Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D8C6672C3A011EFA6159A93762E951A.roa
File: 6D8C6672C3A011EFA6159A93762E951A.roa (raw, json)
Hash identifier: 1SG4B4N/7wwkrWqVO4or726JEdk6xszh8sCJL1zO71s=
Subject key identifier: A1:A6:ED:A0:96:C4:81:5D:85:9E:42:F7:D2:6B:A2:1C:6A:A0:03:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D8C6672C3A011EFA6159A93762E951A.roa
Signing time: Thu 26 Dec 2024 15:45:27 +0000
ROA not before: Thu 26 Dec 2024 15:45:23 +0000
ROA not after: Fri 12 Dec 2025 15:45:23 +0000
asID: 984
IP address blocks: 45.200.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60817 (0xed91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:45:23 2024 GMT
Not After : Dec 12 15:45:23 2025 GMT
Subject: CN=676d7a17-a609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:36:82:e9:bc:e5:05:e5:db:2a:3b:90:6d:
9b:99:bd:84:0e:99:e1:63:0f:c0:7c:b1:47:47:de:
f4:37:99:5c:d3:52:dc:57:df:be:77:90:b2:44:54:
5d:e8:29:f5:66:39:e6:ac:40:06:35:45:ae:19:3d:
6b:b5:97:84:2b:1c:c6:f0:4f:3f:86:62:65:10:64:
fc:39:ca:80:b4:f7:cd:e5:8a:23:7d:8f:f2:ab:10:
c4:92:90:62:20:b6:70:7f:d2:05:65:d0:e4:97:2a:
75:7f:fe:08:82:6b:67:c4:18:35:68:ab:9b:de:1f:
ed:14:f9:3a:dc:58:94:39:cc:bf:e3:3a:a2:24:18:
d5:0d:62:10:d2:52:d6:45:ff:6a:01:91:b9:90:44:
44:8d:11:5e:49:a6:c4:fb:12:fe:02:ec:9e:97:83:
02:31:41:a3:39:e0:7d:e5:c5:4d:89:2d:eb:d4:50:
d2:b9:85:65:fa:82:dd:40:32:ff:3b:b7:e0:ab:6c:
84:49:aa:52:fb:9b:b3:af:62:fd:a8:5b:df:97:e8:
03:66:3f:2b:4a:91:8b:26:c2:59:45:a7:f4:bb:ba:
f0:48:05:97:3a:92:77:16:f7:c9:20:c2:81:d1:e5:
2f:5b:6c:7a:80:73:1a:d4:c2:97:36:df:d0:6b:78:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A6:ED:A0:96:C4:81:5D:85:9E:42:F7:D2:6B:A2:1C:6A:A0:03:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D8C6672C3A011EFA6159A93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.12.0/24
Signature Algorithm: sha256WithRSAEncryption
33:25:bf:24:e9:83:f0:de:f0:6a:ba:15:0e:51:7c:a6:58:8a:
5c:d3:d0:67:d4:fd:f2:b2:ac:86:16:58:ec:5d:1f:b0:18:33:
6e:3f:18:39:5d:ed:53:a2:6e:2e:b7:9a:3c:00:a0:28:69:c7:
31:ec:52:cb:1e:15:9e:d3:93:20:99:1c:42:f4:e9:85:a8:4b:
a8:5d:ac:62:81:93:57:71:e1:9f:1a:74:49:87:66:68:e5:97:
f3:de:cb:94:98:df:2c:2d:fd:5a:fa:f8:7a:eb:f1:2c:c0:b8:
35:76:2f:5d:2b:15:52:87:41:8d:66:d2:60:7e:a8:8b:7d:a5:
8d:58:70:36:55:2d:ba:f7:61:29:f3:b3:fb:66:d2:31:70:0a:
90:a7:87:e6:01:70:69:fc:b2:cd:76:7e:f9:de:4c:0c:57:07:
27:f8:cd:ed:94:16:48:2d:2b:73:33:ab:7e:9f:50:5c:a6:a5:
e4:94:65:5a:dc:c1:cb:84:ad:c2:89:99:22:6a:24:74:f3:0f:
01:e2:f3:75:d8:3c:06:cb:54:c1:5a:7e:47:97:f2:e7:7c:90:
52:d6:60:9b:90:c8:17:94:32:f8:b9:47:49:4d:8b:d6:3f:7e:
51:49:bd:b7:25:7f:35:f7:ce:ae:63:c5:ea:77:f8:ab:7e:c2:
ea:13:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:06 2025 by rpki-client