Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3DB225AC3E111EFBEE912AE762E951A.roa
File: E3DB225AC3E111EFBEE912AE762E951A.roa (raw, json)
Hash identifier: 57XU0PM2wOmF95CsmPR0tfDd0yXbTdiiNAnuY6KNNuk=
Subject key identifier: 1C:4F:A0:C6:85:2F:0C:12:1D:D7:F3:C8:F4:FA:89:A4:95:02:B0:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3DB225AC3E111EFBEE912AE762E951A.roa
Signing time: Thu 26 Dec 2024 23:34:03 +0000
ROA not before: Thu 26 Dec 2024 23:33:59 +0000
ROA not after: Sun 12 Dec 2027 23:33:59 +0000
asID: 17561
IP address blocks: 45.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61183 (0xeeff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 23:33:59 2024 GMT
Not After : Dec 12 23:33:59 2027 GMT
Subject: CN=676de7eb-f8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:56:bd:66:df:e6:80:ba:ea:5e:38:be:1b:
94:dc:57:01:ad:cd:38:06:d4:3e:f4:ac:7d:93:34:
e0:c5:0c:59:ff:e2:1e:b9:04:71:96:a3:68:0b:2d:
76:eb:73:89:33:85:bd:cd:9b:cb:28:0b:bb:12:e9:
64:e8:04:2c:3e:d5:c9:e0:8b:fd:29:a6:04:35:09:
70:5c:e6:af:aa:6f:12:75:11:4b:57:67:fa:20:34:
89:47:dc:83:b6:20:7e:ab:f7:3e:5f:75:5d:a9:91:
bd:b3:8d:4d:8c:59:86:15:d3:5d:db:88:2d:fe:3d:
c2:12:5e:ea:e4:c7:bf:05:10:ac:13:ba:4f:da:47:
f4:ff:c6:af:fb:0a:1c:5e:78:09:7a:06:63:44:46:
13:38:3f:fc:12:aa:07:83:a5:f1:91:0b:b4:ef:fc:
25:7f:0b:9f:5b:2e:30:00:18:f1:03:87:2e:55:7e:
42:e6:39:c5:91:33:87:4b:6d:83:df:31:cc:ad:20:
5c:7b:6d:81:3f:4b:98:fe:77:49:d8:44:ad:1d:49:
46:43:0c:7b:b7:fb:2e:6e:dc:9d:2f:40:76:88:37:
5c:5f:88:95:d2:20:93:a3:f9:28:64:64:8f:f4:67:
74:62:1f:0f:88:f0:70:65:e7:33:69:e3:d3:49:49:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4F:A0:C6:85:2F:0C:12:1D:D7:F3:C8:F4:FA:89:A4:95:02:B0:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3DB225AC3E111EFBEE912AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:81:3a:cf:aa:fd:11:cb:50:f6:ce:c9:b5:fd:76:9c:67:5e:
5b:34:ae:82:b4:ac:89:d8:83:c4:32:06:9c:97:08:28:a3:8c:
cb:85:e6:bc:95:07:bf:0e:36:59:7b:56:f8:58:4d:77:af:fd:
06:1f:7a:da:cd:e9:7e:26:97:8d:66:b3:ec:26:26:5c:49:39:
46:a7:ed:49:c2:9b:f3:6d:76:a0:cd:38:fe:78:c2:53:f4:f0:
2e:77:54:c3:16:fc:08:ef:88:c4:63:1b:f7:4b:e1:ba:ab:32:
72:db:ab:0d:f8:d4:ec:f9:61:03:8a:31:b3:63:5c:05:bc:d2:
7e:c3:2d:63:4a:66:e0:de:0a:4c:08:a7:58:ae:dc:62:33:f5:
b0:4b:1c:e9:6e:21:89:56:5d:cd:5a:d5:9d:48:bf:aa:e7:e5:
13:bd:ec:2b:3c:53:af:61:38:66:88:8d:15:c2:50:76:80:40:
9a:9e:5f:c2:37:62:ea:a7:25:aa:8a:90:6c:5c:a1:25:9e:9b:
07:b4:14:29:99:36:20:1f:d5:63:5a:87:e1:ad:ef:e9:4d:d4:
3e:89:65:27:5f:6f:3c:b1:8f:d2:a0:59:d1:52:bb:84:99:a1:
1b:5b:55:74:c3:cd:17:08:d7:57:6a:c2:03:af:1f:c0:67:50:
4e:1b:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:51 2025 by rpki-client