Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76AC4E62C39A11EFB9276F6D762E951A.roa
File: 76AC4E62C39A11EFB9276F6D762E951A.roa (raw, json)
Hash identifier: kVl1J8BuI3+tyQh9BCZ6PynogV5y5zyWFN9k3QyaZ1A=
Subject key identifier: 81:32:57:BD:E4:B9:4D:FF:30:5C:72:FC:8E:E3:A6:50:C2:E0:92:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76AC4E62C39A11EFB9276F6D762E951A.roa
Signing time: Thu 26 Dec 2024 15:02:45 +0000
ROA not before: Thu 26 Dec 2024 15:02:42 +0000
ROA not after: Fri 12 Dec 2025 15:02:42 +0000
asID: 984
IP address blocks: 45.197.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60753 (0xed51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:02:42 2024 GMT
Not After : Dec 12 15:02:42 2025 GMT
Subject: CN=676d7015-7dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:29:80:93:ca:3b:5b:eb:14:13:13:50:71:
7b:ef:69:76:0b:76:0f:1e:01:24:0c:e5:7d:21:52:
82:99:20:b7:36:37:e2:f1:3c:fd:75:33:4e:4d:c4:
e6:e4:30:52:e6:06:78:73:9b:a2:f5:33:1b:71:2d:
77:c4:fd:e2:24:fb:8f:b2:b3:36:7f:dc:8a:b3:a6:
0a:7b:7d:1f:88:08:16:2b:29:2a:26:50:32:13:3c:
1d:72:05:89:01:5e:49:94:cc:53:5d:aa:18:2c:cd:
dc:9f:a6:36:05:00:66:f1:64:ae:e1:2c:14:eb:92:
71:87:41:01:2e:01:4e:4d:10:d0:02:86:71:82:4b:
33:c4:7f:f6:40:11:87:68:8f:e3:fe:f0:37:7f:5d:
1e:6d:3e:19:4f:43:f2:7e:43:95:8e:cd:3d:04:98:
ed:75:58:93:30:5a:be:fe:27:cb:66:81:6d:9d:b5:
6b:46:37:50:a8:22:6b:ed:2a:bc:bd:b3:a7:97:d3:
89:c0:18:e4:08:29:16:e0:85:e3:60:e3:60:d9:4f:
dc:0b:62:32:04:f1:66:2f:a2:1a:6c:34:9d:04:00:
9d:54:1a:5a:7d:96:f5:9f:77:3d:c6:51:dc:13:d0:
78:75:a9:f4:2d:86:b9:f1:58:14:5a:42:95:44:74:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:57:BD:E4:B9:4D:FF:30:5C:72:FC:8E:E3:A6:50:C2:E0:92:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76AC4E62C39A11EFB9276F6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:58:36:e7:25:89:46:07:9d:ee:26:09:04:e2:07:79:9c:a5:
89:ef:1b:ea:ca:0e:23:03:47:08:53:ab:1b:da:ce:33:13:a7:
65:1b:b0:de:ba:fd:f2:3c:bc:df:54:d0:c2:33:9d:91:2f:9f:
f9:98:3c:65:9e:48:5f:85:25:f5:65:fa:26:c5:7f:7b:e7:89:
46:7f:da:be:95:79:2b:98:32:0e:f9:7f:b0:b4:8e:f7:61:2e:
81:f4:a2:8e:43:b8:c5:c3:17:70:7b:82:cd:ae:1b:c6:92:8c:
66:2e:c5:51:2f:9c:23:66:21:0b:57:aa:fc:a5:aa:1c:bb:e1:
67:95:f3:40:0b:f5:89:61:bb:2c:17:ed:ba:a3:22:ec:d4:e9:
72:85:b8:d8:d3:0f:81:21:98:05:c1:71:62:89:e3:d1:c2:c9:
e9:e9:1e:17:a8:46:3c:ff:5e:c5:09:f4:c8:48:31:1c:73:d6:
6b:58:73:46:16:0a:d1:09:55:f3:0a:92:d9:5f:0c:b8:72:2a:
c3:31:dd:30:74:0c:9c:57:c2:44:74:ca:95:ac:42:4b:81:d0:
27:60:f9:7d:2a:3d:0b:ca:58:9f:86:55:ad:4d:76:a6:a2:fb:
86:b3:81:23:03:d0:2c:0b:08:5f:1d:0f:9c:09:47:4b:6e:16:
c5:36:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:04 2025 by rpki-client