Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37365DF2A8BC11EF91B8F295762E951A.roa
File: 37365DF2A8BC11EF91B8F295762E951A.roa (raw, json)
Hash identifier: tnbabLn59A8NKjS0lGCfwD7tKPuyrBUFjCy75UO/ie4=
Subject key identifier: 5D:B2:C6:FD:9E:09:9E:0F:F3:88:32:42:FB:92:87:37:AF:E2:FC:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D7AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37365DF2A8BC11EF91B8F295762E951A.roa
Signing time: Fri 22 Nov 2024 10:26:20 +0000
ROA not before: Fri 22 Nov 2024 10:26:17 +0000
ROA not after: Sat 08 Nov 2025 10:26:17 +0000
asID: 43350
IP address blocks: 45.200.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55215 (0xd7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 22 10:26:17 2024 GMT
Not After : Nov 8 10:26:17 2025 GMT
Subject: CN=67405c4c-491f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:81:9e:64:68:be:66:52:3f:d8:70:54:19:
fb:4d:6a:de:22:38:4d:67:7b:96:f3:eb:02:d9:8c:
84:7e:c7:09:e6:e3:99:bc:38:52:c5:ba:14:e4:a6:
4e:b6:25:11:0e:c1:56:62:ee:6d:25:3e:ba:73:0e:
00:c3:0f:83:88:80:2d:ac:26:0a:d7:3a:b3:bc:57:
bc:c8:f8:12:2d:5a:9e:ea:79:af:03:d3:90:16:b7:
a5:53:80:bf:70:c9:c1:01:14:ed:ee:d4:a4:c0:c1:
e0:d9:3f:a0:fe:40:57:a4:b4:1a:65:0a:0f:e7:50:
26:0d:a4:bb:b8:f5:ef:b3:57:67:0e:e8:82:16:a5:
25:4d:bb:a3:f4:7e:7d:96:16:76:e7:02:46:d5:55:
19:bf:ac:71:1b:5a:4d:81:c2:b2:69:e4:f6:61:c5:
dc:d5:5a:cc:f8:a7:3e:30:d4:51:d6:18:04:21:6d:
9a:b0:46:a8:5f:0b:89:76:b3:c1:fa:f9:f1:15:fe:
2b:0d:bc:f7:e4:e5:03:09:e8:53:b3:64:15:c5:58:
bd:78:51:57:5a:d9:ac:6a:72:10:38:fd:11:1b:f2:
1c:1b:e2:7a:82:67:9c:8d:21:59:5d:ca:ca:0c:2e:
d7:75:6f:1a:7f:08:a8:e7:ed:bc:23:bf:34:4f:70:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B2:C6:FD:9E:09:9E:0F:F3:88:32:42:FB:92:87:37:AF:E2:FC:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37365DF2A8BC11EF91B8F295762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.88.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ce:1a:bf:3a:2d:96:3f:54:e8:0a:c2:38:bd:fd:65:75:17:
5d:fe:7f:1e:f4:ba:c8:a6:54:d1:12:df:97:8d:57:47:a6:90:
12:63:c1:51:0e:5d:9d:fc:7f:e3:e4:57:06:e6:c8:47:df:38:
d1:0b:c0:41:ab:ac:d5:69:49:d5:43:9f:32:56:a2:dc:d5:fd:
fa:21:b0:40:61:3f:ec:a0:01:69:26:2c:51:80:0f:24:22:2e:
59:c8:c0:9e:84:cc:ec:5b:a7:5c:9a:df:4b:f9:e3:1e:d1:da:
5d:2a:c6:61:1c:55:8f:fc:f7:a9:b7:d7:87:0f:5b:1e:4a:80:
19:3e:cf:e0:06:3d:a5:47:23:eb:59:aa:d7:7b:b3:fe:13:8b:
1c:bd:5a:e7:68:24:a8:9b:ce:b3:19:3e:f3:63:e5:58:3f:14:
6d:e5:83:1d:d5:7a:7e:35:4a:6d:7f:b6:5a:19:8e:13:ce:3d:
4f:8b:28:31:1d:f0:a2:c0:b3:51:55:a2:6d:43:bc:6f:20:47:
32:ea:f9:b4:e9:6c:9f:79:22:28:b6:0c:4f:d1:6d:96:a8:c1:
9f:c2:da:a9:4f:80:d6:c7:51:03:24:ff:af:85:b4:40:f2:10:
70:10:8d:7d:27:de:35:be:22:4b:b3:df:8a:47:b7:4e:96:52:
5f:37:f9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:29 2025 by rpki-client