Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F757118EC3B611EFB9F0F09F762E951A.roa
File: F757118EC3B611EFB9F0F09F762E951A.roa (raw, json)
Hash identifier: uKQaTDgckfzLNLeT71VrMtJxWUY87Gklk7lnlhBo+bk=
Subject key identifier: EF:5C:D9:C1:97:88:4A:B8:26:25:CA:51:D3:64:A1:3D:18:EF:68:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F757118EC3B611EFB9F0F09F762E951A.roa
Signing time: Thu 26 Dec 2024 18:26:47 +0000
ROA not before: Thu 26 Dec 2024 18:26:44 +0000
ROA not after: Sun 12 Dec 2027 18:26:44 +0000
asID: 17561
IP address blocks: 45.207.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61055 (0xee7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:26:44 2024 GMT
Not After : Dec 12 18:26:44 2027 GMT
Subject: CN=676d9fe7-555b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:00:cb:7d:24:5f:6b:67:41:32:34:26:10:
dd:72:73:c0:94:25:9f:d2:75:f5:58:54:07:6d:2d:
47:ed:2a:8e:c2:28:4c:b2:0c:c5:19:4e:94:55:17:
eb:0e:b1:9f:46:6e:5a:ba:5d:c3:ce:10:b6:ab:a4:
34:d2:90:21:7c:7d:6f:7c:de:c1:25:73:b8:b2:b6:
b4:9b:2a:7a:d8:af:7f:8b:13:da:ba:d4:7a:3e:f4:
0f:51:c3:81:51:23:b2:93:5f:4e:5a:89:27:f6:09:
26:23:d2:81:a2:b0:98:37:53:69:45:09:bf:ca:03:
05:b5:47:5e:ea:7b:79:08:73:d8:30:8b:78:e4:1a:
d9:8c:cc:a0:54:59:da:f9:ad:d9:6f:fe:7c:cc:bc:
bd:42:0b:6a:bc:f9:2d:77:96:3f:43:90:aa:45:4d:
b8:5f:5b:e4:b7:b7:4f:55:fc:37:27:18:90:ea:96:
61:cf:82:9f:4a:65:61:c8:82:17:24:4f:65:7e:07:
01:a6:01:01:09:55:34:95:27:0f:60:34:3c:04:de:
9a:42:be:f3:cf:f3:cf:b0:33:54:ba:0a:e3:fd:ee:
49:cc:1a:ed:f8:12:3f:7f:a4:14:aa:79:07:e2:14:
ac:01:57:01:b2:ca:87:a1:f7:fb:3c:37:b8:d1:a8:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5C:D9:C1:97:88:4A:B8:26:25:CA:51:D3:64:A1:3D:18:EF:68:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F757118EC3B611EFB9F0F09F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d9:7e:44:ff:46:90:e4:4c:a7:fa:2a:2d:f2:83:a3:8f:fb:
c8:00:bf:a8:5c:cf:ba:6c:f9:4a:53:45:93:0a:0e:a7:d2:ca:
be:58:eb:e7:8f:67:35:05:2e:0f:c6:dd:24:be:08:d8:c5:8a:
01:ed:19:b7:10:30:5f:1f:7f:37:63:d0:da:50:c0:12:ae:2a:
26:f0:8f:c1:a5:e8:ee:46:79:19:7b:c7:1f:1f:ed:b8:7a:69:
2d:8f:08:a8:d2:fd:cc:21:eb:00:5e:0e:f2:15:86:e8:90:1d:
7a:8d:fd:14:32:df:2d:33:29:a6:21:12:ab:00:41:70:f1:a6:
a4:28:ad:c1:2a:cc:a2:17:51:d4:eb:b7:a2:15:24:1f:fc:fe:
73:be:42:9a:6d:69:96:39:e2:13:88:ab:59:89:ec:3c:3e:59:
de:01:4a:fc:28:bd:f4:18:fa:4c:54:6e:54:51:d6:33:9d:64:
c0:92:ae:19:73:5a:3d:1b:49:36:81:06:1b:14:fc:b5:01:0e:
38:1c:f1:fe:2b:f1:65:51:64:3a:45:83:ea:2d:69:df:56:fc:
bb:dd:ac:79:99:fc:17:43:35:d3:32:e3:c8:b8:d5:9b:88:9b:
b9:fd:66:a8:0a:d9:1d:4c:f9:78:dc:3f:d7:01:36:29:96:fd:
43:e7:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:46 2025 by rpki-client