Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBBE2A44C3B011EFA891457B762E951A.roa
File: DBBE2A44C3B011EFA891457B762E951A.roa (raw, json)
Hash identifier: MlCritMpRkGGxV7FpvtTWhSJGcA5wmrp9fDU39YJbRE=
Subject key identifier: 6E:8C:E2:92:70:2F:0A:78:1A:37:3B:63:AA:36:E0:B4:90:3B:24:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBBE2A44C3B011EFA891457B762E951A.roa
Signing time: Thu 26 Dec 2024 17:43:04 +0000
ROA not before: Thu 26 Dec 2024 17:43:00 +0000
ROA not after: Sun 12 Dec 2027 17:43:00 +0000
asID: 17561
IP address blocks: 45.203.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60991 (0xee3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:43:00 2024 GMT
Not After : Dec 12 17:43:00 2027 GMT
Subject: CN=676d95a8-3315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:a7:d6:77:ba:d5:9a:2c:7c:3e:61:15:24:
bd:6c:60:71:b1:a3:e3:bb:dc:45:46:31:a4:ee:c0:
ae:73:e6:80:f7:da:51:a3:82:95:29:4c:6d:ba:72:
39:46:38:73:1d:ee:37:2e:d4:fa:93:cc:74:79:f7:
5e:61:47:b6:12:68:6c:11:13:4e:ae:02:d8:70:84:
89:64:e1:7e:d8:c9:4e:8e:88:15:35:03:d2:71:9b:
e3:27:19:c8:22:fa:db:af:d1:8b:6c:43:cb:74:a4:
0d:a9:d8:a7:31:98:ca:69:f9:29:11:c7:8c:1d:3f:
ad:77:3e:34:78:85:bb:03:61:88:79:2d:65:7a:f5:
70:25:76:50:92:16:37:e9:ca:43:9f:f0:53:00:ae:
37:4d:c3:69:dc:c2:4e:f6:5d:7f:74:29:b9:85:f6:
9f:17:ca:ee:7a:c6:a9:1b:4c:9d:35:c0:d0:38:8a:
0d:bb:91:88:82:df:d2:34:88:67:a4:2e:fc:db:fe:
fc:b2:42:b9:70:e6:03:e0:03:b8:88:d5:e0:4c:a3:
61:78:c2:3f:4c:ae:16:04:49:53:d5:99:4e:fa:5a:
4e:23:26:98:d5:d4:cc:10:03:a3:36:20:b5:eb:1e:
53:42:3c:76:28:88:2c:58:7c:9c:70:ac:a8:8e:d4:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8C:E2:92:70:2F:0A:78:1A:37:3B:63:AA:36:E0:B4:90:3B:24:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBBE2A44C3B011EFA891457B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.33.0/24
Signature Algorithm: sha256WithRSAEncryption
44:19:2d:3e:6a:fc:40:72:57:00:0d:0d:8e:a8:fc:9f:f2:59:
77:5e:2f:b5:ec:33:4e:13:77:89:15:3f:d6:4f:42:1b:bb:02:
d4:05:85:75:3b:7a:33:01:61:95:a7:03:90:c2:5f:8d:7f:3f:
ec:25:4e:52:2b:ff:0b:c4:c9:85:6f:e2:2f:35:01:66:88:18:
5b:60:63:94:fd:5f:28:2e:ca:cf:58:b1:69:78:d5:f5:15:84:
d2:41:78:de:b1:a0:e6:e0:5f:92:c0:ef:8f:11:5a:76:72:eb:
3f:8b:2d:31:89:06:cc:de:d7:f8:96:e5:8a:cc:3f:ba:57:07:
a2:1a:48:a8:66:4e:c8:e0:49:85:19:03:23:9a:45:5d:bf:6d:
48:66:14:39:32:71:6a:39:9d:c6:49:fe:1d:d1:fd:54:5b:10:
29:6b:98:dd:4a:6c:77:3d:7c:fa:6a:45:11:c5:fe:43:8c:f9:
68:ee:4b:73:3a:4e:72:08:2f:79:f3:2e:31:c1:9e:e8:ee:1c:
e5:58:7a:96:4a:dc:00:a9:c5:be:bd:8d:4f:26:40:e5:7c:ef:
be:69:01:8e:8e:81:a2:e0:f7:58:82:84:b0:30:63:8d:f9:60:
6c:fc:d3:47:3c:e9:51:74:2d:0b:4f:fd:70:69:df:31:ed:f5:
b0:e3:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:02 2025 by rpki-client