Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51D0B3B4C3C011EF9759715C762E951A.roa
File: 51D0B3B4C3C011EF9759715C762E951A.roa (raw, json)
Hash identifier: 0rx0r0AzQKV6lP3ZSpOdFTf9VQeKzlDBNTpe1rqGsqc=
Subject key identifier: CB:F8:1A:0B:32:39:B7:EB:6D:C5:E7:7C:FA:63:BF:94:87:DD:25:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEDF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51D0B3B4C3C011EF9759715C762E951A.roa
Signing time: Thu 26 Dec 2024 19:33:45 +0000
ROA not before: Thu 26 Dec 2024 19:33:41 +0000
ROA not after: Sun 12 Dec 2027 19:33:41 +0000
asID: 17561
IP address blocks: 45.207.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61151 (0xeedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 19:33:41 2024 GMT
Not After : Dec 12 19:33:41 2027 GMT
Subject: CN=676daf98-5ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:b5:22:5d:23:12:4e:12:cb:ba:26:bf:be:
61:1b:10:90:37:11:9f:ad:87:58:ea:4a:8a:ab:b1:
f3:de:74:a3:c5:0c:4e:4f:57:26:69:c7:15:18:82:
46:23:9f:02:ff:9c:df:ee:f5:87:ce:68:c8:ec:d9:
05:63:ea:a3:98:3e:a0:7c:30:c2:ca:fe:30:ee:f8:
0d:17:34:9e:c3:c9:0b:75:ff:d6:a8:88:61:a8:03:
11:79:54:cc:19:7a:cf:a2:eb:dc:e0:65:6e:7c:43:
31:b5:f7:c5:2a:62:70:73:96:67:4f:d4:e6:25:83:
79:08:53:a6:65:85:9c:ab:a7:82:16:f3:61:ce:82:
aa:5b:20:dc:66:b6:52:45:bd:1d:20:a4:e8:a1:94:
a8:a9:cc:98:e1:76:a3:5f:30:e0:c0:17:3a:13:7e:
c2:b1:3b:81:2a:56:05:e5:86:09:aa:b1:e4:c1:a1:
6d:55:9c:0f:da:88:81:7b:40:03:a9:7e:c6:e4:3c:
01:89:b2:9c:25:5c:e2:84:a2:b3:6a:7d:d8:ed:56:
64:99:02:fa:8f:9e:d7:69:a7:b7:e6:8c:d0:31:94:
df:4d:12:22:57:47:46:f3:4b:21:ee:a7:71:57:26:
16:43:1a:de:4b:b2:c1:8a:34:34:73:85:b6:14:03:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:1A:0B:32:39:B7:EB:6D:C5:E7:7C:FA:63:BF:94:87:DD:25:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51D0B3B4C3C011EF9759715C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.183.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e0:60:22:19:f0:31:30:c1:51:99:f4:6b:9c:d1:e0:ab:a9:
7d:67:1c:93:12:ca:53:99:d4:fc:ce:12:2a:cc:8b:ba:9d:e3:
72:28:e5:1e:ec:dd:b8:bc:5a:16:20:1d:0c:cf:30:24:68:9a:
e7:53:e3:96:ec:32:95:2f:48:97:88:1e:c1:8a:ca:47:2d:16:
da:1c:1a:4c:78:e5:2b:c5:fe:b0:7e:42:2f:07:38:6b:6b:ed:
be:b4:70:37:a8:db:96:0f:0e:ec:50:a5:25:7c:9e:32:19:f4:
bd:35:42:60:8c:cf:89:09:6b:8e:f4:d9:47:2b:b8:9e:cc:84:
af:47:29:cb:60:d4:05:ef:4e:e2:9d:f6:d4:9e:6b:ed:56:8a:
ed:92:20:a4:2f:e2:88:0a:d0:7d:73:60:b3:50:1b:dd:04:e1:
0f:ba:20:df:4b:8f:8d:c0:78:b9:e1:9b:84:30:4b:5d:00:20:
9a:b8:9e:32:1f:b9:12:d7:46:00:7c:91:be:9e:4e:15:a1:7d:
a0:0f:73:8d:76:81:f4:6a:f8:7a:f4:30:68:35:0c:82:fc:1a:
f0:0d:7c:1e:f6:e1:36:11:e4:0a:ae:d4:7c:d3:77:3e:3f:4f:
be:20:eb:f1:60:9b:28:cd:95:41:f5:48:bf:19:79:00:72:d6:
e6:71:f4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:46 2025 by rpki-client