Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50480072C3B311EFAD133B8A762E951A.roa
File: 50480072C3B311EFAD133B8A762E951A.roa (raw, json)
Hash identifier: AaGId14ei7ejxifnt+oDHPPZ7eFTuCgQFMsKhszaGq0=
Subject key identifier: D4:4C:EA:83:51:07:63:BC:B1:BF:69:9C:86:E3:8C:95:7D:E9:B7:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50480072C3B311EFAD133B8A762E951A.roa
Signing time: Thu 26 Dec 2024 18:00:38 +0000
ROA not before: Thu 26 Dec 2024 18:00:35 +0000
ROA not after: Sun 12 Dec 2027 18:00:35 +0000
asID: 17561
IP address blocks: 45.204.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61017 (0xee59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:00:35 2024 GMT
Not After : Dec 12 18:00:35 2027 GMT
Subject: CN=676d99c6-b88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:fc:e6:e2:92:aa:55:39:cf:77:de:bf:b2:
bd:82:b1:1f:47:02:3b:79:39:b5:7e:b5:ed:24:be:
97:d8:65:d6:69:d2:f8:04:c9:3e:bb:0e:12:d4:8e:
de:15:c0:19:89:36:0b:63:df:73:3d:07:e4:b5:2c:
73:ee:b3:7f:b1:fd:05:22:d3:e5:27:dd:d9:97:aa:
4e:ba:f8:42:ea:c7:67:8e:6a:45:3b:05:cb:57:b8:
dd:82:7a:99:47:8b:bb:9d:29:eb:bc:7e:04:2d:6b:
73:2f:12:c8:cf:32:7d:5a:ab:a5:cb:b3:8b:31:ea:
40:af:80:22:23:3a:39:9f:bf:3c:a0:36:75:08:c7:
49:45:c2:51:39:53:fa:58:c4:02:1d:92:cf:54:57:
72:58:b6:81:65:eb:f5:f5:d9:33:86:f9:4c:6a:bf:
e3:f2:cd:3c:16:11:02:67:5a:81:eb:5b:22:e5:90:
bf:6d:3c:44:8d:5c:83:f0:e3:f3:2f:ed:a6:29:76:
f5:9b:26:ed:a6:2d:fc:3d:32:83:97:1f:fe:44:97:
67:da:42:dc:98:46:53:48:63:1e:7b:07:07:54:7f:
70:c8:cc:58:98:cd:0d:27:7b:9d:c3:9d:1b:e6:f5:
b8:bf:08:5c:81:39:0c:9d:d4:ce:45:6b:ab:6a:8c:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4C:EA:83:51:07:63:BC:B1:BF:69:9C:86:E3:8C:95:7D:E9:B7:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50480072C3B311EFAD133B8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:90:c9:17:c3:12:0e:4a:86:e6:33:d7:a7:75:91:6d:c3:29:
40:16:49:2b:f4:ba:a4:3b:c5:95:8b:4f:25:b4:9f:8b:15:3d:
1b:48:df:59:bc:8a:6d:ee:58:70:31:04:ed:74:7c:15:76:74:
01:19:48:52:58:c4:29:90:c9:80:40:7f:e9:d9:20:ad:aa:7b:
30:0f:e2:71:35:f8:90:ac:30:6b:3b:b5:28:84:17:b6:f6:02:
ee:74:2a:18:a4:2b:0c:e5:42:5b:33:94:4d:fa:98:98:ea:f9:
20:80:f8:ff:5e:24:8b:fc:30:4a:cd:af:72:f5:95:e1:82:14:
39:5f:37:ee:41:05:ae:6c:af:38:5b:f0:e5:ce:f1:1e:8c:dc:
32:bb:a2:f7:1d:a0:c4:05:e2:b5:4f:ec:c8:f0:f6:7e:d1:cc:
3d:a1:4f:6c:ce:29:d2:a1:93:62:c5:a7:3a:12:e7:1b:3f:bc:
b0:f1:21:2b:73:c6:2f:a5:e9:ce:50:62:92:ce:41:8c:f8:2c:
f8:50:37:3e:7c:80:07:5b:bf:b1:96:b2:c2:6d:37:2f:9d:42:
59:3b:3b:07:ff:d9:df:31:0c:bd:8b:de:6e:f6:ae:72:5e:bd:
10:77:11:6f:fb:6f:55:40:16:77:91:a6:6a:b2:2e:43:73:7d:
eb:f7:99:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:39 2025 by rpki-client