Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F5B2BA6C3A611EFA698F9BA762E951A.roa
File: 9F5B2BA6C3A611EFA698F9BA762E951A.roa (raw, json)
Hash identifier: telPUZFm2wExOUQXejLRYp2hxx9o18jaBNUWjCdl888=
Subject key identifier: 80:67:04:2A:A6:83:4F:E8:3E:4C:B9:4D:8A:FC:9A:46:0A:01:E0:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F5B2BA6C3A611EFA698F9BA762E951A.roa
Signing time: Thu 26 Dec 2024 16:29:48 +0000
ROA not before: Thu 26 Dec 2024 16:29:44 +0000
ROA not after: Sun 12 Dec 2027 16:29:44 +0000
asID: 17561
IP address blocks: 45.200.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60883 (0xedd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 16:29:44 2024 GMT
Not After : Dec 12 16:29:44 2027 GMT
Subject: CN=676d847c-547d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:65:54:a9:80:76:f5:ef:f1:b5:ec:4a:4a:
eb:79:71:54:79:1d:bf:a4:7c:3d:13:d7:8a:92:b2:
6d:70:35:30:a7:28:f8:8e:7e:c1:0f:31:0d:d4:25:
e1:7c:4b:5c:75:09:f5:12:eb:e6:0e:12:ea:69:6b:
57:07:46:e8:bb:ec:1e:29:e7:46:dd:c7:bd:e5:8f:
93:d8:6a:34:9a:f8:54:1e:1b:27:69:99:6b:5b:ba:
2f:15:85:5a:83:8a:51:2c:66:38:a4:d6:de:d6:ff:
c8:c5:17:f3:fb:c8:4a:e7:a7:1b:aa:b0:d3:d3:cc:
ef:54:af:30:5b:ca:eb:75:59:e2:be:b9:b8:de:90:
e5:8b:d0:8e:93:07:de:db:6e:86:fc:00:97:83:98:
33:2a:6c:40:63:29:c2:3d:02:73:ad:f1:c8:84:ee:
46:40:6b:ac:3e:b7:85:7f:0f:fd:be:7e:dc:46:99:
c6:3b:3d:ad:1d:c3:2c:86:b5:6b:00:9a:e6:7e:b1:
40:de:6f:62:7d:a2:a8:31:5f:7e:48:04:e6:d9:a6:
57:6d:8a:d6:07:4c:05:a8:07:46:4e:e7:18:23:82:
d6:d8:64:18:48:e9:1f:65:8f:9b:5d:42:e4:d6:f2:
d0:cc:24:c3:74:77:a2:9d:ca:87:13:94:ce:15:ea:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:67:04:2A:A6:83:4F:E8:3E:4C:B9:4D:8A:FC:9A:46:0A:01:E0:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F5B2BA6C3A611EFA698F9BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.212.0/24
Signature Algorithm: sha256WithRSAEncryption
37:36:ac:9d:13:b0:75:44:10:1c:cb:07:b9:4e:a7:29:8e:59:
81:46:9f:2b:5f:79:e9:9f:78:74:31:f9:a4:48:a5:2f:80:72:
8e:6b:a6:50:42:cf:74:b8:86:79:6f:6b:38:02:9f:8a:ed:15:
d1:4e:21:5c:99:b1:cc:ec:80:2f:73:4d:62:9a:2d:91:ca:b9:
90:c7:fc:81:2c:9b:5f:db:02:93:0c:5e:4c:ab:bd:ad:95:f2:
ef:8b:93:7d:d3:59:e9:5d:61:ca:66:6e:49:d4:65:93:36:d0:
61:03:f1:1b:69:4a:83:7b:d3:90:f8:33:0b:b2:31:34:10:83:
c7:4d:cf:55:e8:19:24:06:70:e8:62:7b:97:d1:90:28:6a:51:
a4:ab:5f:1c:b7:97:a5:e9:e9:c5:42:fd:9a:8e:f1:be:59:69:
b5:07:7f:f9:78:71:d8:5b:a7:4f:58:52:42:9f:f8:b1:34:20:
f8:5a:7b:65:ba:15:d2:68:99:7e:aa:e6:db:08:2f:54:5f:05:
b1:3a:7e:18:f4:29:70:97:77:be:59:8b:42:59:3b:f2:ac:a6:
dc:24:95:ba:ce:aa:e2:7d:cc:ea:5a:b8:be:23:3d:60:ef:25:
07:30:a8:51:74:3d:ec:b6:cd:81:3d:84:71:e0:ae:b0:f9:75:
4e:ec:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:54 2025 by rpki-client