Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E864D716C3BA11EFB1D625BA762E951A.roa
File: E864D716C3BA11EFB1D625BA762E951A.roa (raw, json)
Hash identifier: bRS/SUBhzWWNSroqU33L5NXwUrS1jFpel0NvhtKv7K8=
Subject key identifier: BA:AC:FD:ED:E1:B1:D3:80:7B:EA:76:C2:D9:21:61:56:4C:F0:B2:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E864D716C3BA11EFB1D625BA762E951A.roa
Signing time: Thu 26 Dec 2024 18:55:00 +0000
ROA not before: Thu 26 Dec 2024 18:54:56 +0000
ROA not after: Sun 12 Dec 2027 18:54:56 +0000
asID: 17561
IP address blocks: 45.207.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61095 (0xeea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:54:56 2024 GMT
Not After : Dec 12 18:54:56 2027 GMT
Subject: CN=676da684-208b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:a9:01:ae:e9:b7:8b:cd:01:6a:b7:d0:1f:
5a:35:f6:06:c4:24:9d:a3:e3:f5:b2:9e:88:8d:86:
b9:17:1b:4d:77:8c:89:92:56:25:7c:ac:36:6b:54:
b3:a8:d2:4f:a3:73:01:8a:dc:73:46:32:82:53:19:
7a:7d:1b:84:97:f4:b7:96:37:c9:20:47:ab:b7:44:
0b:69:e3:3b:9e:cb:f5:98:1f:2d:9c:ea:98:23:ef:
15:ff:8d:d1:f7:c8:79:ca:6b:ac:93:73:8e:69:1f:
a8:ed:49:cd:c4:d8:36:f4:64:2e:a0:d3:94:e8:9d:
df:39:7b:83:33:52:d8:19:ef:10:74:4c:51:74:57:
20:fc:b2:24:ea:d5:6e:07:bf:17:84:67:c8:91:82:
89:d2:fa:ca:f4:a2:44:f6:ae:2d:73:61:ab:f0:c4:
d3:15:b8:1d:48:c2:f0:bf:f2:22:8d:48:10:99:1e:
97:aa:c5:5e:85:58:0b:38:e4:22:37:12:69:08:b3:
cf:89:ed:01:d9:f6:d1:b6:00:64:6b:9e:46:1f:f3:
39:71:59:64:9c:e7:92:53:f3:65:56:c0:39:d8:bd:
f7:41:31:fb:87:b0:11:65:e5:d2:2e:c6:56:22:37:
0d:33:94:94:c5:b1:58:be:96:51:bc:c3:33:88:cd:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AC:FD:ED:E1:B1:D3:80:7B:EA:76:C2:D9:21:61:56:4C:F0:B2:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E864D716C3BA11EFB1D625BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7d:3e:30:d1:99:04:b3:58:e9:06:c8:aa:89:2c:b5:f4:8b:
25:8f:bb:11:97:fb:96:68:88:b9:70:89:14:6b:7d:17:7b:a4:
1e:3e:c7:ed:09:3b:3a:15:38:58:e9:42:60:a4:eb:02:9a:5d:
11:91:02:2a:43:10:fa:e1:ba:92:27:94:74:a2:fa:e6:16:f8:
dc:a0:74:dc:d7:07:d5:4d:1b:ea:b6:7f:cb:d4:f4:a9:0c:33:
5f:93:08:70:5a:71:70:26:be:14:c2:55:dc:a6:3b:b7:fc:ea:
72:a0:7a:cf:3c:3d:08:a2:8c:1b:a7:a0:33:e4:d6:04:fb:c6:
f7:1c:5a:9f:f6:da:e1:a5:36:59:f1:0e:41:67:06:e7:b6:ea:
99:9d:20:43:e4:9e:df:ca:c0:48:a2:2f:43:17:47:29:2b:b5:
f8:38:04:f7:99:d3:74:a2:ad:63:db:6b:bb:9b:d4:ec:e8:cb:
e9:7a:bb:99:a1:f2:97:8b:ba:83:b4:e1:6b:53:6a:76:91:34:
7e:8a:fa:8a:c6:a0:20:f7:7a:f2:3a:5f:0c:c5:80:4a:0b:cf:
3d:32:02:d4:96:b2:bc:73:b2:53:e6:3b:a9:c6:b6:f8:30:c0:
ac:3f:9b:56:e2:43:98:8e:93:f0:db:3a:d9:81:d2:63:fb:b9:
f3:56:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:24 2025 by rpki-client