Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9D4BB8C3B911EFBB29BFAF762E951A.roa
File: 4F9D4BB8C3B911EFBB29BFAF762E951A.roa (raw, json)
Hash identifier: mXJFQu7i3y+6Pbr8Q+EIm07P7yYZFrK9t1wXhq3ykxQ=
Subject key identifier: 99:F2:BA:F6:A5:9D:A5:CB:B8:8D:6B:C9:46:15:51:69:55:D9:27:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9D4BB8C3B911EFBB29BFAF762E951A.roa
Signing time: Thu 26 Dec 2024 18:43:34 +0000
ROA not before: Thu 26 Dec 2024 18:43:31 +0000
ROA not after: Sun 12 Dec 2027 18:43:31 +0000
asID: 17561
IP address blocks: 45.207.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61079 (0xee97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:43:31 2024 GMT
Not After : Dec 12 18:43:31 2027 GMT
Subject: CN=676da3d6-7198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:7a:a9:be:e9:ea:24:2c:f4:ac:8a:85:0e:
d8:57:07:d2:b7:79:0d:83:8b:7c:a6:91:6c:7c:4b:
ba:c9:69:60:26:9b:35:2a:3c:12:e6:51:e0:86:96:
9c:12:24:ba:e5:b5:bc:75:f7:03:85:bf:34:62:3d:
54:42:c2:b7:65:cf:9f:90:f9:ae:b2:1c:b1:3c:ec:
9b:6c:6b:b0:0b:c4:94:8a:a1:d1:a3:91:a9:bc:93:
73:dc:71:36:cb:8d:5e:0c:1b:e8:19:2a:64:85:f0:
7c:95:bc:b5:36:9a:6b:f5:50:c7:ef:7e:25:74:f8:
4e:b7:07:6c:a3:ca:17:d7:1a:29:54:d7:4f:f7:31:
25:a9:ce:ca:25:d0:64:12:8c:6f:d4:03:7f:36:6a:
03:2a:77:3a:48:d5:64:d5:9e:d7:be:93:fb:ad:c9:
f8:bb:62:e6:4a:91:26:7c:3c:29:fb:8d:45:c4:34:
0e:c6:f1:84:7e:7f:85:a0:93:c9:fc:bd:74:b5:6d:
32:8c:e6:68:40:f1:bc:62:55:ff:cc:ec:b6:83:5b:
35:c1:d3:82:52:a3:dd:c8:52:12:24:6b:3a:8f:71:
0f:56:e5:52:b2:2e:2d:29:91:47:90:0e:84:28:11:
b9:6d:08:76:3f:9b:05:39:df:53:0f:24:67:f5:73:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F2:BA:F6:A5:9D:A5:CB:B8:8D:6B:C9:46:15:51:69:55:D9:27:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9D4BB8C3B911EFBB29BFAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2e:0a:85:d4:b7:02:fd:ee:32:91:f8:75:3c:03:25:93:8d:
a5:6a:3c:53:03:8b:50:37:b4:a6:7b:bc:f1:1f:00:57:30:3c:
45:52:98:ca:c0:1d:d9:82:7d:32:95:b9:3b:e4:72:37:cb:3a:
c2:97:4c:05:be:c1:bb:99:5c:22:d4:7b:c2:2e:b0:fe:d2:e3:
a2:04:5c:3e:8d:32:d9:0d:0a:b5:35:a2:4d:a9:a1:64:e3:f0:
0a:35:54:57:c4:7d:3f:ae:58:9b:f6:72:d5:44:3d:3d:ed:69:
86:53:d3:e3:c8:25:ac:fc:96:7d:d6:8b:d1:6d:b3:33:86:71:
68:ed:ea:c3:e4:b6:1d:94:de:15:1c:71:5d:00:6b:ee:49:5f:
5b:37:20:9d:9a:a1:da:02:ae:86:c5:65:4a:9d:ad:12:70:55:
50:9f:da:60:b8:dd:87:9d:89:01:b4:21:0d:1a:0d:0f:8c:e0:
a9:a5:57:f9:67:65:be:ee:2c:16:89:6b:af:4b:26:7e:d6:e1:
21:b4:92:6e:e2:4e:7c:21:3e:1d:07:44:17:e9:22:ed:97:4b:
77:2d:91:f3:37:c7:8a:aa:cd:13:e3:9a:df:59:61:bb:10:8f:
53:e2:25:0e:8c:cc:40:d8:0b:53:32:e7:97:37:6c:5e:ff:de:
7c:1a:50:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:25 2025 by rpki-client