Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BB0E948C3B111EFB041BC7D762E951A.roa
File: 6BB0E948C3B111EFB041BC7D762E951A.roa (raw, json)
Hash identifier: wkCSYILdH5AjeBVfycerCHhOkgz4X0J1UgmmqYNFpJQ=
Subject key identifier: F7:F0:B3:2F:40:4B:99:F0:E9:78:83:2D:B7:9B:B8:48:F1:5D:65:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BB0E948C3B111EFB041BC7D762E951A.roa
Signing time: Thu 26 Dec 2024 17:47:05 +0000
ROA not before: Thu 26 Dec 2024 17:47:02 +0000
ROA not after: Sun 12 Dec 2027 17:47:02 +0000
asID: 17561
IP address blocks: 45.203.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60997 (0xee45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:47:02 2024 GMT
Not After : Dec 12 17:47:02 2027 GMT
Subject: CN=676d9699-285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:e0:67:43:ab:10:a6:87:38:14:46:9c:0d:
fa:d3:78:8d:20:3a:36:8a:65:c6:61:0f:d4:37:0b:
4f:09:50:c4:e5:92:03:e6:60:25:fa:24:0b:05:8e:
2b:80:e6:d4:a9:ee:ec:eb:25:66:d2:d4:de:05:15:
22:47:03:a6:be:9e:10:05:bc:86:31:01:1b:b6:17:
24:8d:94:aa:a1:16:5b:17:f0:5c:ad:ac:37:f1:7a:
fd:b0:d6:51:b9:19:92:85:04:0d:07:d7:9c:e1:74:
b6:78:6f:81:b0:8a:46:3f:62:34:29:3b:ec:41:97:
d8:08:91:c7:fb:6f:6b:93:1a:95:09:8b:98:5b:44:
20:9b:5f:9c:3b:23:7a:64:65:be:10:d6:f8:4e:f8:
bd:59:4a:25:56:3d:6b:81:7d:34:db:73:21:01:52:
e2:62:ad:e9:7f:6a:0e:5f:57:e4:2c:67:6c:ec:82:
f6:8f:a9:d2:fd:cb:64:1b:71:c2:9f:e9:6b:ae:8c:
96:6c:bb:c3:16:f5:77:b2:2f:f5:da:3c:f4:09:25:
29:5d:9b:65:bb:4c:57:85:50:66:57:75:80:c5:8e:
8d:44:6d:b6:68:20:26:a0:af:7b:7c:a8:cb:a9:64:
48:1c:7d:b7:a4:cc:3c:eb:e1:62:b8:75:49:ea:f6:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:B3:2F:40:4B:99:F0:E9:78:83:2D:B7:9B:B8:48:F1:5D:65:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BB0E948C3B111EFB041BC7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.36.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:29:c1:46:08:fa:23:12:b8:60:98:46:f8:68:14:12:06:fb:
9e:88:d6:e5:d6:21:d1:e9:e5:db:d9:b7:7f:00:ca:e1:e1:e9:
8b:11:65:e6:db:cc:9f:ac:84:59:4e:90:db:c1:e8:1f:1c:23:
3e:b7:cd:17:25:f6:b6:65:5a:b4:d3:87:56:4a:c4:06:a9:13:
7f:04:94:25:42:98:a3:1f:6c:fe:95:b1:d9:aa:c4:f9:21:ba:
bd:d1:03:9c:cc:e8:2f:f6:6b:ee:1d:4f:d3:49:9b:0c:56:4f:
ee:cd:0a:8b:01:87:d8:dc:75:7d:14:1a:c7:31:25:c4:a3:3d:
bb:21:3c:44:45:31:28:6d:38:9f:80:cd:dd:a8:8e:0c:85:ce:
88:df:33:43:88:9d:0f:81:d1:39:cf:6a:02:5a:5e:96:73:ce:
a5:53:3b:39:ee:11:14:24:bc:a3:f3:ae:1c:55:d4:6b:7e:ec:
ff:03:ac:8e:77:29:18:35:e5:62:c4:3a:2d:cd:3c:90:e3:15:
68:9f:38:95:39:48:6a:9e:90:e8:45:82:69:ec:b8:db:94:f1:
14:bd:8c:c4:9e:c4:1a:ee:cc:c9:f7:b3:0c:30:67:11:27:29:
78:99:16:5b:6c:fc:b0:2d:42:99:f3:8d:e7:1d:f0:b5:8a:91:
4c:a4:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:39 2025 by rpki-client