Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E293DE6C3A611EFA5AD4DB7762E951A.roa
File: 3E293DE6C3A611EFA5AD4DB7762E951A.roa (raw, json)
Hash identifier: Qh2UYeTA6xQqIIrdJXbwydBNPI/hnIkDVTHNGDR0VCA=
Subject key identifier: 0F:7C:85:AF:24:6F:C8:EE:92:80:FF:36:D5:48:B8:97:67:9E:C4:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E293DE6C3A611EFA5AD4DB7762E951A.roa
Signing time: Thu 26 Dec 2024 16:27:05 +0000
ROA not before: Thu 26 Dec 2024 16:27:01 +0000
ROA not after: Sun 12 Dec 2027 16:27:01 +0000
asID: 17561
IP address blocks: 45.200.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60879 (0xedcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 16:27:01 2024 GMT
Not After : Dec 12 16:27:01 2027 GMT
Subject: CN=676d83d9-fa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:52:9a:d3:13:f8:c6:bb:fd:4a:82:54:9e:
1c:58:fa:cd:2c:e3:a7:d4:33:a7:ca:15:75:08:b8:
e2:45:ea:57:4c:3e:ac:48:0c:fa:64:4d:2e:c4:09:
f0:09:dc:26:92:60:f8:77:4b:41:ba:ea:7d:3a:2c:
f7:fd:e1:61:1e:5d:44:34:07:cf:3e:ae:1d:32:0e:
69:00:5e:af:a0:61:28:c4:5b:6a:7e:41:40:0f:86:
eb:fb:e4:96:2d:4f:62:9d:8a:de:df:68:41:c4:4e:
80:ac:3a:24:06:ba:69:3a:eb:9c:a2:07:b0:bb:83:
1e:fd:50:40:0a:3d:c2:2f:e8:b1:60:10:ba:b3:42:
70:ce:6e:fe:ed:c1:48:fa:50:0b:14:b2:3f:ea:18:
8c:0f:eb:04:d5:04:e7:07:11:33:d3:29:dd:77:1c:
fb:49:90:8c:67:1a:d9:cf:a4:e1:09:e4:ae:12:e6:
b3:dd:a9:f3:cc:9f:e9:03:15:6b:fe:f8:a2:ac:37:
9d:1a:af:b2:1e:51:3c:61:3e:6a:14:6c:c2:10:1a:
a5:87:0b:27:63:d6:be:a0:1c:a6:6a:37:3b:72:57:
4e:2f:e6:e2:b7:ff:3d:fd:f6:5a:24:1e:52:5a:36:
5e:5d:7a:5c:65:00:b1:35:ce:78:4c:a5:59:a2:ef:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7C:85:AF:24:6F:C8:EE:92:80:FF:36:D5:48:B8:97:67:9E:C4:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E293DE6C3A611EFA5AD4DB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:25:60:7e:41:14:10:b4:52:1f:36:02:07:a0:81:b3:63:dd:
25:d8:8a:52:eb:8e:56:17:d6:c2:5a:78:34:da:35:54:bc:66:
58:6a:62:fa:c2:cb:cc:b0:30:76:3a:7e:a0:36:e6:31:08:1b:
90:09:6e:9c:04:71:76:24:e1:05:74:5f:c4:6b:7e:c8:e2:bb:
5a:d8:23:84:03:0a:e8:19:f1:53:b3:44:a0:f8:8e:d4:bf:3a:
f5:6a:3b:82:8d:ea:d3:fc:b9:6a:1b:36:b7:19:dd:33:79:f9:
c9:c0:68:f4:f1:40:2e:e5:83:0c:a6:d9:52:33:86:a5:f6:22:
70:29:1a:19:2b:1a:88:85:9d:8e:fd:c3:e1:27:4d:c8:52:aa:
a6:e1:9a:86:49:d2:da:bb:0c:36:9e:80:c3:55:63:6c:78:01:
7c:4e:0f:bf:e8:6d:00:1d:f8:3b:89:4e:85:f1:69:00:42:34:
95:a0:1c:ce:90:b9:28:54:c7:7e:d0:4d:23:ca:83:90:f3:5e:
7f:f2:8f:6e:1c:0f:e8:1e:04:92:71:3a:87:bd:6d:f7:c7:f1:
ff:ec:cb:ef:6f:c6:c5:92:29:b1:04:46:14:de:66:31:43:ef:
2e:43:79:01:38:0b:76:54:07:b3:b2:4f:25:07:1a:0b:a1:cd:
7a:51:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:59 2025 by rpki-client