Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43FA2B48C3BC11EFA1308542762E951A.roa
File: 43FA2B48C3BC11EFA1308542762E951A.roa (raw, json)
Hash identifier: Ei4JvkCtU8El2g//WaJe+Q2RpHmL11dCL6CKdOL05Qg=
Subject key identifier: E0:B4:5D:10:57:AA:7F:15:78:4D:A3:12:8C:24:0D:20:3D:B8:5C:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43FA2B48C3BC11EFA1308542762E951A.roa
Signing time: Thu 26 Dec 2024 19:04:43 +0000
ROA not before: Thu 26 Dec 2024 19:04:40 +0000
ROA not after: Sun 12 Dec 2027 19:04:40 +0000
asID: 17561
IP address blocks: 45.207.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61109 (0xeeb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 19:04:40 2024 GMT
Not After : Dec 12 19:04:40 2027 GMT
Subject: CN=676da8cb-c2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:67:5b:45:cc:8c:ef:ad:22:f1:40:0f:fd:
c0:41:42:0c:7e:d0:ed:85:7c:b2:14:6e:84:22:38:
14:06:1d:1e:82:74:9e:48:30:bb:1f:08:07:5e:ee:
85:de:12:ee:c3:f3:00:5b:ae:56:62:36:59:52:fb:
68:f2:ef:b7:2e:3d:23:97:62:8e:64:6d:5d:aa:2d:
33:06:6b:62:c3:ae:e3:96:66:8d:be:b2:27:c9:ed:
3c:ca:b7:ae:a4:1d:62:e3:30:28:27:42:20:f6:c5:
53:68:f1:f3:91:8f:a2:e1:61:04:8e:b3:67:f9:38:
a5:10:13:4a:90:ae:5b:f9:1d:90:a9:34:d5:df:76:
eb:c8:3d:b7:db:9e:86:82:31:6a:4b:68:92:b2:4c:
16:26:b7:23:52:39:fc:74:1c:8e:0f:b1:71:0e:66:
06:e0:1e:06:68:00:df:ae:b1:ca:c4:fd:a8:05:72:
e0:cf:6d:33:e7:04:7d:0c:e6:ef:4c:1d:8a:45:05:
62:a6:08:95:b5:00:fa:3d:77:06:89:f2:4a:e1:1d:
03:8c:2a:e8:aa:d0:c4:cf:12:2d:11:6c:b2:3a:46:
3a:d3:f3:4a:4a:41:18:74:51:08:bc:35:bc:18:5b:
4f:f7:b0:6d:26:a4:98:ee:f5:64:9b:c5:6d:3c:6b:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:5D:10:57:AA:7F:15:78:4D:A3:12:8C:24:0D:20:3D:B8:5C:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43FA2B48C3BC11EFA1308542762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.155.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:50:3f:a8:e4:a3:95:c4:62:76:e3:52:2c:97:36:58:fd:ec:
a6:d2:26:83:d9:25:4a:9d:82:42:f1:f3:9b:c1:b7:eb:0e:87:
6f:18:37:b5:96:35:7d:db:0a:46:a5:97:5a:78:42:76:87:65:
f3:e6:41:98:aa:fc:a4:1e:ac:e1:97:ef:08:d5:bf:44:41:20:
e6:81:51:52:f6:7b:b2:78:cf:af:1e:3c:64:16:a7:d8:13:f1:
3f:94:f9:7f:fc:db:5b:1e:39:b2:c2:6f:81:5e:da:e5:5f:94:
38:76:ea:22:03:7d:ab:25:60:55:b1:0b:8c:42:0d:81:29:72:
26:54:a8:34:7a:28:9a:77:0b:d9:ba:e7:1f:da:d5:93:90:72:
ea:57:90:6c:07:95:b3:2e:b7:a5:92:ac:52:b1:05:c6:40:6a:
98:7f:35:b6:e6:83:27:9a:9a:e7:17:b9:a4:0a:28:29:1c:0d:
84:b7:f1:7f:45:f4:47:ea:c4:9e:9d:8c:1e:dd:1f:a3:e0:5a:
da:ce:0a:cf:ae:82:e1:a7:20:d6:23:bc:7a:a9:c6:83:5a:0f:
fc:5f:d6:f0:bf:54:59:77:b8:9f:9a:f7:7d:66:f8:ec:41:8b:
7c:e0:5c:5a:7a:ba:74:fc:76:c5:7f:5e:13:59:03:9c:b1:ce:
75:1d:db:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:37 2025 by rpki-client