Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E9F181AC3A611EFA26120B9762E951A.roa
File: 6E9F181AC3A611EFA26120B9762E951A.roa (raw, json)
Hash identifier: JkpjI6uq4Szr3mdK8LEa9n/EMtd34aY20qD1OCVNqm0=
Subject key identifier: F2:2D:2B:EA:6A:BA:DA:D0:E8:B0:BA:2C:15:10:8B:B9:1E:DE:19:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E9F181AC3A611EFA26120B9762E951A.roa
Signing time: Thu 26 Dec 2024 16:28:26 +0000
ROA not before: Thu 26 Dec 2024 16:28:22 +0000
ROA not after: Sun 12 Dec 2027 16:28:22 +0000
asID: 17561
IP address blocks: 45.200.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60881 (0xedd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 16:28:22 2024 GMT
Not After : Dec 12 16:28:22 2027 GMT
Subject: CN=676d842a-cc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:cb:04:74:d6:0c:2c:79:47:d5:5c:2b:fd:
ad:1f:23:25:63:c3:d4:6a:08:e3:6c:db:9d:f1:2c:
8e:16:52:c6:4c:21:04:cb:b9:ae:6a:50:16:b1:6b:
2d:e1:12:23:96:61:31:49:2f:e1:84:cd:d9:37:f5:
7f:04:c2:3e:77:26:96:1a:f3:f7:66:cd:32:ff:1c:
bf:f8:9d:03:6f:12:1d:39:4f:95:dc:6b:39:81:af:
68:d6:e0:94:40:cf:25:17:24:25:9a:6d:e8:9d:5d:
c3:d1:e4:f4:55:6b:68:d7:ae:d2:bf:85:e7:db:e2:
32:8f:bd:b5:01:eb:54:c0:a0:b2:25:85:34:1c:b1:
20:68:3c:72:3c:f3:1a:ef:d0:dc:b8:0e:59:03:97:
1a:75:4b:59:44:93:03:d9:84:5b:a4:e1:b2:7f:56:
5a:ca:c9:0f:ee:8c:50:e0:fb:8b:77:36:74:a0:f4:
87:82:36:a3:6b:ea:8d:5f:c9:89:69:f1:cc:f0:a1:
18:cf:6e:1c:03:70:0e:cc:fd:03:63:5a:b5:60:5f:
81:b0:e2:37:74:05:dc:e2:36:a6:57:fe:a7:f4:02:
b8:7d:28:0c:ba:65:23:3a:26:36:c4:a3:9b:b3:22:
06:e8:53:15:93:54:1d:be:ef:78:ec:ff:d7:4f:54:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2D:2B:EA:6A:BA:DA:D0:E8:B0:BA:2C:15:10:8B:B9:1E:DE:19:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E9F181AC3A611EFA26120B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1f:40:b0:4c:86:d2:5d:e0:6e:66:fc:c1:a2:9a:83:a9:ca:
1d:77:2c:0c:01:81:40:25:3c:94:de:5c:65:d7:1a:34:fe:45:
e2:02:16:cc:85:7f:f1:a1:38:d6:ab:18:54:44:16:86:f7:86:
bf:e7:80:73:9e:13:bc:2c:ba:1d:b9:06:17:c6:b7:3d:f3:c4:
03:59:5b:c1:95:dc:b6:8a:1d:08:af:94:1e:ef:6b:5b:4d:5a:
fa:fb:bf:24:fd:b5:99:d2:bd:0f:b8:fb:8a:d0:68:4a:6a:2b:
d4:bd:9d:a7:c2:1f:b0:09:89:6d:e1:03:ab:32:4c:ba:c5:01:
89:43:f7:81:45:86:e8:c8:96:7c:9b:17:9b:77:ff:43:4c:8e:
95:c1:82:2e:20:dd:4e:cc:67:d6:a0:c0:2a:5b:94:1d:33:c2:
62:49:5e:2d:03:a3:7d:98:6b:4a:70:25:65:1b:05:ea:e5:f6:
8a:e1:ee:de:04:b4:34:93:cb:39:6b:54:a5:31:bc:60:41:6e:
61:cc:06:3a:be:7f:f6:cb:cd:58:93:22:18:fc:45:6b:f4:b3:
d0:45:09:39:4c:05:53:90:b8:07:a8:75:f9:6f:70:9b:24:d2:
6f:8c:dd:92:b6:d4:a0:5f:90:ad:21:9b:b7:c5:fe:46:ac:1a:
d5:18:ed:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:38 2025 by rpki-client