Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88000504C3B911EFBAC7D4B1762E951A.roa
File: 88000504C3B911EFBAC7D4B1762E951A.roa (raw, json)
Hash identifier: tYXoRAzoJvavv9opRKAijmg6dEAfJvlLmkgYr/SO744=
Subject key identifier: CB:BC:55:8F:36:DF:C8:93:52:D2:18:B9:CE:7A:D1:41:C6:C3:D5:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88000504C3B911EFBAC7D4B1762E951A.roa
Signing time: Thu 26 Dec 2024 18:45:09 +0000
ROA not before: Thu 26 Dec 2024 18:45:05 +0000
ROA not after: Sun 12 Dec 2027 18:45:05 +0000
asID: 17561
IP address blocks: 45.207.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61081 (0xee99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 18:45:05 2024 GMT
Not After : Dec 12 18:45:05 2027 GMT
Subject: CN=676da435-8506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ca:06:b8:7f:20:92:70:6f:25:c4:3e:4e:0b:
50:93:ce:03:5b:14:86:6b:4a:9a:e5:b6:74:eb:4b:
ae:d5:2f:53:5e:db:59:de:05:db:64:2a:d0:b1:aa:
d8:7b:16:7a:4d:8a:92:e5:d4:bc:0e:a2:52:6e:79:
60:3d:6e:86:77:3a:47:92:72:2f:d6:cb:68:b9:10:
e2:f1:15:f2:93:c0:32:38:5d:67:82:3f:50:d4:92:
c4:48:6e:ef:4b:9c:6b:22:b0:81:50:d8:67:63:2b:
ea:79:5a:b7:f4:72:a0:e2:d1:1e:4a:db:f2:2e:ca:
0c:e3:3c:64:12:6b:6a:a8:87:a0:fb:57:71:83:d8:
12:b5:d6:37:73:cb:8e:f0:55:82:08:89:7e:b1:b4:
5c:d3:d5:8a:03:a4:8c:da:10:d3:cd:58:73:25:c3:
4a:86:93:38:33:b7:17:8c:72:4c:ee:1f:a5:b9:87:
b3:5a:5d:3c:65:43:0d:af:ed:ed:6e:18:05:af:cd:
eb:bf:3b:c2:8f:b9:d0:4c:b2:e4:41:8f:25:38:2b:
53:c5:7b:f9:0a:02:51:1b:d9:c2:25:69:bd:a3:8e:
a8:f0:64:af:3e:4b:02:b6:c4:10:89:af:98:dc:4e:
a5:4f:01:70:5a:da:22:c1:1c:5c:62:29:3f:c0:6f:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BC:55:8F:36:DF:C8:93:52:D2:18:B9:CE:7A:D1:41:C6:C3:D5:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88000504C3B911EFBAC7D4B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ad:66:d6:79:12:b1:53:b8:dc:e8:81:ed:fa:d6:9f:8b:25:
c3:8c:f8:62:f7:18:13:d3:d4:26:d0:d2:d7:13:78:69:1b:4f:
5d:3c:cc:0a:ab:00:74:cc:7a:88:69:60:84:f2:36:40:8b:b5:
e2:d1:eb:99:ee:e5:e7:9c:af:84:d2:92:d5:d0:7e:bf:fe:f5:
26:e1:8f:26:01:64:57:9c:07:fb:d1:fb:42:34:73:14:15:41:
71:b5:2c:59:69:39:cb:67:93:0b:2f:71:70:58:89:aa:00:3d:
89:be:76:f8:7d:e4:a8:7f:31:ea:3a:d5:99:a5:a5:3c:e3:62:
0a:36:b1:3e:a7:ed:c6:49:fb:27:00:e2:75:ae:f0:e6:6e:f8:
77:16:28:1b:54:ab:b7:f5:be:13:79:2b:3f:de:1c:de:7c:14:
e4:fa:00:e4:62:a4:fe:c9:b0:d9:1a:83:63:73:78:a7:b3:8e:
54:5a:73:ca:cb:45:fb:5c:35:89:c0:01:14:a4:40:7e:04:ee:
a3:f7:84:ab:c8:56:9c:af:99:e2:f2:2d:2f:80:97:ea:fd:65:
18:96:c5:43:8d:9f:08:47:bb:5d:c9:2e:ad:3c:f3:c7:2b:70:
3e:a1:0d:23:6f:67:ea:b2:fa:d7:0f:71:8d:3f:32:ef:8b:a5:
80:1e:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:02:09 2025 by rpki-client on console.sobornost.net