Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/650725D2C39611EFB3377255762E951A.roa
File: 650725D2C39611EFB3377255762E951A.roa (raw, json)
Hash identifier: lVqK2TQodN+x3El9NkBddKQ7GJhkI6XPCZLfwYWjz04=
Subject key identifier: 39:21:2F:B7:0D:B9:29:F6:AE:08:A7:32:07:53:05:EC:60:F7:95:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/650725D2C39611EFB3377255762E951A.roa
Signing time: Thu 26 Dec 2024 14:33:38 +0000
ROA not before: Thu 26 Dec 2024 14:33:34 +0000
ROA not after: Sun 12 Dec 2027 14:33:34 +0000
asID: 17561
IP address blocks: 45.197.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60709 (0xed25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 14:33:34 2024 GMT
Not After : Dec 12 14:33:34 2027 GMT
Subject: CN=676d6942-3ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:54:3b:4f:3e:60:d7:06:d6:94:4c:61:52:
30:cc:fc:5f:3b:ba:28:fa:a5:65:13:a2:cd:e2:59:
00:a3:a9:22:5f:a5:95:3e:25:25:7f:ed:b7:f7:51:
86:a1:cb:c4:06:67:b3:86:2c:f8:11:63:4c:6b:3c:
04:a3:4e:dc:41:37:ed:81:fd:8f:14:49:2b:09:4f:
a3:7c:b4:dc:24:a0:a3:4a:a0:32:82:1e:4d:c4:98:
38:e6:4e:18:9d:0c:7a:05:34:7e:28:04:41:c1:12:
42:e1:0b:d6:83:45:05:a4:7e:74:27:ff:dd:6a:af:
2c:cb:be:f3:8e:ed:83:b1:36:1b:87:62:28:18:a4:
07:8c:c8:cf:80:a6:8d:a3:db:9c:0a:51:c9:c2:79:
df:1c:f9:94:80:c6:c2:6f:66:d8:65:f2:bc:c4:89:
f8:60:98:c6:db:eb:82:c7:9a:80:ad:d6:fd:80:a5:
83:74:68:a5:27:2b:e5:1e:a9:ee:6c:89:d9:b5:bc:
5a:21:5c:df:17:5d:fa:c9:e9:73:b1:e2:78:24:61:
8d:ba:78:46:a5:8d:be:92:b5:1f:f8:1e:ff:8f:88:
7c:59:2f:95:e4:d2:8a:7d:83:d4:10:61:3e:41:34:
dd:ab:08:bc:49:af:e2:e8:3b:c5:47:e3:c0:94:04:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:21:2F:B7:0D:B9:29:F6:AE:08:A7:32:07:53:05:EC:60:F7:95:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/650725D2C39611EFB3377255762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.21.0/24
Signature Algorithm: sha256WithRSAEncryption
41:58:65:44:9e:27:aa:be:11:be:1f:ad:13:53:f0:c8:20:28:
50:1d:8a:cc:b1:9a:a7:cd:0e:d1:05:11:26:11:59:63:b4:e6:
34:57:55:fa:6d:9f:9e:a6:49:52:67:dc:4a:16:2f:fd:5b:13:
76:c6:c9:ed:ac:d4:75:1b:a9:21:41:c5:fe:58:3d:57:b6:81:
32:01:82:ab:f8:47:51:76:d5:7e:11:42:72:86:03:a3:eb:04:
1b:77:ad:33:82:c4:9e:95:36:d0:99:9e:7c:fe:17:dc:6a:22:
26:d1:d3:30:e1:ea:12:0d:93:87:f6:3f:0f:8a:7d:ce:f3:d3:
61:d6:df:bd:26:0e:e8:1d:b2:b9:2d:06:60:a3:ce:35:6f:51:
35:cf:7e:e4:4f:55:7d:a5:ec:ed:35:96:b8:85:51:c3:d1:3e:
39:9a:d8:19:d4:1b:6a:c8:fa:96:b0:7a:bf:08:33:70:97:73:
f7:3d:3e:3d:f0:4a:c1:7e:09:14:99:71:74:20:a8:9a:4f:2d:
c9:7a:d8:26:6c:51:51:ff:64:e4:7e:6b:3e:28:2b:46:18:61:
2e:b6:0c:e5:0f:22:a8:3b:1b:63:a5:fc:69:18:eb:44:87:cf:
03:7d:a0:c4:24:fc:93:b7:8a:34:d8:41:a9:ea:fd:2c:a5:01:
d5:71:8d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:12 2025 by rpki-client