Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E08D400EC3BB11EF90D814BF762E951A.roa
File: E08D400EC3BB11EF90D814BF762E951A.roa (raw, json)
Hash identifier: kl+AiPk/qEi79eC6IwpRmg1RI5ITDCCkLH8vVdml4qM=
Subject key identifier: 0C:FF:EA:69:B6:90:97:68:ED:3B:F2:1A:7D:D5:A6:DA:BB:CB:63:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E08D400EC3BB11EF90D814BF762E951A.roa
Signing time: Thu 26 Dec 2024 19:01:57 +0000
ROA not before: Thu 26 Dec 2024 19:01:53 +0000
ROA not after: Sun 12 Dec 2027 19:01:53 +0000
asID: 17561
IP address blocks: 45.207.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61105 (0xeeb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 19:01:53 2024 GMT
Not After : Dec 12 19:01:53 2027 GMT
Subject: CN=676da824-4728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:98:49:19:ed:5e:09:ff:25:fb:50:b8:73:
f4:e8:24:88:10:33:b0:c4:54:3e:81:20:5c:2b:77:
11:38:a2:f8:eb:d3:a7:9b:70:67:27:44:76:d3:5b:
6c:81:54:1f:39:7d:e0:ab:e8:47:00:e4:8f:a2:1b:
73:5b:61:9a:e0:28:e6:6c:b6:87:6b:1d:1c:dc:ef:
96:85:bd:86:17:bc:01:64:29:19:19:9a:29:6d:1c:
e4:72:67:59:9e:d0:1f:2d:24:f1:84:9b:9e:bf:7b:
14:2c:5e:d0:a2:1f:10:da:4e:ea:5a:ee:ec:bc:b4:
92:40:ad:ca:50:37:3f:57:f1:cb:53:21:ef:07:c9:
15:8c:a9:fc:7c:82:5b:03:44:aa:32:99:99:fd:81:
1d:e8:14:64:96:a8:9d:2c:28:84:8a:28:bd:80:3c:
58:4e:34:85:40:87:71:af:f0:7a:09:ea:39:48:6e:
cf:1c:af:4f:22:cf:23:06:ee:d8:4a:2d:30:63:43:
e4:09:de:0c:3b:a5:f6:8f:2e:ed:ec:f0:e0:fe:6f:
e7:38:a6:a5:bb:5a:40:7b:75:52:e4:01:bd:0e:c9:
91:7b:61:6e:f8:a4:8e:ce:31:0f:a6:58:21:ef:1a:
08:46:ab:29:70:83:54:1e:5e:c6:53:f7:10:3f:9d:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FF:EA:69:B6:90:97:68:ED:3B:F2:1A:7D:D5:A6:DA:BB:CB:63:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E08D400EC3BB11EF90D814BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.153.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ee:e1:1d:cb:c7:0e:91:07:d0:86:f9:7f:b5:c7:02:93:9b:
76:e7:15:5a:76:79:a2:54:91:e3:7c:fe:73:59:3a:80:ff:f4:
df:58:cb:7c:1b:a5:f0:ac:fb:5e:16:7e:c6:38:c8:32:eb:e6:
6d:f5:96:bc:db:7f:03:2e:ca:a9:4d:f5:ab:63:24:c6:c6:ed:
0c:49:13:94:6f:ae:8c:5b:a9:82:65:a3:68:d5:6d:a3:e1:4b:
6c:09:84:97:89:d5:51:7c:fa:25:03:64:04:2f:95:d2:d1:55:
23:2c:26:1a:24:97:00:0a:85:8a:58:e0:22:33:fa:fb:fa:b1:
87:d9:35:22:0c:46:0b:f1:16:85:b2:98:43:b6:47:7c:36:5d:
8e:9f:40:07:a6:93:13:47:63:40:ac:6b:6e:64:33:82:11:7b:
6e:53:52:63:23:d2:bc:1a:ac:ae:7a:84:41:2c:75:f9:76:aa:
2e:0d:36:b2:63:09:a7:3d:21:88:5f:b5:bc:46:9b:e9:26:ce:
ab:5c:5f:b1:d5:3f:34:ba:7b:f1:78:10:e5:bf:7d:20:b8:64:
61:f6:22:fa:9b:24:48:78:4b:a9:cd:6b:35:93:f9:eb:38:c2:
0b:89:b2:4c:64:ca:3d:19:cf:e0:1a:6c:70:94:06:58:b6:b7:
66:96:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:45 2025 by rpki-client