Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC9AAB34C3C111EFB543D966762E951A.roa
File: DC9AAB34C3C111EFB543D966762E951A.roa (raw, json)
Hash identifier: r51T62npUWDhj6TGdKoO+YqVk/OVNgx/vWB6B2INOkg=
Subject key identifier: 6B:64:30:1C:2D:89:CF:46:F4:AA:19:A1:5D:64:46:26:05:D9:CE:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC9AAB34C3C111EFB543D966762E951A.roa
Signing time: Thu 26 Dec 2024 19:44:47 +0000
ROA not before: Thu 26 Dec 2024 19:44:43 +0000
ROA not after: Sun 12 Dec 2027 19:44:43 +0000
asID: 17561
IP address blocks: 45.207.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61167 (0xeeef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 19:44:43 2024 GMT
Not After : Dec 12 19:44:43 2027 GMT
Subject: CN=676db22f-7a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:f8:f5:ea:57:c1:e9:40:93:d2:0d:a3:24:
70:2a:39:0e:90:14:3d:2b:a4:92:65:8d:0d:ee:71:
e8:94:f1:8e:ac:3e:38:d1:05:18:7b:cd:aa:c5:35:
d0:f6:62:b7:e3:a2:ab:f9:5c:d6:1c:14:b0:f0:b6:
e7:fc:d0:39:35:c5:c8:a8:41:01:57:1a:c0:1e:e0:
c0:55:93:a4:3a:06:d1:00:86:52:d4:99:4c:ea:fb:
f0:91:3c:76:10:13:9d:18:10:b9:1a:ff:79:14:4a:
90:e4:9f:47:a8:7f:22:76:70:f0:f9:0e:48:53:00:
3c:3f:dd:1a:fd:3a:6d:71:6f:47:e1:64:97:7e:26:
d1:86:1c:2a:07:59:21:76:dd:58:f9:d1:49:9d:c4:
c2:1c:4f:ea:f5:51:1d:5f:c1:51:e3:06:b7:ad:12:
28:22:c1:e7:4c:c5:ae:36:cf:86:26:5c:a1:5f:9e:
a5:d7:82:89:5d:50:3b:12:d9:8b:8d:4e:37:a7:90:
1f:93:0e:3c:a1:ec:19:35:0f:2d:f2:cb:94:b8:7e:
48:b9:95:35:7a:0d:14:d1:d7:bf:df:f8:48:0a:dd:
89:e6:70:6e:5f:57:d7:4e:77:96:2f:ac:6a:72:3d:
ce:24:fb:29:19:bf:6f:90:3f:51:70:8e:40:65:17:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:64:30:1C:2D:89:CF:46:F4:AA:19:A1:5D:64:46:26:05:D9:CE:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC9AAB34C3C111EFB543D966762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.191.0/24
Signature Algorithm: sha256WithRSAEncryption
27:82:f1:1e:f6:f8:c9:71:cb:e2:fe:7d:bf:20:6a:44:91:6a:
df:0f:4c:65:a9:31:81:ea:bf:ac:44:ba:0c:c3:1e:5f:4f:81:
0d:99:70:8c:d3:e7:1b:60:cb:cf:e8:c8:a5:87:56:53:f1:cc:
db:c3:72:c8:8e:4a:2d:56:ea:e8:9d:d0:1b:0f:4d:31:bb:6a:
52:df:94:a3:1a:c9:f9:88:aa:82:cb:cb:de:e9:7f:1c:4a:a0:
bc:d4:9f:2c:95:8d:5c:3c:44:10:0d:7b:b9:b2:48:94:c8:13:
88:a0:a6:e8:67:8a:45:8f:79:36:d0:b5:5e:fd:18:40:f4:1d:
61:02:64:ab:12:3e:08:6d:07:f4:31:24:60:d0:0b:33:b4:32:
fe:36:02:e2:eb:93:7e:86:77:44:05:8f:e6:f2:c3:b3:a8:a7:
3f:4f:92:ea:56:81:cb:09:6f:b8:83:b7:80:36:ed:8f:0b:20:
0d:f7:8f:90:d3:99:ad:58:9d:b7:ea:6d:98:a2:47:83:21:39:
bf:60:df:62:16:a4:ca:a6:be:42:8e:08:d6:d9:1b:b4:c1:1f:
e8:e2:7e:76:18:61:a6:61:ce:3a:35:c7:36:ba:c9:5b:10:46:
fd:37:30:4b:e7:c1:2a:26:88:47:b9:ed:9f:84:a0:89:3a:13:
fd:4f:63:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:38 2025 by rpki-client