Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88AB27A0C3B811EF99FC71AB762E951A.roa
File: 88AB27A0C3B811EF99FC71AB762E951A.roa (raw, json)
Hash identifier: kAfKJg3UsUNLBpfuSOylwVx7EzXa8rNFg5bVF0NHUYc=
Subject key identifier: 6F:D4:B7:56:6D:3C:EC:1E:49:12:5D:2B:5B:DE:62:47:A3:28:A5:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88AB27A0C3B811EF99FC71AB762E951A.roa
Signing time: Thu 26 Dec 2024 18:38:01 +0000
ROA not before: Thu 26 Dec 2024 18:37:57 +0000
ROA not after: Sun 12 Dec 2027 18:37:57 +0000
asID: 17561
IP address blocks: 45.207.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61071 (0xee8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 18:37:57 2024 GMT
Not After : Dec 12 18:37:57 2027 GMT
Subject: CN=676da288-e865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:f3:2c:ec:bb:7b:29:1d:e5:9c:9d:18:47:
a3:c0:dc:3a:c3:52:10:6b:8e:50:61:f4:7d:b0:57:
18:dc:8e:83:c2:99:c8:6b:30:05:0a:95:dc:36:fb:
ef:ab:99:97:33:bb:e5:23:6f:3a:91:de:9a:a2:cd:
4b:47:da:d3:5e:26:ad:b5:2b:bb:e6:10:dd:ae:73:
ed:05:16:4a:b7:84:44:b5:8c:b7:08:e7:af:ee:ff:
d9:7c:5b:89:77:35:4f:ba:10:83:e5:0c:0a:41:68:
ad:d9:fc:8c:c9:8e:d9:8c:d3:9f:84:26:88:e3:90:
fd:ea:70:19:fe:bb:44:05:d9:9c:6a:3a:8d:db:fe:
b4:a4:ed:e7:d6:f4:15:f2:33:4c:4f:87:80:f0:77:
ef:db:03:a1:e7:35:71:7d:09:53:73:59:f1:41:10:
9b:f2:13:b6:23:d0:4c:f1:c7:84:64:d9:32:01:5b:
e1:a6:c2:64:17:b1:16:04:65:14:8a:db:61:39:9b:
f1:0c:ed:9e:d6:71:22:c1:96:4f:3c:02:66:99:66:
25:d7:57:d4:a1:61:d9:cf:89:7e:c6:e8:85:95:f7:
4f:57:30:07:67:b3:af:0c:96:75:98:21:6e:2f:b4:
b8:7a:7d:d7:97:9d:3e:9f:c9:4a:8b:37:2f:9f:f4:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:B7:56:6D:3C:EC:1E:49:12:5D:2B:5B:DE:62:47:A3:28:A5:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88AB27A0C3B811EF99FC71AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.136.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f3:05:dc:ce:06:f1:f8:d7:22:c6:ad:0f:56:17:67:7e:a5:
1e:e2:c3:12:1f:4f:5d:85:90:0e:71:81:ad:38:9d:39:c6:fa:
cc:0a:75:1c:00:ff:d6:f1:de:fa:80:ad:97:a1:75:fb:a4:da:
bb:2d:d5:d4:d9:ec:2e:8c:e8:0c:31:24:71:e5:7d:98:84:f1:
5c:c7:66:ea:3a:bd:76:46:51:cf:b7:36:1a:b2:d1:b5:8b:70:
51:ee:7d:07:4a:9c:c2:e5:f4:75:98:aa:b5:68:9f:64:2e:e1:
98:62:8f:d6:75:a3:b6:a8:31:31:50:5a:54:f1:a4:3e:42:ba:
c5:55:6f:b5:6d:2d:fa:d9:f6:fc:6f:ed:cd:6f:f1:16:76:2b:
de:a2:12:d6:6e:46:b4:21:b1:ec:57:81:28:5f:9e:15:79:e8:
79:a3:43:55:98:20:68:1b:1e:4b:1b:86:fa:6a:a0:a8:cf:5a:
04:48:6a:54:eb:9b:61:10:29:17:de:65:a8:d0:b7:96:a5:22:
2b:9a:7b:45:29:d5:3f:4c:6a:65:6b:c1:89:57:38:bb:89:c4:
58:30:4c:aa:11:0a:d3:f8:87:a1:2e:3e:8f:ed:e7:60:92:21:
35:e1:95:47:2d:60:57:16:b8:4b:8a:13:63:0e:34:20:11:3d:
be:48:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:26:39 2025 by rpki-client