:d9:0c:75:99:52:d6:22:a6:d1:6f:97:2f:46:b1:40:e1:
70:ca:59:a8:4b:b7:16:18:7a:29:fe:72:12:2b:19:43:39:ca:
f7:83:32:ce:3e:f5:36:cc:a0:70:06:86:28:ae:39:5b:6d:0a:
24:49:27:6a:4c:f5:56:98:b4:c2:53:37:f4:a8:e6:df:c0:db:
ac:c5:0b:19:07:89:0d:2a:ec:76:10:f1:52:6f:64:40:86:55:
11:48:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:01 2025 by rpki-client