Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC4B8830C3AA11EF8A72D656762E951A.roa
File: EC4B8830C3AA11EF8A72D656762E951A.roa (raw, json)
Hash identifier: KDkOTgl7BjMDnzJgsqzQlrWUg9L4+2VilpCSC81yYek=
Subject key identifier: 37:07:1D:60:9B:D9:AF:E2:A4:B1:9E:45:B2:D0:6F:F6:7A:2C:BD:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC4B8830C3AA11EF8A72D656762E951A.roa
Signing time: Thu 26 Dec 2024 17:00:35 +0000
ROA not before: Thu 26 Dec 2024 17:00:31 +0000
ROA not after: Sun 12 Dec 2027 17:00:31 +0000
asID: 17561
IP address blocks: 45.200.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60929 (0xee01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:00:31 2024 GMT
Not After : Dec 12 17:00:31 2027 GMT
Subject: CN=676d8bb3-bb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:30:be:f8:0b:7d:cc:49:98:a4:4e:39:9f:
fe:d2:07:f5:97:ad:b5:18:a2:ee:d3:69:44:cb:07:
e7:18:61:ed:dd:a9:86:b5:0e:bf:a8:87:dd:34:ad:
9a:dc:b5:c6:dd:84:8b:ee:15:64:bd:1f:e0:fb:55:
89:67:e1:0f:0c:85:c6:d1:80:61:db:19:4f:13:54:
44:5b:fe:5a:ac:92:a0:f0:f5:de:53:6e:56:54:d7:
db:4a:90:75:01:bc:73:de:a1:93:f4:82:71:0a:ef:
60:33:3a:c6:ab:c8:6f:61:81:8b:df:4a:b0:7b:64:
22:01:e0:a4:3b:5c:94:db:21:21:d6:69:fc:45:3d:
83:f1:04:8e:de:82:ff:cd:df:93:91:18:b7:c4:1a:
35:9d:49:4e:ef:d1:07:20:06:31:97:76:d0:2f:37:
19:02:f2:09:6d:6d:7c:7f:61:38:8f:93:63:af:95:
03:93:13:5e:6b:bd:91:fa:1d:92:28:33:f5:c4:4f:
00:91:2b:a0:03:1e:4c:cb:a9:3a:c8:a8:e7:cd:16:
21:47:0c:a6:b3:22:8d:21:8b:76:b6:f7:90:70:5b:
93:09:ae:3b:ae:82:31:cd:73:b5:d4:2c:19:48:e6:
b2:c2:3e:a1:c5:1c:ef:5c:4f:95:77:67:95:ec:04:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:1D:60:9B:D9:AF:E2:A4:B1:9E:45:B2:D0:6F:F6:7A:2C:BD:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC4B8830C3AA11EF8A72D656762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.235.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c8:05:82:15:4f:80:80:3c:87:8a:59:0d:c1:78:eb:66:e5:
4e:49:fc:eb:ce:d9:8c:5d:96:6d:db:0a:08:51:bb:3f:e1:d0:
75:4c:44:8e:bd:67:de:0f:46:13:10:fb:10:9b:c3:25:a5:07:
4e:12:4d:49:59:06:ed:98:5e:a3:02:c4:98:d6:7b:30:a5:0b:
87:70:d3:3a:be:7f:26:53:96:ec:3c:c7:4c:f2:55:3a:9a:2d:
08:24:08:d1:88:5f:32:7f:af:80:40:53:8f:c1:45:c2:54:70:
01:1a:4c:3a:cc:6a:cb:0b:9b:6a:26:37:ae:3f:8f:1d:c5:f2:
80:64:e4:80:97:82:df:6e:2b:13:9f:d4:51:1c:23:70:66:ce:
63:52:56:d5:94:46:03:a7:73:35:62:6b:9c:06:5d:af:9c:65:
a8:f7:3d:5d:38:1b:8e:2d:18:a3:ad:39:63:09:56:4d:62:54:
ee:cc:9a:29:e2:ee:a5:f1:4a:2e:30:c9:60:4d:e2:11:c4:35:
a0:3c:e9:0f:df:3c:ad:5b:1d:ff:b1:e7:6f:94:48:4a:d3:4e:
b2:8a:ec:d7:4c:0d:9d:89:c4:15:da:28:87:57:97:59:55:0a:
fc:f6:d0:5d:1f:aa:da:2b:8a:2a:d8:57:b6:bd:49:24:8e:e6:
72:3c:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:42 2025 by rpki-client