Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCE6D3CABE7611EF92A46162762E951A.roa
File: CCE6D3CABE7611EF92A46162762E951A.roa (raw, json)
Hash identifier: PAQZViinTPGvG2sLDpaO2r/ZGp1slH8sL0xbW7q1c8I=
Subject key identifier: FC:CB:FF:6A:3E:7A:8F:17:23:16:95:CB:E6:8B:3E:3A:D8:F6:EF:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E630
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCE6D3CABE7611EF92A46162762E951A.roa
Signing time: Fri 20 Dec 2024 02:04:52 +0000
ROA not before: Fri 20 Dec 2024 02:04:49 +0000
ROA not after: Wed 10 Dec 2025 02:04:49 +0000
asID: 984
IP address blocks: 45.206.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58928 (0xe630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 02:04:49 2024 GMT
Not After : Dec 10 02:04:49 2025 GMT
Subject: CN=6764d0c4-0067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:f8:3b:70:3d:ad:5d:35:1e:14:9f:4c:3f:
54:94:15:f2:e7:fd:00:d2:e6:de:6d:ea:66:ba:b0:
68:2f:a0:74:16:25:cb:da:1a:85:4f:37:22:a1:66:
53:30:4f:21:70:63:4b:ad:90:5d:dc:7e:85:14:6c:
a8:06:f3:09:44:ee:0b:79:b7:d1:64:19:92:9d:db:
f8:8d:d2:fa:f6:61:19:62:32:53:25:f9:79:bf:f6:
4f:20:c3:4b:ae:c7:b7:bb:ef:fa:23:0f:03:14:64:
ea:c0:7d:38:3d:d4:0a:0b:03:de:c5:86:35:34:4c:
17:1f:03:33:79:c5:9b:61:40:cf:4b:ae:4d:8b:21:
75:6f:cd:f3:b1:af:3b:06:33:76:52:5b:9c:7c:58:
7d:17:58:c8:e2:18:e3:eb:b3:fc:f6:03:d1:a7:93:
24:3d:cc:f7:35:f1:60:0e:2a:a8:45:0f:76:be:dc:
a0:30:03:b4:0d:60:e0:93:1b:45:6c:20:46:63:58:
6e:02:06:38:de:8d:29:e8:fd:2b:36:7f:6c:e0:c4:
d3:cc:60:2b:48:5f:5c:2d:80:1c:97:01:5d:18:73:
5c:f4:94:15:2c:58:70:f1:d6:0d:a5:22:e9:51:7b:
b9:47:32:3e:d0:d7:8e:1c:f5:67:27:f5:bb:8b:91:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:FF:6A:3E:7A:8F:17:23:16:95:CB:E6:8B:3E:3A:D8:F6:EF:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCE6D3CABE7611EF92A46162762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.152.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c7:0d:33:b6:aa:2c:da:4d:50:85:68:62:19:98:8b:c1:e2:
47:da:2b:07:ec:ed:68:76:f8:27:59:42:3b:c0:de:ad:2d:21:
36:20:f1:cd:ef:c8:d0:c5:0c:ce:90:51:82:84:3f:b1:fe:35:
32:3b:7f:59:ca:3d:82:fb:a2:5e:16:b6:ba:4c:e1:e8:20:03:
cf:eb:ec:6c:20:f5:20:93:a5:8e:21:d5:ca:af:09:25:42:2d:
7c:24:0e:86:39:4f:2d:9b:9d:59:df:2b:a3:82:58:c0:ef:f5:
3d:cb:01:fc:d0:8c:23:b9:19:af:b3:b9:e1:1a:1f:23:fc:79:
fc:44:5d:9f:d0:10:3e:5d:7c:10:96:4d:85:14:93:84:0b:07:
d2:bf:4d:97:a7:d0:7e:1e:18:c8:ec:a7:01:a3:6d:1e:06:77:
c5:41:26:b7:4a:77:e4:9b:bd:3f:c0:f0:34:59:cd:3a:11:9b:
8a:a3:5c:90:7b:98:f6:73:3e:82:ec:12:47:eb:66:c7:c0:db:
ee:54:51:c0:e8:89:57:f3:6c:b2:ed:ab:4d:92:5a:73:0c:af:
53:f8:9a:e5:6f:fa:df:eb:17:a8:44:fd:05:3c:3b:41:07:92:
b0:a1:81:04:1d:7b:1c:14:25:7b:15:b8:c6:70:f3:78:53:51:
8e:00:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:03 2025 by rpki-client