Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FB60830C3E111EF91D509AC762E951A.roa
File: 7FB60830C3E111EF91D509AC762E951A.roa (raw, json)
Hash identifier: fJLmXoNb1Yxnr7iRYLxqnGriLnac3UYQ11Ws9fxBL9k=
Subject key identifier: AD:60:C7:4B:4F:84:CB:8A:93:4F:BA:22:09:26:53:BE:A6:E4:C2:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FB60830C3E111EF91D509AC762E951A.roa
Signing time: Thu 26 Dec 2024 23:31:15 +0000
ROA not before: Thu 26 Dec 2024 23:31:11 +0000
ROA not after: Fri 12 Dec 2025 23:31:11 +0000
asID: 984
IP address blocks: 45.192.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61179 (0xeefb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 23:31:11 2024 GMT
Not After : Dec 12 23:31:11 2025 GMT
Subject: CN=676de743-f3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:99:e3:51:bc:41:e7:71:e0:2a:e5:ba:da:
f8:d3:f9:ab:bd:20:c2:4b:51:df:b1:5d:60:e1:f2:
90:ed:e0:ec:62:0d:0e:99:b5:0c:09:c8:44:a4:d6:
b4:53:c5:55:35:62:69:f2:38:05:d7:60:24:47:a6:
ad:d9:e6:c2:e5:cc:ad:6e:fc:d6:3c:df:9a:ff:b5:
f1:fb:b2:af:5d:80:1c:e2:5f:16:c2:43:76:91:ca:
69:53:0a:99:c2:23:68:2f:c4:ca:c1:8f:33:17:fe:
14:52:b1:49:e7:6c:5f:70:18:c5:54:82:36:fa:9b:
67:03:34:07:ef:19:da:ec:ec:94:2c:a3:73:ef:d0:
4a:e9:0b:d1:b3:b4:76:01:75:aa:41:68:1d:03:2d:
1b:b8:2d:ce:a5:e5:90:77:bb:a0:40:d2:4c:f5:dc:
96:5d:06:ac:95:08:9f:55:32:63:d3:e5:d1:fe:14:
d9:25:75:c1:41:01:e3:34:08:52:6e:fc:2e:20:de:
fe:4e:33:ce:5c:8a:1c:d7:e4:db:40:2c:d9:dd:11:
fc:82:86:cb:19:5c:08:e6:16:95:4f:07:e6:25:24:
7b:86:f0:36:7c:a6:07:e1:b2:a8:15:89:31:0e:3f:
e2:2e:03:58:7c:c3:3e:9c:e9:f7:98:f2:17:4b:6c:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:60:C7:4B:4F:84:CB:8A:93:4F:BA:22:09:26:53:BE:A6:E4:C2:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FB60830C3E111EF91D509AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:db:f5:1b:77:2c:32:72:9f:19:77:b0:05:30:15:e2:4f:cd:
62:59:61:65:bf:7c:a6:cb:a7:08:75:e8:2c:e1:38:8c:4f:7c:
22:52:6a:18:48:91:23:c6:7d:eb:62:ab:30:1e:9f:01:51:7e:
e7:29:7e:40:3e:91:54:d7:ac:f8:73:a0:6c:32:91:66:c9:95:
67:c6:c5:da:a0:a6:8b:16:f7:47:cf:1b:fe:1b:95:4b:ec:f9:
fb:08:96:4d:f7:00:b2:a8:61:c3:14:ab:04:af:46:8b:d8:35:
c6:0f:5d:03:31:c0:c8:79:25:db:5f:49:a0:a1:2f:93:d9:a4:
74:27:1f:37:11:b0:98:64:8c:23:3b:8e:fb:43:36:f3:b1:2a:
e1:2b:a8:3b:02:47:aa:01:d7:f8:4f:14:6a:66:4a:fd:3b:92:
1a:7a:2c:67:c0:cd:2f:ab:64:a7:69:3b:d8:38:25:54:e9:50:
4c:b1:5a:23:1c:23:c6:16:40:32:e3:81:e9:54:27:0a:5e:ba:
e5:63:47:8b:e5:5c:04:9d:a3:05:d5:99:35:19:52:0d:72:93:
ee:f5:60:e6:a0:e7:fc:9e:43:a0:c5:5d:17:ce:48:d8:42:d2:
9d:43:c3:0c:4d:6e:ed:f5:f2:9f:d5:4f:de:ba:aa:69:5a:82:
86:74:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:23 2025 by rpki-client