Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/490F6220C3A211EF91815A9E762E951A.roa
File: 490F6220C3A211EF91815A9E762E951A.roa (raw, json)
Hash identifier: enwgbHTagfrXmjfDwZtC3xlLivaMNxo5jVAMt72n/hg=
Subject key identifier: 67:16:FB:AF:12:74:8F:7A:DD:C6:4E:48:5B:75:FD:3F:06:61:00:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/490F6220C3A211EF91815A9E762E951A.roa
Signing time: Thu 26 Dec 2024 15:58:45 +0000
ROA not before: Thu 26 Dec 2024 15:58:41 +0000
ROA not after: Sun 12 Dec 2027 15:58:41 +0000
asID: 17561
IP address blocks: 45.200.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60837 (0xeda5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:58:41 2024 GMT
Not After : Dec 12 15:58:41 2027 GMT
Subject: CN=676d7d35-6f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:73:75:c4:4d:9f:e3:91:8c:ae:05:20:62:
62:77:d5:54:a1:86:39:44:23:81:91:41:9f:a5:61:
21:e7:4a:31:09:94:90:ce:d0:50:cc:3f:36:c7:b2:
89:37:2b:06:ca:ed:6f:48:1f:be:ce:8a:fa:ca:41:
8e:eb:d1:b5:54:0a:11:2c:b2:7f:7b:03:76:2e:60:
94:25:5d:e0:77:8a:5a:e8:71:b0:5f:80:10:f9:e8:
d0:1e:62:fa:52:16:2e:46:61:f2:58:76:a3:6f:20:
5d:86:fe:af:73:4e:bc:2a:05:cb:02:d0:60:8b:ef:
12:f3:86:b5:3c:10:38:64:6a:c9:c8:66:aa:a5:9d:
71:ea:ba:da:a0:d8:1c:10:fd:b1:60:85:e8:27:1d:
1b:50:1c:3d:10:4d:08:9b:82:6c:f6:45:39:59:ed:
10:01:85:89:34:bf:21:ba:7e:ed:20:6b:e4:b9:df:
88:e5:ee:ce:d0:87:e2:40:4e:bf:5b:43:48:34:2b:
40:30:af:c8:5b:bb:d4:91:be:f5:c6:b3:b4:fe:b2:
03:c4:6a:b1:03:20:24:6b:5b:1b:5d:04:9e:83:76:
04:3e:1c:fd:85:7c:10:d0:a4:67:37:61:6a:a6:09:
98:82:2e:fb:56:f0:da:a9:83:8e:cc:94:d4:c1:fe:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:16:FB:AF:12:74:8F:7A:DD:C6:4E:48:5B:75:FD:3F:06:61:00:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/490F6220C3A211EF91815A9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.146.0/24
Signature Algorithm: sha256WithRSAEncryption
06:20:a5:46:c3:7e:84:d2:2b:af:87:89:ee:2d:50:c0:4a:84:
20:4f:ee:e1:4a:ce:81:07:00:17:7a:b1:be:4c:ed:e7:2c:32:
a7:6b:77:f7:fb:88:6b:5f:cf:0d:a4:d9:da:70:d2:b4:1e:a2:
d6:b6:17:ed:dd:b3:56:97:7b:da:7f:85:42:e4:21:be:de:de:
da:7a:14:e7:59:0a:dd:75:27:27:ef:ea:3d:27:0a:43:3e:e1:
ec:cc:a4:93:be:cd:5b:16:5c:5f:57:5e:db:de:dd:44:f4:8e:
a9:c3:76:1a:3f:84:4f:a7:65:67:96:36:7c:0e:9e:be:4e:05:
eb:74:d0:1c:99:53:4d:b3:51:06:b8:fc:9f:31:5f:0b:f5:a9:
9e:eb:f8:c2:a5:6f:cb:32:58:c1:48:0f:6c:cc:64:49:8e:b0:
e0:32:94:56:5a:39:9d:18:c0:f2:9b:ec:d9:a9:b2:6c:43:19:
11:2c:54:36:fa:e2:13:c6:75:49:ed:18:35:37:f8:b2:4d:41:
02:d8:8b:28:9e:7c:a9:bf:76:5e:1e:86:35:c8:be:80:be:87:
06:5f:51:81:5f:1c:3a:d7:80:e7:5a:3b:ed:9b:64:58:fa:d6:
62:f9:47:d5:4e:3f:1a:a8:27:3f:f0:f0:ec:56:56:dd:83:10:
b8:43:a7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:41 2025 by rpki-client