Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B7AB3BCC3AA11EF9A03C052762E951A.roa
File: 5B7AB3BCC3AA11EF9A03C052762E951A.roa (raw, json)
Hash identifier: 3Fx60+qT8RZJLvG02XtG9ywhaJqzU/LMB4sNn04R8eo=
Subject key identifier: 3E:CB:38:B0:A1:B3:FA:7B:05:6B:52:52:5C:30:54:DE:B7:2D:55:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B7AB3BCC3AA11EF9A03C052762E951A.roa
Signing time: Thu 26 Dec 2024 16:56:32 +0000
ROA not before: Thu 26 Dec 2024 16:56:28 +0000
ROA not after: Sun 12 Dec 2027 16:56:28 +0000
asID: 17561
IP address blocks: 45.200.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60923 (0xedfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 16:56:28 2024 GMT
Not After : Dec 12 16:56:28 2027 GMT
Subject: CN=676d8ac0-a936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:55:8e:3c:bf:62:b1:60:42:b7:23:46:23:
8a:ee:7f:d6:98:9a:23:1a:9c:9c:7a:f5:a7:c5:ff:
df:c6:78:c1:88:f7:1a:bb:33:4f:59:9a:eb:fb:9c:
c4:7d:66:69:57:67:90:82:2a:15:c2:09:53:ed:cc:
27:d5:0d:a2:24:f3:d3:85:92:25:70:c9:9e:bb:ec:
f0:d2:0a:01:a1:d4:d6:0b:41:18:2c:66:1f:7b:63:
90:14:a8:d2:e1:27:be:57:27:30:ee:1f:c6:2e:8e:
6c:08:21:76:0f:1f:a6:62:b0:1f:4b:b5:d4:b2:2c:
fb:82:19:78:ca:58:5b:a2:95:98:e9:a1:ed:bc:c9:
ef:9d:89:4c:08:a1:79:20:90:e3:b3:81:98:8c:ea:
66:8f:ec:f2:e7:8b:fd:e1:14:b9:12:02:a0:39:e8:
f4:1a:59:0c:07:c8:c4:41:20:aa:f9:d7:9a:e0:35:
92:cd:e8:cf:ce:16:44:31:1f:50:00:5f:47:95:fe:
8b:dd:21:31:07:1f:07:47:c9:83:d3:d2:ee:23:9b:
30:25:e8:58:bd:77:91:f3:58:aa:b1:bb:3c:84:81:
1a:85:ea:9b:04:4b:d3:41:fd:91:8d:39:3e:77:29:
fe:60:aa:d1:95:28:dc:87:50:1e:09:bf:c6:2f:0b:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CB:38:B0:A1:B3:FA:7B:05:6B:52:52:5C:30:54:DE:B7:2D:55:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B7AB3BCC3AA11EF9A03C052762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.232.0/24
Signature Algorithm: sha256WithRSAEncryption
77:82:48:0d:fa:68:a6:1f:d5:26:0d:2e:fb:3f:bf:39:0c:5b:
0e:db:e7:a6:04:f4:56:70:f5:77:ff:ef:91:df:9f:62:4d:eb:
b9:f7:13:98:eb:38:19:55:c7:27:b0:b0:36:a9:8f:9b:dd:c7:
f2:d0:99:59:63:d8:14:2d:ba:f5:a4:cf:7d:a2:e3:12:8d:ee:
4e:61:97:3a:b7:c9:cb:9d:2e:19:74:d1:3c:fe:f2:00:02:76:
11:df:bd:62:2d:f8:50:1c:0d:43:cb:e1:51:f2:66:10:f5:45:
3e:3b:e9:41:6c:4a:c7:76:b2:ee:13:bc:f8:6d:c1:7e:26:b8:
4c:c1:da:48:21:54:e5:2c:05:91:5c:39:e0:11:52:a4:85:58:
de:bb:cf:28:6c:a9:27:ba:3c:08:1e:6c:c5:29:df:67:0a:31:
60:ed:51:af:f0:fc:4f:34:f0:cc:02:b7:13:42:dd:78:6c:8a:
6b:bf:7f:98:97:21:ea:fb:ae:25:c8:2b:0d:2c:c7:5f:9d:92:
d3:16:96:5b:2d:5e:5e:ce:c6:9b:eb:3f:3f:05:7f:0b:01:34:
9a:d6:be:a7:80:0c:8a:97:aa:20:8b:8d:eb:12:83:73:e0:e5:
00:75:cb:88:03:ca:ae:fd:d9:17:8c:d0:84:d0:be:79:0a:d5:
cc:f6:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:58:03 2025 by rpki-client