Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE36B10CC3B811EF984199AD762E951A.roa
File: EE36B10CC3B811EF984199AD762E951A.roa (raw, json)
Hash identifier: NTaKwZLytaLt8X+kpYKPVlxDe7K7xzNciJ/7wod+iP0=
Subject key identifier: 8E:95:28:C5:DA:63:C6:1F:73:3E:89:8F:04:8C:B0:C7:02:A3:E9:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE36B10CC3B811EF984199AD762E951A.roa
Signing time: Thu 26 Dec 2024 18:40:51 +0000
ROA not before: Thu 26 Dec 2024 18:40:47 +0000
ROA not after: Sun 12 Dec 2027 18:40:47 +0000
asID: 17561
IP address blocks: 45.207.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61075 (0xee93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:40:47 2024 GMT
Not After : Dec 12 18:40:47 2027 GMT
Subject: CN=676da333-2b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:56:ac:9f:75:8a:9e:b0:e7:2f:bf:ad:74:
ed:aa:b0:1e:c6:25:ea:e5:23:d6:0d:f2:90:49:34:
5e:e5:79:54:ad:cb:2b:cf:09:1f:ed:33:55:41:a1:
f8:dd:e9:22:88:88:db:17:d3:e9:da:5d:7c:79:cd:
b6:05:60:67:a1:10:42:3c:cd:85:91:91:a7:f9:8f:
5c:3f:24:e2:ae:e0:bc:0e:5b:48:45:93:8c:15:c9:
e8:48:e1:03:45:a0:a3:52:bd:fe:73:00:8b:96:1d:
f1:e9:6c:0e:96:d4:cb:cd:17:d4:54:89:4e:88:32:
93:a0:ab:74:c4:07:06:4e:95:10:6e:af:40:2a:a9:
e8:78:21:ff:db:c3:6b:84:5b:80:6f:2b:8d:76:69:
d8:ef:95:4a:52:18:c4:eb:06:c6:52:b8:b6:6c:3e:
8a:df:fb:80:63:67:e9:9c:95:22:33:6d:4a:d7:f9:
e8:bd:87:b4:1a:17:3e:7b:07:58:73:1b:5f:69:7e:
b1:fd:cb:68:93:ad:70:16:bf:90:10:7f:bd:cb:ef:
d9:f0:bd:d6:42:b8:f2:57:43:13:0c:29:88:33:81:
b1:18:93:10:cd:2e:8d:0d:b9:fc:27:e5:aa:de:ec:
04:61:b9:92:91:ef:05:2d:2b:fa:6a:f1:92:82:77:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:95:28:C5:DA:63:C6:1F:73:3E:89:8F:04:8C:B0:C7:02:A3:E9:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE36B10CC3B811EF984199AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.138.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4e:96:f6:06:90:2b:f2:91:81:0a:6f:46:8b:6f:5a:3b:aa:
e8:ea:fc:c4:00:7f:ee:7a:e0:e0:e4:cc:10:d3:a0:95:5c:13:
e7:02:bf:b8:d6:f5:8f:02:9f:c3:f9:29:b8:75:69:a7:fc:24:
d1:93:03:15:a6:77:65:3f:20:6d:ac:b9:6a:a6:f5:84:31:cb:
e9:6b:49:25:16:b4:96:13:70:f1:f0:d4:00:18:39:97:3b:cb:
ad:44:5f:53:da:75:6d:5a:57:9e:cd:52:c1:8c:d5:02:73:a7:
a1:29:78:fb:a7:37:79:e9:f5:62:ea:6e:ca:6a:b6:87:96:b4:
80:cb:b3:0e:7b:96:ad:5f:00:a7:a0:19:6f:5b:af:e6:79:49:
09:82:89:38:f1:87:c5:43:4f:fa:85:15:e9:c8:33:ec:21:04:
51:08:00:5e:3a:7d:c1:23:52:08:e8:1d:07:4a:98:13:70:9d:
b6:2a:9c:ea:1b:90:71:36:89:b2:a6:ad:06:4b:2c:b1:61:5d:
bd:ed:78:6c:6c:a2:82:dd:e7:c5:67:0b:54:fd:e9:52:72:6e:
c0:5d:9f:d8:3c:39:2f:d4:86:2e:4e:b0:f5:d2:a0:8a:71:f1:
27:b6:2b:9e:60:70:d9:93:11:13:7f:93:55:5a:1e:6a:e6:52:
ec:41:45:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:26 2025 by rpki-client