Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C977FB0C3AE11EF9E06466C762E951A.roa
File: 5C977FB0C3AE11EF9E06466C762E951A.roa (raw, json)
Hash identifier: FcZNZ804xZV2ThepBMARogZ1iKyEz3Pc+Bq36d7vYDs=
Subject key identifier: 3A:C4:9E:DC:E1:5C:62:84:31:22:06:45:11:76:C9:BB:2C:CA:66:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C977FB0C3AE11EF9E06466C762E951A.roa
Signing time: Thu 26 Dec 2024 17:25:12 +0000
ROA not before: Thu 26 Dec 2024 17:25:08 +0000
ROA not after: Sun 12 Dec 2027 17:25:08 +0000
asID: 17561
IP address blocks: 45.200.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60965 (0xee25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:25:08 2024 GMT
Not After : Dec 12 17:25:08 2027 GMT
Subject: CN=676d9178-b2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:04:1c:c6:55:70:9b:50:b9:8b:5e:2b:69:
95:d3:05:8a:bb:13:40:6f:e2:6b:1c:1e:5f:f6:2c:
a5:b1:fe:09:56:89:1e:0f:0c:05:d2:ca:dd:b2:7f:
24:a9:2d:3a:23:82:d9:08:c3:bb:6a:4a:61:54:8c:
bc:99:e9:3f:1c:8c:2d:92:22:69:70:e1:ea:b0:57:
e0:f8:f5:3a:c9:df:40:f6:9e:e1:3d:57:20:18:cd:
fc:58:e4:b4:26:6d:c1:b6:d8:e5:fd:97:32:21:b9:
5a:f3:e1:41:91:08:ba:7e:fd:93:d9:6e:94:a9:c3:
36:63:98:99:5c:a5:9c:f1:78:8a:fc:57:17:c2:0d:
d4:89:f5:50:53:ee:3c:35:95:cf:66:b4:bc:93:af:
45:1a:91:4e:12:62:d6:6c:e2:07:20:57:f5:b2:fd:
9a:98:35:b0:4b:30:68:bd:d6:72:5a:48:57:08:4d:
15:40:b2:94:63:05:97:b7:5c:eb:44:48:4d:80:d9:
f0:d2:99:ca:f9:4e:26:75:e7:10:73:e6:dc:ed:eb:
e6:1f:1d:09:7f:af:77:c1:4a:49:cf:65:96:47:28:
5b:95:7e:be:1b:b9:b4:fb:af:3f:0c:9e:39:10:23:
41:34:d7:1d:8b:4f:9f:f6:f8:dc:21:d2:b2:67:34:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C4:9E:DC:E1:5C:62:84:31:22:06:45:11:76:C9:BB:2C:CA:66:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C977FB0C3AE11EF9E06466C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.253.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c7:36:56:5f:37:69:4e:20:06:7f:67:d6:04:77:ca:16:2a:
0e:ce:d7:d6:b2:c6:f0:96:07:52:01:be:b7:9b:05:50:33:c0:
5e:ad:15:5e:ed:39:6b:47:11:20:69:be:12:c4:7a:7c:4b:09:
54:5a:c1:b1:bc:4d:90:b9:8b:5e:e7:fc:5e:23:4e:59:da:e7:
39:89:4f:a7:53:28:f6:aa:3a:2d:fb:8e:64:ed:bf:8b:7c:e8:
45:48:94:04:35:55:f6:51:56:51:82:3a:d7:7d:54:c4:f5:28:
e9:d8:c1:d6:de:4d:1b:68:e4:4b:29:e0:32:cd:8d:50:3d:f6:
57:06:9c:3e:41:ea:fa:36:22:a0:6c:f2:32:ce:3e:a0:54:bb:
ab:67:e0:4a:b7:2d:cc:6d:af:96:e2:2f:33:c0:e9:ef:90:bc:
3e:cf:99:41:3b:f0:ae:df:47:8d:0a:11:65:4f:59:71:ae:49:
55:c9:6a:92:b1:44:74:b7:a5:78:43:a9:e3:05:88:21:37:94:
90:5e:a9:2b:d8:cd:1b:48:31:09:ec:e4:6f:0d:61:b8:16:d3:
05:31:85:1a:16:58:44:d3:70:ef:1e:65:2d:ce:2f:32:5a:82:
c2:7d:73:94:6d:7d:cf:96:1e:a7:9d:00:b1:e4:45:b3:ab:6b:
a2:b3:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:42 2025 by rpki-client