Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B4453D2C3AA11EFAFB4F552762E951A.roa
File: 8B4453D2C3AA11EFAFB4F552762E951A.roa (raw, json)
Hash identifier: rzNVLMNVaOdJ4pPDO9dsmS4+JyRMy4bdm+qi9/2AMJQ=
Subject key identifier: 6C:06:2D:E0:BF:B0:7F:D2:41:18:80:11:E2:A5:F3:33:34:F3:61:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B4453D2C3AA11EFAFB4F552762E951A.roa
Signing time: Thu 26 Dec 2024 16:57:52 +0000
ROA not before: Thu 26 Dec 2024 16:57:48 +0000
ROA not after: Fri 12 Dec 2025 16:57:48 +0000
asID: 984
IP address blocks: 45.200.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60925 (0xedfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 16:57:48 2024 GMT
Not After : Dec 12 16:57:48 2025 GMT
Subject: CN=676d8b10-318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:fb:e2:ef:6f:a6:94:91:48:c1:8b:cc:07:
10:79:90:92:31:1e:4c:3f:8f:24:eb:a3:12:8c:d3:
33:64:48:80:c5:41:4f:1c:10:f4:1c:e6:bc:91:be:
ef:17:fa:d6:dc:58:e2:5b:54:22:2d:83:6d:90:e2:
5c:49:ea:b1:5d:98:18:ff:ce:88:a3:a9:6d:34:a5:
42:91:03:a6:96:a8:25:be:fa:8a:a2:be:45:86:3e:
38:43:b6:a1:8a:aa:69:0d:fc:75:a8:35:c8:f1:bc:
af:16:7e:c2:15:e2:c1:ac:73:e5:a7:93:37:cf:15:
8f:38:85:c5:59:10:f7:76:7d:a0:dc:e3:96:e0:ec:
a5:5a:ab:be:0b:55:41:6d:e4:19:d2:c2:72:5d:cf:
b8:a4:91:7c:93:f6:63:43:1c:86:2f:3e:e3:33:27:
0b:57:59:83:59:1a:15:c2:3b:7e:e5:51:f2:60:d1:
83:ef:a1:06:33:f1:64:26:01:ef:bb:89:75:5e:ed:
c4:df:90:f4:da:6a:53:06:24:77:05:0c:ca:03:82:
04:28:f7:41:75:74:96:3e:db:1f:23:b4:f6:ec:c3:
03:61:3b:46:62:31:e8:14:52:01:d1:c2:a7:b0:e6:
23:34:5a:71:aa:cc:81:cc:77:7c:d7:51:4c:66:15:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:06:2D:E0:BF:B0:7F:D2:41:18:80:11:E2:A5:F3:33:34:F3:61:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B4453D2C3AA11EFAFB4F552762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:cf:5d:78:4e:c1:f6:59:3b:1f:ea:82:94:35:3e:f8:f7:6d:
d0:60:6b:6c:bd:52:b8:10:90:c8:1e:c8:3b:7c:83:e3:6d:e5:
41:cb:e2:e6:e7:6b:ca:21:77:7a:39:a9:6d:46:54:74:e5:70:
cc:6c:23:7f:6d:40:ed:f4:d3:8e:9d:42:fe:4b:7d:eb:8d:73:
18:f1:d6:6a:93:d9:65:01:5f:09:0a:b4:75:c3:ba:4f:c0:7d:
44:bd:dc:5e:80:c4:35:ce:4a:1b:fb:c7:8c:3e:69:1d:d6:3b:
d6:01:2e:f5:4f:8b:08:17:7b:e5:72:11:0b:3b:61:23:db:5d:
c8:7d:07:99:5b:bf:60:dd:e4:ec:1f:cc:2b:7f:3e:00:30:3c:
8f:eb:85:99:9e:ca:7c:84:91:9a:9b:98:9a:d4:d7:01:53:0c:
e0:f4:59:3f:aa:5d:d2:6b:c0:ed:9f:7f:78:66:1a:44:f9:5e:
b2:71:14:0c:f5:c1:8d:bb:79:e9:e7:f7:20:92:4b:4e:31:19:
aa:cc:1c:ee:2d:43:d2:7f:ff:3f:cb:48:6a:2f:d4:7e:92:92:
d8:2a:88:b7:c0:e1:d7:39:23:a7:e7:73:a2:5d:f3:06:15:95:
30:72:ae:25:7c:65:de:69:56:57:75:b8:e5:76:8d:1b:b0:65:
12:58:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:56 2025 by rpki-client