Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B804C068C3A111EF87522B9A762E951A.roa
File: B804C068C3A111EF87522B9A762E951A.roa (raw, json)
Hash identifier: BVkaU11kNbxU7Tv1jWAuhl2qo0aI4kkr+TOdSO71i2w=
Subject key identifier: 39:32:21:10:ED:FD:49:2D:A9:64:30:B4:F9:88:CB:24:6A:95:94:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B804C068C3A111EF87522B9A762E951A.roa
Signing time: Thu 26 Dec 2024 15:54:42 +0000
ROA not before: Thu 26 Dec 2024 15:54:38 +0000
ROA not after: Fri 12 Dec 2025 15:54:38 +0000
asID: 984
IP address blocks: 45.200.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60831 (0xed9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:54:38 2024 GMT
Not After : Dec 12 15:54:38 2025 GMT
Subject: CN=676d7c42-2321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:69:ba:8a:a2:d4:4b:df:f4:db:3f:9e:84:
7d:7e:e3:68:c7:7a:23:70:3e:7c:5f:5d:b5:fb:b7:
1b:b5:1e:ad:5c:e0:c0:16:a3:77:ca:78:81:68:34:
f2:af:1c:92:e4:21:b0:9f:02:b9:dc:6e:13:a8:7c:
e8:83:c1:36:da:71:09:47:88:4a:78:4b:44:8f:8b:
68:d4:4c:5b:af:4e:ae:75:ae:c5:49:a5:3d:0d:c4:
2f:8e:05:7b:37:35:dd:37:b8:9d:79:5a:67:cd:e4:
1d:28:54:eb:0c:84:57:fc:35:ac:87:29:3c:2f:19:
32:04:5a:a5:81:c3:04:10:75:2c:37:4e:4b:49:f7:
f7:54:e6:28:64:3f:aa:6c:33:db:8b:09:a3:51:0c:
a4:15:1d:41:ff:d5:d8:a3:da:87:5a:7c:13:6d:f7:
6e:19:5f:8c:1a:3a:ac:5a:b4:ee:16:cf:33:75:5c:
b7:d0:82:2b:b0:d0:25:d8:4a:d0:f4:2b:89:56:f5:
a7:bb:b4:f2:c7:a9:f0:b6:64:17:29:2f:07:47:99:
07:7e:95:58:95:bb:e3:99:fc:9c:f6:db:76:17:f7:
98:84:5e:48:72:61:fb:71:2c:b1:2b:86:c8:45:65:
85:86:14:c8:ee:75:75:cc:8a:ae:d3:7c:46:f7:06:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:21:10:ED:FD:49:2D:A9:64:30:B4:F9:88:CB:24:6A:95:94:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B804C068C3A111EF87522B9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.133.0/24
Signature Algorithm: sha256WithRSAEncryption
97:6b:04:fa:4f:3f:c0:cb:08:1a:09:38:d6:cd:96:bb:a0:21:
ac:c9:db:64:41:b0:24:5e:cd:ea:74:48:f9:60:fc:e9:31:28:
1d:f8:b8:d3:6a:5f:8d:cd:c0:d9:dc:d9:df:bf:60:49:cd:b3:
f2:a7:94:12:a9:ba:5a:3c:28:f0:6f:a5:96:d6:25:33:5c:76:
1f:45:bc:68:65:5f:d3:54:0b:87:d9:a4:4d:41:a5:b6:a6:73:
13:39:45:18:e2:56:e6:88:e8:9e:50:84:38:23:0e:7b:97:7c:
26:47:1a:9f:e9:a3:18:58:88:2b:da:08:1a:b0:55:af:9d:f5:
bf:61:c2:0c:52:18:2b:5b:6c:d0:a0:d2:40:39:96:56:0c:50:
01:06:3f:84:44:3b:b0:e1:9a:28:64:41:84:7e:f2:21:e2:3d:
e6:f1:71:db:e2:a0:dd:d2:c2:dc:24:22:bb:86:39:52:a6:53:
4b:3f:fe:fe:43:54:14:fe:26:78:3e:3a:59:05:79:e3:07:3d:
14:ad:2b:70:cf:8c:5a:57:fd:b8:da:97:c2:d6:bd:e1:b2:f6:
2c:38:e6:a5:51:d5:29:5c:7d:38:79:c4:cf:86:9d:91:05:a0:
3c:ca:ff:a7:47:55:05:31:74:76:94:75:e7:71:7a:65:97:32:
95:47:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:25 2025 by rpki-client