Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B64A67D0C39911EFA7341369762E951A.roa
File: B64A67D0C39911EFA7341369762E951A.roa (raw, json)
Hash identifier: R7eXXt7ppzUbCiSE/x7DGz6MoCvk0TcQQ/5Kwq4DIfQ=
Subject key identifier: E3:6A:8A:91:50:BE:41:02:59:9A:44:67:A8:97:04:DF:32:09:FC:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B64A67D0C39911EFA7341369762E951A.roa
Signing time: Thu 26 Dec 2024 14:57:23 +0000
ROA not before: Thu 26 Dec 2024 14:57:19 +0000
ROA not after: Sun 12 Dec 2027 14:57:19 +0000
asID: 17561
IP address blocks: 45.197.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60745 (0xed49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 14:57:19 2024 GMT
Not After : Dec 12 14:57:19 2027 GMT
Subject: CN=676d6ed3-c7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:6c:e6:db:83:ce:46:cd:9b:9b:ef:7a:24:
92:b9:d8:59:96:2d:1b:b0:f0:71:cc:1f:bc:6d:a9:
83:ca:fb:86:1b:56:db:ee:b9:4b:84:97:2c:29:f1:
b8:c3:28:dd:bb:f5:24:e6:7d:56:51:63:00:f5:f3:
8d:74:af:39:d0:c2:fa:16:f9:7a:08:50:fb:3e:9b:
1c:d9:b6:e7:d2:67:fb:f2:8c:b6:a1:2b:8e:84:60:
33:e2:fa:bd:1a:70:20:8b:52:2c:bb:bc:7c:f3:c8:
23:54:39:67:44:0d:97:dc:ab:0d:9e:2a:00:c9:eb:
21:7d:a5:df:66:91:5d:37:e6:dd:71:51:cc:82:b7:
bb:15:4f:de:51:39:48:ee:ae:24:a9:d5:7c:5b:b2:
e7:65:75:a8:01:45:d7:d9:70:0c:30:c5:35:83:47:
e5:db:cf:51:96:72:b1:36:6a:48:01:7f:62:3f:68:
84:c6:39:c6:61:0e:2e:5d:da:d8:1a:f5:f3:83:38:
c5:20:25:ba:94:a1:c6:0f:77:6f:2d:05:a5:4a:5e:
7b:86:92:b2:dd:4d:4d:1c:37:56:89:d1:a9:43:13:
49:bf:dd:84:4e:56:c3:40:c5:c4:81:13:cd:81:24:
df:84:bc:7e:84:3a:50:c0:de:4a:52:34:8e:b6:71:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6A:8A:91:50:BE:41:02:59:9A:44:67:A8:97:04:DF:32:09:FC:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B64A67D0C39911EFA7341369762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.140.0/24
Signature Algorithm: sha256WithRSAEncryption
89:40:ea:cf:03:c7:e7:9d:d1:e2:af:46:da:c8:f3:97:eb:78:
61:b4:b9:d6:00:7b:9a:fe:02:47:1a:cc:d7:86:14:12:3f:a6:
d3:0d:fe:b1:13:85:92:3b:7c:52:9b:66:9a:4b:bd:08:30:cb:
31:cb:20:8d:dc:5c:cc:6f:f5:de:b2:c9:5a:14:81:24:03:84:
31:a0:6d:d3:af:c7:61:1e:6f:c3:42:65:6c:69:36:3a:d3:b6:
f4:8e:8d:4d:bb:59:bf:99:40:c0:a3:f2:06:7d:d0:6c:cf:28:
62:0e:62:8c:c7:72:46:72:71:69:62:2d:39:0b:47:9a:0d:ac:
37:3f:8f:17:56:7d:4c:5f:f3:ef:af:0f:7e:e6:fa:4d:0c:53:
09:43:a3:f3:cb:05:67:17:c0:0d:42:e3:cc:5e:95:98:c7:b0:
a7:e4:30:26:8d:f3:bb:1c:66:5d:94:34:36:9d:be:8f:2c:de:
e7:c3:46:c4:5e:fd:e2:31:a9:19:a6:18:ea:84:c5:ca:5f:7a:
5c:f5:16:34:4b:c2:49:da:8d:60:0d:06:16:70:f4:71:ea:a8:
34:24:1c:14:b7:fa:38:04:d1:26:db:d9:52:79:c0:62:5b:ad:
c9:f8:d3:55:88:41:08:fa:91:e9:8e:cc:43:d9:1f:fe:e3:69:
27:4d:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:27 2025 by rpki-client