Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87D2F392C3BA11EF85AC7AB6762E951A.roa
File: 87D2F392C3BA11EF85AC7AB6762E951A.roa (raw, json)
Hash identifier: 4+svzduJlPFsd509uo5R/kdemzRxyaqrYe21xu95MGo=
Subject key identifier: 85:27:6A:6E:C3:1C:52:F0:6E:45:53:34:92:24:36:9C:B1:87:D4:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87D2F392C3BA11EF85AC7AB6762E951A.roa
Signing time: Thu 26 Dec 2024 18:52:18 +0000
ROA not before: Thu 26 Dec 2024 18:52:15 +0000
ROA not after: Sun 12 Dec 2027 18:52:15 +0000
asID: 17561
IP address blocks: 45.207.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61091 (0xeea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:52:15 2024 GMT
Not After : Dec 12 18:52:15 2027 GMT
Subject: CN=676da5e2-0125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:e9:52:02:42:09:02:97:e8:0f:39:c3:46:
26:d2:2b:79:70:11:74:e1:17:95:ba:fd:aa:7b:0d:
07:8e:94:ae:e3:33:b9:13:58:85:59:8c:17:eb:00:
11:db:29:2e:da:3f:0e:ac:20:bf:41:2d:54:bf:cc:
52:e7:38:6f:08:52:be:4f:02:d8:db:47:bb:84:4b:
90:5b:77:b9:2c:15:06:69:ed:cc:b0:47:df:a0:69:
02:6d:4f:a9:60:f0:2b:c6:57:d6:04:72:5f:40:3b:
87:ca:96:ae:ac:dc:af:a2:87:70:4e:f2:e0:2a:e9:
60:be:cc:ec:3b:06:2b:04:c8:3c:26:54:46:a4:1c:
8a:26:cf:e8:3b:45:fd:dc:53:26:46:65:56:c0:27:
98:f1:9d:ba:e5:7b:56:aa:fc:33:7e:0f:49:5f:bc:
d4:f8:b8:e5:cb:b6:d3:39:22:45:4f:eb:b2:a2:29:
f3:20:15:ea:75:e2:7c:f3:f0:e9:b7:ba:2d:3f:02:
39:7a:43:a9:9a:6a:81:15:2f:c5:f0:41:f0:2b:be:
e9:6a:e5:d4:05:d3:69:8d:fc:97:d7:ba:85:d2:51:
77:14:78:3f:a1:3e:60:22:09:a4:75:ee:63:19:06:
07:db:1d:46:dc:29:e5:a7:4e:ab:fb:f4:6a:dc:eb:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:27:6A:6E:C3:1C:52:F0:6E:45:53:34:92:24:36:9C:B1:87:D4:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87D2F392C3BA11EF85AC7AB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:31:06:9b:df:d1:ad:1b:83:bf:fa:96:90:cb:0c:55:65:62:
4a:8b:34:3d:97:73:80:1f:e6:16:fd:88:42:2a:07:71:90:41:
6e:3e:03:96:0b:04:9f:a6:fe:6c:c6:1e:dc:41:20:e7:9b:38:
3c:bf:50:b9:36:d3:36:90:68:32:4b:c5:71:1a:32:11:49:55:
8c:da:bd:8a:f6:00:74:66:5e:00:df:cf:7c:90:2d:85:ce:61:
6f:56:d1:48:c6:3e:63:a6:78:ca:e6:e4:5c:24:1e:e0:78:00:
91:da:c6:c1:e2:1c:ae:ac:23:17:e9:c0:54:84:0f:17:52:74:
10:ad:28:bb:b9:c6:69:f6:48:84:2c:89:21:ce:ed:83:5d:93:
e3:dd:80:b0:b3:ce:cc:df:3f:63:2c:78:bd:cf:a9:5e:c1:a3:
d9:76:62:25:7a:c5:7d:70:bb:27:bf:71:ed:be:63:9a:33:d5:
5c:31:36:63:86:0d:cf:62:54:d0:0e:fb:89:95:c5:1d:e3:51:
13:43:6c:96:02:de:50:f9:13:aa:eb:41:c8:f2:ff:b1:67:29:
8f:d4:35:16:28:c6:7c:ed:c2:24:96:43:72:4c:cc:f7:2e:5f:
23:19:9a:31:04:48:83:e5:11:59:43:5f:03:e2:69:a8:54:b6:
f6:be:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:55 2025 by rpki-client