Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB9986FAC3A011EF8492CB95762E951A.roa
File: CB9986FAC3A011EF8492CB95762E951A.roa (raw, json)
Hash identifier: OYrE7ijTeA6MwgvIbaJe365iHsz2vxcxbL/ZPpvRC70=
Subject key identifier: 28:4A:FC:6C:E3:73:D6:01:6C:8A:F3:B6:9C:7F:95:9F:7E:F7:65:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED95
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB9986FAC3A011EF8492CB95762E951A.roa
Signing time: Thu 26 Dec 2024 15:48:05 +0000
ROA not before: Thu 26 Dec 2024 15:48:01 +0000
ROA not after: Fri 12 Dec 2025 15:48:01 +0000
asID: 984
IP address blocks: 45.200.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60821 (0xed95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:48:01 2024 GMT
Not After : Dec 12 15:48:01 2025 GMT
Subject: CN=676d7ab5-48b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:81:60:5d:c7:6b:ba:9d:8e:46:9b:56:6d:
b7:ae:83:ea:b9:61:ad:35:a5:4c:22:65:0c:59:bf:
54:c0:a0:1b:d5:b9:1d:f4:3b:43:c4:7b:32:1a:56:
09:ec:b7:86:85:0e:87:50:72:ee:9d:d6:64:7f:38:
af:6e:57:c7:7c:4d:0a:a8:24:97:97:77:cc:17:d6:
c0:49:c2:55:a2:c9:a6:8b:29:62:42:84:72:d6:fa:
75:2a:08:cb:02:99:f7:00:ee:9d:34:45:72:28:99:
ff:3c:00:b9:82:54:f8:3f:2d:6f:72:06:5b:7f:9d:
d1:49:8a:0d:fc:4e:85:98:71:07:d8:56:c3:cb:7b:
bc:76:58:94:32:77:96:c8:fd:28:7d:2b:35:b6:d4:
58:da:34:98:77:8c:f2:b6:07:37:9f:87:fc:80:d7:
43:5d:ce:ab:cd:23:f2:18:e1:2f:2a:b0:76:db:c9:
bd:d8:a6:5c:78:a8:97:62:ed:83:33:ab:dd:9b:0d:
8f:f9:21:3b:31:3c:4c:85:cb:d2:e3:56:44:06:c3:
ed:5c:27:a3:34:3c:ab:6f:6f:53:13:5f:56:01:e7:
56:e9:91:c7:ff:fe:32:ce:92:8c:56:17:a4:32:bf:
91:de:7d:6f:6e:c9:49:74:e9:34:8a:33:09:d8:c6:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:FC:6C:E3:73:D6:01:6C:8A:F3:B6:9C:7F:95:9F:7E:F7:65:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB9986FAC3A011EF8492CB95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.122.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:78:ff:10:1e:7b:24:f4:09:81:3d:b4:83:11:04:d1:3b:43:
af:a8:94:f6:d6:1a:22:ce:5c:3d:8d:c7:08:b4:f9:73:f8:e4:
e7:17:84:6f:32:58:d6:0b:33:62:2a:f5:0f:b3:52:9d:62:b8:
32:cd:66:ef:d1:d4:83:3c:e7:0a:b7:2c:f8:fc:7c:48:ca:45:
e1:9f:84:8b:af:43:eb:8e:f0:2d:78:38:e9:12:9e:c5:58:d6:
ea:06:f8:24:69:e5:42:7b:f8:b3:b2:fd:7d:ae:d6:00:88:3d:
32:ea:82:e3:db:22:c2:82:c1:0c:7c:cd:4d:ff:a6:6f:c0:be:
54:ee:24:56:ff:91:bc:d5:31:1f:36:bc:a2:a7:9d:9c:08:20:
f1:b4:88:22:d9:4f:1c:5d:53:7d:23:b0:bb:e8:d6:71:bc:7c:
43:f6:40:2f:4c:a0:c0:84:8e:0c:d1:22:23:c3:90:a2:fd:76:
7d:58:52:b7:64:a6:54:fd:e3:eb:6f:b5:51:8d:e4:9d:f6:df:
2b:76:48:37:74:ea:1d:c7:11:a8:3a:4f:11:40:9f:2f:ad:a4:
21:78:b8:b1:5c:73:7c:7b:92:f0:4f:2d:63:4c:15:10:6f:99:
c6:14:46:d9:b8:20:b5:21:a3:7d:53:77:aa:34:77:45:42:cd:
5b:ea:f2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:27 2025 by rpki-client