Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77618A00C3B011EFA77A1879762E951A.roa
File: 77618A00C3B011EFA77A1879762E951A.roa (raw, json)
Hash identifier: aF4LdJ8XHyFY7zW/D0HXunG5AoL0186G+y7aLFi22uw=
Subject key identifier: EB:FE:0A:B4:B3:41:15:27:AF:9D:BA:BD:84:40:12:35:08:FE:87:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77618A00C3B011EFA77A1879762E951A.roa
Signing time: Thu 26 Dec 2024 17:40:16 +0000
ROA not before: Thu 26 Dec 2024 17:40:12 +0000
ROA not after: Sun 12 Dec 2027 17:40:12 +0000
asID: 17561
IP address blocks: 45.202.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60987 (0xee3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:40:12 2024 GMT
Not After : Dec 12 17:40:12 2027 GMT
Subject: CN=676d9500-b3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:7a:40:73:00:25:ed:01:b3:c8:41:c8:8c:
fc:29:d6:c8:ce:63:66:aa:47:8f:e5:19:be:84:e6:
d6:17:82:2b:48:52:98:b2:a9:6a:36:d2:a9:20:4a:
16:0e:53:4b:75:0e:dc:36:9f:26:bd:34:78:12:e9:
d2:8a:f9:02:b8:27:85:28:65:b9:28:44:9a:96:1d:
3c:98:e9:ef:67:6d:31:b6:9b:e4:42:b9:71:85:5b:
fa:3a:b7:e6:69:73:e8:96:3a:ed:2c:1c:26:5f:50:
0f:bc:8f:ce:1e:08:94:d5:4d:b9:71:b8:31:d5:c8:
8b:1e:2b:d9:4f:51:b4:d4:3a:ec:65:16:7d:a1:31:
21:21:6d:56:a8:d9:84:ce:46:af:2d:6b:01:3a:fd:
59:12:b3:8d:84:c5:53:dc:b6:83:c8:39:63:67:0e:
bf:a0:d7:dd:97:20:34:72:0f:ee:eb:af:e8:46:79:
c1:6a:db:65:24:26:45:2e:db:92:b2:a5:f7:d2:fd:
75:8f:09:19:88:ce:f0:f1:1f:5a:83:e6:1d:eb:e5:
04:57:36:da:80:6e:b8:39:0b:1d:7d:25:05:61:62:
91:06:c9:9a:7e:1f:79:4a:78:b6:42:12:18:ba:2d:
f6:ca:01:1d:ac:fe:b3:bb:c8:73:93:89:a8:1c:b8:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:0A:B4:B3:41:15:27:AF:9D:BA:BD:84:40:12:35:08:FE:87:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77618A00C3B011EFA77A1879762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ca:4d:0a:b1:de:bc:05:dc:69:70:d4:be:b2:47:3b:c3:b6:
a7:e7:78:d4:d4:0f:0e:e0:c5:3d:dd:c5:b4:76:63:24:ff:2a:
6a:0f:2e:86:e1:60:f6:46:b5:5c:75:63:7b:e6:be:51:e4:72:
05:4a:20:c2:03:2a:65:74:2e:35:fb:2a:18:a2:64:16:e6:76:
ef:d6:1c:97:96:e9:48:4c:09:2f:9c:ca:77:20:db:4b:7c:8f:
2e:ee:c8:2f:83:db:29:01:73:f8:f7:be:15:aa:99:48:ba:9d:
69:53:1b:55:52:1d:2e:6b:d6:47:cc:e2:ca:ce:c2:28:b1:e0:
73:06:2b:52:d2:c8:34:7c:55:e3:7c:fa:55:12:7b:b2:5c:d2:
b8:7d:f4:49:0e:01:77:0a:1e:73:f9:79:10:c0:e4:12:54:cd:
9a:f5:60:e0:39:61:b2:9d:a0:13:5c:af:aa:02:31:25:2e:4b:
ed:cb:b5:11:6f:d1:68:fb:58:24:c6:39:df:75:b8:81:20:ec:
30:bb:a1:94:5a:7a:bc:c5:0b:a9:e2:2d:8e:7e:aa:16:63:8d:
fc:fa:8b:29:2d:a9:6e:2d:88:61:69:a0:01:b3:6e:74:51:94:
90:69:fe:6c:d8:12:ee:ad:36:d6:b2:ca:e1:eb:ca:e1:a4:7e:
74:b7:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:15 2025 by rpki-client