Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D6DA9CCC3A911EF80C7054E762E951A.roa
File: 6D6DA9CCC3A911EF80C7054E762E951A.roa (raw, json)
Hash identifier: rKhnCGbmk+bflAbBnjZvj9xtylnjaE1pqkLWBc4pzf0=
Subject key identifier: 53:E3:62:AA:0F:5F:FF:B5:5C:BD:DB:00:47:D1:AE:D7:17:52:11:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D6DA9CCC3A911EF80C7054E762E951A.roa
Signing time: Thu 26 Dec 2024 16:49:52 +0000
ROA not before: Thu 26 Dec 2024 16:49:49 +0000
ROA not after: Fri 12 Dec 2025 16:49:49 +0000
asID: 984
IP address blocks: 45.200.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60913 (0xedf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 16:49:49 2024 GMT
Not After : Dec 12 16:49:49 2025 GMT
Subject: CN=676d8930-e0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:cf:bd:2e:2d:ea:b6:e9:19:2b:64:04:a9:
2a:55:60:37:33:c0:ae:4b:de:e6:ae:e2:d5:b9:11:
c5:0b:cd:f8:d6:cc:93:65:c8:0d:f0:f3:d4:55:03:
96:e2:be:2e:65:d3:bc:d3:46:64:56:74:03:b8:dd:
d7:bf:cb:ea:14:55:0e:67:3a:f3:77:55:af:4b:24:
79:b5:43:73:65:ea:1d:56:e9:3d:55:66:23:99:b4:
38:56:c9:3c:50:91:79:6a:43:a9:9c:42:59:a0:ab:
33:2e:6d:fb:4d:66:d0:0e:fd:51:47:b2:2e:cb:56:
9c:10:82:61:3e:6d:9d:a7:5c:4b:32:9c:d8:c5:45:
c2:a7:c4:2b:a5:a7:a1:9a:40:af:4f:98:e3:e7:70:
8a:89:7d:0f:24:50:ee:0e:9a:e4:16:61:cc:6d:f1:
07:ed:d0:0b:10:5b:e2:8e:bb:06:06:95:37:cc:a9:
07:11:ea:14:c8:28:89:aa:78:bc:ab:63:c3:8f:2d:
60:59:7a:61:c0:3e:a8:0c:ef:d9:8f:9d:23:7b:c2:
e2:1b:f2:2b:58:59:28:0e:63:9b:fe:fe:a6:ad:ce:
d8:d0:58:4b:81:0f:74:22:8d:aa:e0:55:a0:d7:00:
8a:95:e6:bb:a4:3b:21:52:fd:e3:ea:3f:b6:c9:f6:
c0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:62:AA:0F:5F:FF:B5:5C:BD:DB:00:47:D1:AE:D7:17:52:11:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D6DA9CCC3A911EF80C7054E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b7:c2:5b:4a:ec:69:50:62:3d:a2:4b:51:6c:25:f3:f5:52:
78:2a:1e:7c:9c:e6:a8:d5:bb:92:f0:f5:c4:ed:c1:e5:89:ab:
2a:58:09:41:1e:9d:51:ec:3f:d2:42:4b:4f:a1:cd:26:08:2c:
07:1d:19:c0:6e:36:79:a0:05:1e:cb:37:17:ff:e1:88:d1:9f:
44:27:54:b7:fc:04:b6:58:a9:6f:17:da:c5:19:ab:4b:52:57:
83:fd:20:c4:8e:8f:25:a8:84:e5:a2:b2:41:49:4f:02:c9:a8:
e9:b4:dd:40:e9:00:04:80:17:84:e0:0a:59:49:b4:98:e4:10:
b2:64:7c:63:08:54:fa:24:4f:93:e0:bf:41:d5:65:d7:22:2f:
36:13:eb:e1:bd:33:c0:59:95:3e:a4:10:22:71:20:60:51:62:
14:5b:fc:c7:e0:47:93:99:09:64:32:17:9c:40:e6:ec:4e:36:
ab:53:53:12:b9:fe:dc:19:49:be:d3:fe:3f:d3:92:de:3f:0a:
d6:33:ab:e5:ee:e4:e7:e5:12:7f:54:ac:89:3c:b9:4a:b1:5c:
9b:69:ea:a0:86:5e:63:94:0e:17:ee:48:0c:f9:40:52:0a:32:
88:74:79:c8:91:c4:2b:6e:12:b9:22:0d:d5:fa:5f:5c:0b:e8:
83:3d:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:46 2025 by rpki-client