Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AEE5686BE8611EFA30DDD4E762E951A.roa
File: 3AEE5686BE8611EFA30DDD4E762E951A.roa (raw, json)
Hash identifier: zrkUksNDeCwg8l9sesNnNd368WjhXVoMUN9ahZA9RCY=
Subject key identifier: 82:04:9E:AF:A2:2B:E5:C1:DE:85:7B:63:C3:21:98:13:EF:36:5F:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E68A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AEE5686BE8611EFA30DDD4E762E951A.roa
Signing time: Fri 20 Dec 2024 03:55:20 +0000
ROA not before: Fri 20 Dec 2024 03:55:16 +0000
ROA not after: Wed 10 Dec 2025 03:55:16 +0000
asID: 984
IP address blocks: 45.206.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59018 (0xe68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 03:55:16 2024 GMT
Not After : Dec 10 03:55:16 2025 GMT
Subject: CN=6764eaa7-41d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:db:ba:1d:a7:9f:b7:93:57:f2:34:4f:0b:
60:75:e7:e6:72:de:54:9e:c1:03:e0:14:ec:67:2d:
2e:49:85:da:a2:8b:23:88:57:ca:fa:07:a3:ef:7e:
61:48:dc:13:52:c2:2d:dc:7c:fe:63:ff:ba:42:8d:
ae:4d:ab:b5:d2:41:59:b0:a1:c3:28:a6:1a:22:6e:
97:96:0a:13:72:f7:5b:af:dc:19:ea:27:85:bf:41:
b6:66:f7:5a:e1:c6:30:16:e0:36:a1:1b:08:58:ed:
30:9d:e2:c9:0c:ac:ca:c1:6e:94:cf:05:dc:0c:b8:
08:6c:c4:1d:57:80:c6:6d:f3:e8:d6:ef:2d:6e:57:
9f:9b:8f:08:51:b4:0e:fc:3e:6b:26:b2:91:78:6f:
7f:8e:5f:9d:a6:df:6c:27:a7:1c:ad:c6:0b:77:bf:
36:cf:3e:3c:7b:44:d5:79:c5:c5:fe:15:eb:e3:07:
af:3c:9f:a1:7e:01:00:fd:53:38:e9:0e:da:db:2c:
17:c1:25:2e:6d:b9:5a:d5:55:29:2d:a2:47:ac:be:
f8:bc:a6:72:c5:ed:2d:bc:9b:3e:f8:dc:eb:7b:bf:
58:31:ba:df:64:d6:03:58:53:07:cc:c8:01:f2:9f:
82:d3:c2:71:fa:92:aa:36:bf:b1:83:e4:2f:59:2e:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:9E:AF:A2:2B:E5:C1:DE:85:7B:63:C3:21:98:13:EF:36:5F:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AEE5686BE8611EFA30DDD4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e4:db:95:1c:c0:2e:c4:06:7e:e5:7c:85:e9:e2:39:dd:3e:
df:ad:d0:be:cf:a7:e1:f5:fa:29:51:43:14:80:2e:95:59:c9:
ff:53:52:bf:89:7c:c3:27:af:57:e8:a5:94:31:53:2f:39:d0:
ca:51:de:7e:4d:6d:a0:e6:ac:09:2f:50:b0:51:c1:78:58:22:
7b:94:9e:f9:f2:e0:d4:ef:7b:81:6e:22:81:62:44:3d:40:86:
8e:1e:48:9a:67:31:39:40:4c:98:56:a9:21:5b:a3:b6:d8:c6:
fb:80:67:79:6e:f2:74:de:25:d5:3a:0a:b2:95:df:3b:a3:6b:
86:bd:2d:78:e3:0d:38:46:b4:ac:51:8c:ab:76:ce:bc:c5:f1:
b4:cd:50:e9:54:87:4b:4e:66:c7:ca:03:f6:19:a4:4f:6b:8c:
c2:96:14:0c:03:5d:c4:e9:5e:36:56:cd:47:79:be:7b:f0:d2:
46:0d:38:f1:5a:f5:47:f4:d9:b7:5d:a1:4c:72:fb:ec:f7:dd:
05:28:d0:5a:1a:1d:ef:2c:8a:9c:87:94:08:dc:0a:11:d8:a1:
a0:d4:d2:52:b2:ee:37:64:9a:65:df:2d:10:bb:55:67:4b:e4:
c0:90:c9:5a:3a:19:47:6c:7d:cd:ab:1a:03:f1:98:83:e8:70:
db:c7:a2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:06 2025 by rpki-client