Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABB4307EC38C11EF849B7996762E951A.roa
File: ABB4307EC38C11EF849B7996762E951A.roa (raw, json)
Hash identifier: P8vthexvJD8jAh4zNOzdbFVpyp96zwKmE0W3sCaVMbY=
Subject key identifier: 2E:9F:15:26:B4:5C:A8:4A:14:D1:EA:6D:BB:F8:F2:47:38:AC:BC:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABB4307EC38C11EF849B7996762E951A.roa
Signing time: Thu 26 Dec 2024 13:24:01 +0000
ROA not before: Thu 26 Dec 2024 13:23:58 +0000
ROA not after: Sun 12 Dec 2027 13:23:58 +0000
asID: 17561
IP address blocks: 45.196.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60603 (0xecbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:23:58 2024 GMT
Not After : Dec 12 13:23:58 2027 GMT
Subject: CN=676d58f1-bf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:d8:59:37:b3:62:15:ec:4a:38:30:40:5f:
2b:d5:cb:b6:cd:09:ad:57:4d:8b:b1:3e:69:db:8e:
69:fd:53:0a:b4:48:2e:89:53:60:60:0a:c5:09:f2:
0c:7d:94:39:14:82:74:0d:13:9f:c2:f9:08:47:67:
df:58:50:b9:1a:e8:d5:5a:7e:bc:b8:ca:c0:d2:f3:
03:78:09:6a:8a:dc:e5:6a:11:6d:b8:1b:9b:cd:ee:
df:51:f0:38:65:4f:ac:6b:ed:fa:54:ef:e2:d3:fc:
0c:cd:ce:78:65:d3:89:f7:f4:f6:cd:95:c4:be:ce:
b6:49:dd:b8:d5:5e:f9:7f:6b:86:35:c0:2a:b8:a8:
70:c1:fc:64:d1:80:1b:6e:37:d7:97:c6:12:6a:66:
19:12:f0:e8:ec:83:83:df:f5:63:40:a1:2e:33:c5:
3a:cf:8f:af:46:3b:e9:63:03:5f:0c:84:3e:a3:d2:
34:1a:4c:fa:47:07:ce:ff:2b:04:b0:fc:ac:aa:f3:
ba:a0:6b:60:d1:1f:ae:f4:0e:02:83:21:f7:3e:cc:
81:4d:a9:e5:d5:c5:62:7c:42:9c:50:d4:1b:d2:b2:
02:ac:94:00:63:7a:5c:54:4c:4e:db:85:06:af:dd:
6b:84:e8:58:76:0a:5d:8d:8f:b6:7d:38:cd:93:ae:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9F:15:26:B4:5C:A8:4A:14:D1:EA:6D:BB:F8:F2:47:38:AC:BC:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABB4307EC38C11EF849B7996762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.207.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2a:57:7e:19:52:0e:49:58:22:a8:cd:18:76:38:d8:cb:2a:
7a:de:74:64:ca:d2:4d:97:1a:ae:f0:c0:3a:66:1e:2c:fa:4f:
44:ed:6b:a8:b5:30:34:c3:21:d5:69:cd:82:53:31:af:5b:e1:
50:13:06:5d:ba:2e:25:9d:36:48:a0:4e:46:f4:c1:6c:23:e0:
8c:9d:6e:cb:5f:c3:25:ad:54:18:3f:fa:fe:f1:04:3e:77:cb:
52:55:23:89:d4:d5:58:3c:49:d0:c0:a4:d8:43:e5:9b:8d:8d:
4c:d2:46:e2:c9:4c:bb:5e:a8:44:47:29:8f:b7:f5:7a:6b:3a:
49:6d:97:f2:5f:38:4c:57:94:07:da:3c:5d:86:26:4a:53:32:
6e:3f:ac:61:ce:b9:41:5b:72:a4:57:4f:e2:a9:0f:2b:57:51:
7b:f6:ad:66:b7:2b:38:7c:36:c4:c3:e2:b0:2c:ce:e4:73:c1:
b4:01:f6:4c:b9:2d:08:06:68:9c:87:66:2f:63:b9:10:b6:8d:
53:94:78:3d:65:af:5f:54:ab:d3:fd:a6:08:54:66:6b:8a:38:
d4:98:b9:e0:f4:bf:74:de:5d:31:d4:8e:f2:16:6d:7e:1d:94:
c0:cd:d0:8c:11:65:9a:7e:81:4e:5d:80:c1:65:68:29:a3:1a:
41:24:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:21 2025 by rpki-client