Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D80DD60C3B511EF85E42997762E951A.roa
File: 6D80DD60C3B511EF85E42997762E951A.roa (raw, json)
Hash identifier: sHrMaYaCxv1NycBXmfpRjF8uF/GeapkUVpb8i0RklzQ=
Subject key identifier: 90:9E:DC:F4:B9:A6:B3:4F:BB:03:7C:83:0F:13:01:A6:6E:EC:59:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D80DD60C3B511EF85E42997762E951A.roa
Signing time: Thu 26 Dec 2024 18:15:46 +0000
ROA not before: Thu 26 Dec 2024 18:15:43 +0000
ROA not after: Sun 12 Dec 2027 18:15:43 +0000
asID: 17561
IP address blocks: 45.207.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61039 (0xee6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:15:43 2024 GMT
Not After : Dec 12 18:15:43 2027 GMT
Subject: CN=676d9d52-c7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:be:94:2a:16:c5:ef:30:34:a3:d2:eb:74:da:
ab:28:8f:51:a1:39:8d:66:33:5f:d3:ce:f8:0b:4f:
86:23:01:0f:b5:f8:a1:ff:3d:7c:8c:53:32:05:de:
51:f0:2a:e8:55:3b:f7:79:7d:0e:b6:94:e6:45:5d:
7c:bd:85:85:b1:76:cd:04:98:62:1d:30:04:56:37:
fa:11:1c:27:2f:04:24:06:69:62:0b:20:fb:96:44:
e1:62:87:12:f6:78:f1:03:1b:58:88:04:c4:a0:5b:
85:f3:21:59:ce:42:62:82:3e:2c:06:f0:93:97:3c:
af:f7:19:70:b8:e2:d5:d5:20:0a:fd:5d:de:db:85:
e8:7f:96:4c:55:e0:fd:f4:80:f7:b9:c3:61:f8:24:
31:e4:07:ab:34:cc:87:0f:06:b8:46:b5:ca:c2:67:
a4:48:85:62:50:1e:45:2a:54:9a:44:c6:26:21:f7:
25:ae:99:a9:42:e7:31:2d:c1:2a:73:92:bf:c0:69:
71:a2:63:5b:f3:1c:38:bf:15:93:00:a6:d4:43:49:
4f:71:c0:69:57:ee:23:41:8b:8b:78:e5:21:67:65:
e4:1e:08:53:67:0b:a6:57:1d:89:44:ac:c2:fe:0f:
f5:ad:3f:32:6b:e4:e9:fe:61:d8:ab:aa:5f:38:2d:
11:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:DC:F4:B9:A6:B3:4F:BB:03:7C:83:0F:13:01:A6:6E:EC:59:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D80DD60C3B511EF85E42997762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.3.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ae:0e:5b:c7:e0:f2:73:5a:12:bf:83:33:56:3d:05:13:dd:
0e:89:0d:52:e8:eb:4f:e3:45:56:1d:b8:72:33:12:41:67:3b:
68:e8:fe:31:55:ad:0c:32:ee:a7:98:0d:c9:85:66:69:7e:83:
a8:5a:cd:a4:c3:d3:cb:a8:44:43:68:0d:a5:c6:1a:e4:5c:1d:
7e:ff:e7:f5:a4:bc:b1:36:d3:e5:8d:de:a7:58:c7:7b:52:5a:
ed:ad:dd:88:71:85:24:43:d0:f1:b3:80:35:da:e2:11:f1:88:
e9:8b:49:11:94:74:d5:37:dc:67:9e:dc:d3:1e:b9:00:de:34:
7e:b3:1e:ce:e4:8e:6a:54:1e:4d:b5:cf:bd:b2:4e:c8:bb:1e:
62:53:5f:98:72:0b:9d:b4:3b:0d:b5:3c:c9:46:93:70:49:9b:
e6:e2:35:eb:68:de:84:5a:12:38:2c:b3:fb:32:24:5a:80:31:
19:c3:0f:08:93:85:8f:8f:96:14:90:62:f2:75:dd:63:d8:0e:
bc:62:66:d6:79:29:73:79:f5:43:63:f1:c9:e2:59:64:ab:be:
1f:89:e6:f2:15:1c:b6:b2:26:71:36:f2:b0:37:c4:b9:b7:6a:
24:80:af:0c:da:38:26:31:f5:21:b5:50:d8:f3:57:d3:41:7f:
48:3b:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:15 2025 by rpki-client