Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/489D2C4AC3C111EFAADED162762E951A.roa
File: 489D2C4AC3C111EFAADED162762E951A.roa (raw, json)
Hash identifier: jkfB9WP8f45sl3f9IXfuX1eFeJS+Sr0xzT6yj8JGNwc=
Subject key identifier: 83:D6:CC:C4:36:D3:63:56:0F:BC:E2:7A:9C:D9:7B:76:66:3D:1A:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/489D2C4AC3C111EFAADED162762E951A.roa
Signing time: Thu 26 Dec 2024 19:40:39 +0000
ROA not before: Thu 26 Dec 2024 19:40:35 +0000
ROA not after: Sun 12 Dec 2027 19:40:35 +0000
asID: 17561
IP address blocks: 45.207.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61161 (0xeee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 19:40:35 2024 GMT
Not After : Dec 12 19:40:35 2027 GMT
Subject: CN=676db136-b8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:ac:12:3a:0e:e1:aa:67:a6:16:64:ff:02:
8d:9d:9f:18:c0:47:f3:c8:4f:b2:e2:67:bb:77:a7:
b2:5c:75:be:40:f6:db:18:52:38:0b:49:c5:7c:cc:
31:23:76:2c:a6:02:9a:04:82:fe:29:87:b6:36:a7:
2f:be:00:25:a5:f8:27:be:00:67:ff:25:cf:42:3c:
90:fd:ec:b8:58:9a:dc:01:c6:1a:de:cf:e3:8c:e6:
54:46:94:6d:5f:88:be:b9:98:03:98:29:1c:97:eb:
cc:19:d9:6e:46:d2:41:65:7a:1b:57:02:9c:5f:9e:
8b:c2:3d:55:17:6c:b0:f3:d0:55:60:90:0b:2b:41:
32:c8:86:06:f1:82:09:55:b8:5b:43:f6:0f:c4:99:
a1:0e:36:e6:1e:75:70:64:61:89:6f:60:07:bc:d7:
47:57:b7:b5:9f:72:84:58:f0:6c:d8:d5:bf:9c:bd:
bd:c6:8b:1f:73:d2:27:81:55:ed:6c:e5:3f:f7:c9:
c5:7e:b3:6e:a3:01:b1:37:28:74:a1:a0:18:52:f9:
a7:3d:cd:ab:9b:ac:e7:e0:5b:24:c7:89:5b:36:6e:
43:42:ee:91:2d:1f:33:90:76:1f:01:81:dd:8f:4e:
da:e8:25:84:dd:7b:7e:b1:15:20:ac:26:cb:67:06:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D6:CC:C4:36:D3:63:56:0F:BC:E2:7A:9C:D9:7B:76:66:3D:1A:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/489D2C4AC3C111EFAADED162762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.188.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e7:0a:81:de:00:f4:ec:7a:47:eb:6d:28:5a:a0:8a:23:58:
23:04:41:06:cf:14:4a:c5:27:96:0a:27:af:f1:42:2a:83:3a:
9a:81:f8:86:53:f4:b4:19:73:f7:6a:d2:ec:d4:59:5d:6d:60:
62:13:8f:47:a5:5f:d6:b0:90:3f:3b:06:dd:51:12:87:67:7f:
ed:20:c1:af:8e:c1:75:a9:67:7f:21:10:f3:d8:96:58:0f:2b:
5a:f9:8e:f8:3b:6f:ab:ba:0e:07:67:82:e4:30:e2:32:e9:cd:
cd:dc:34:b5:e7:ad:42:19:8d:08:9f:3e:6e:35:dc:aa:39:bd:
35:b9:c9:f6:bc:fe:a9:90:dd:c9:6c:e4:14:c2:81:3b:01:b0:
03:9f:58:ac:bc:4b:d2:ae:35:ae:f7:fc:20:f7:58:0f:98:4e:
40:2e:c9:9b:e1:98:a0:0b:8f:89:d9:95:30:02:19:81:0f:d6:
2a:94:9a:09:1d:e2:5d:29:b7:5d:f0:3c:22:16:97:e0:66:02:
61:18:97:b5:3d:52:45:33:85:2b:f8:bc:c4:28:7c:67:2d:dc:
21:37:fc:6c:19:8f:c6:82:7b:90:84:61:fe:e0:e5:64:1d:86:
86:0c:cb:15:2e:85:1d:9a:99:08:31:d6:a4:8e:25:b6:dc:e9:
eb:3b:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:36 2025 by rpki-client