Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FC77C32BDBF11EFA39A936B762E951A.roa
File: 7FC77C32BDBF11EFA39A936B762E951A.roa (raw, json)
Hash identifier: DU5fOXBQeU2iW+vaRNeHprWCxHUXhtofaupSd9oMKZY=
Subject key identifier: FF:3D:C1:7F:34:56:D8:D0:BB:7C:B2:65:40:EE:AB:D5:A4:ED:56:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E569
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FC77C32BDBF11EFA39A936B762E951A.roa
Signing time: Thu 19 Dec 2024 04:12:45 +0000
ROA not before: Thu 19 Dec 2024 04:12:42 +0000
ROA not after: Wed 10 Dec 2025 04:12:42 +0000
asID: 984
IP address blocks: 45.206.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58729 (0xe569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 04:12:42 2024 GMT
Not After : Dec 10 04:12:42 2025 GMT
Subject: CN=67639d3d-cb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:63:83:77:16:dd:a8:92:ee:8b:5d:a3:0d:
82:f3:00:a1:ef:4c:4d:83:4c:9b:1a:6c:77:8c:c6:
05:ee:25:a2:e2:3e:c2:19:02:db:a0:63:40:68:33:
70:cb:6e:0b:dd:0d:a9:77:0c:1d:ca:fc:e8:66:9e:
2c:b1:bb:3a:b9:ce:db:76:15:ff:d7:01:5b:df:1f:
8c:c8:ba:39:f2:bb:fa:2c:f1:56:3e:a0:50:71:63:
47:10:b9:1c:b1:1a:9b:e8:a6:66:ba:27:f9:32:17:
9e:94:71:de:d1:1b:81:ea:32:34:ba:62:f6:9e:c1:
e5:08:2e:cc:71:44:8f:b6:01:8c:6e:27:9c:48:8a:
f5:72:87:70:6d:3d:2d:d7:9a:0f:54:f3:65:5b:39:
9d:d4:07:c0:da:cf:f5:89:98:43:b7:19:07:0d:39:
aa:3b:8b:7f:79:33:97:d2:89:16:4a:b4:64:3b:5d:
9e:1f:55:fd:d5:a1:ad:8d:dd:e0:12:8a:f2:08:9b:
5c:3f:9c:0b:46:50:ed:ff:c4:01:00:31:8d:95:00:
d3:d4:d2:c0:54:41:c6:6b:d2:17:80:6b:9e:1f:a3:
44:8f:3e:a4:cf:f3:e5:3c:d0:d1:c6:2c:3e:c1:85:
95:ed:9b:b8:6b:37:60:6e:f2:54:15:78:59:dd:54:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:C1:7F:34:56:D8:D0:BB:7C:B2:65:40:EE:AB:D5:A4:ED:56:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FC77C32BDBF11EFA39A936B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.87.0/24
Signature Algorithm: sha256WithRSAEncryption
20:21:85:e1:f9:33:88:99:8b:bb:bc:04:20:25:a0:ec:67:c6:
f6:66:54:a8:c6:04:ec:db:8f:55:f0:e9:17:3a:9e:3e:de:43:
d0:89:92:d9:58:4a:45:64:52:6a:20:05:90:bc:67:04:76:a0:
61:b0:17:58:cc:ea:41:d9:ad:64:af:84:f3:3e:1e:f3:5f:d2:
1e:ba:2a:66:c2:f3:88:67:4d:25:b0:4c:e8:4f:24:69:0a:86:
2d:e9:aa:60:0e:15:39:85:d7:be:e4:31:60:41:ec:8e:4c:5d:
2d:6a:c9:4f:b8:47:ab:e6:7a:95:6a:0a:0d:c2:df:78:10:ba:
0e:7c:cd:af:19:a1:bb:cf:86:43:ff:57:ab:b1:d3:01:f8:3b:
c1:9b:d6:10:4c:74:6c:d9:5e:97:18:16:33:a2:38:20:76:2a:
79:36:26:99:15:46:d4:ba:60:ad:ea:dc:aa:a2:37:e0:78:28:
86:56:42:3c:2c:10:09:a7:66:52:6e:b4:17:e2:43:06:8e:03:
d9:96:81:0f:96:ec:ef:eb:45:12:61:31:fb:c9:84:a8:7b:d3:
a7:6c:b9:8a:da:22:b3:13:19:25:fb:0a:cc:15:cd:f5:fd:cc:
67:7a:7e:28:f5:7c:5b:3f:86:47:6f:95:6f:37:02:d1:3f:96:
ff:a9:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:36 2025 by rpki-client