Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02193D28C3ED11EF84D79875762E951A.roa
File: 02193D28C3ED11EF84D79875762E951A.roa (raw, json)
Hash identifier: Z/kpdDI1Ni9/on6S05G1B6ZRYlycjcNT1jC0eDwLQAc=
Subject key identifier: 61:11:94:A4:51:DF:E1:B0:38:C1:A0:98:CE:65:4B:4C:F3:13:5F:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02193D28C3ED11EF84D79875762E951A.roa
Signing time: Fri 27 Dec 2024 00:53:38 +0000
ROA not before: Fri 27 Dec 2024 00:00:34 +0000
ROA not after: Sun 12 Dec 2027 00:00:34 +0000
asID: 17561
IP address blocks: 45.192.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61221 (0xef25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 00:00:34 2024 GMT
Not After : Dec 12 00:00:34 2027 GMT
Subject: CN=676dfa92-12a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:f4:21:c3:92:3b:0f:d0:27:dd:b9:df:7e:
3c:64:e3:fd:a4:cb:bf:f4:96:c4:6e:77:b4:33:c7:
e4:10:d5:20:bf:7a:88:08:c0:80:97:9c:6b:4b:11:
16:68:dc:4e:0e:a2:ef:e1:dc:32:7a:da:d2:aa:0d:
47:af:01:32:3b:19:14:dc:a7:f5:6b:85:90:cf:ee:
38:1f:75:88:f6:78:f5:be:2f:99:3a:20:da:bc:bc:
1e:81:a3:5f:7e:ef:47:9f:0f:5d:2f:b6:16:7a:93:
91:7e:45:e0:63:64:59:1f:5f:42:ec:59:02:78:33:
e8:c3:26:44:f0:cd:05:3d:57:0a:ff:ce:9a:dd:67:
6e:e2:66:b6:23:8e:c2:ad:04:a0:fc:d5:ca:9d:a2:
56:ea:e2:08:be:27:bd:13:61:2f:5b:39:6e:14:54:
c6:d4:36:5e:1d:5d:2d:43:68:a9:25:32:8f:ff:18:
97:27:c6:5c:ed:76:c9:d0:d8:d3:a9:f2:ed:a1:c3:
b6:02:7f:38:0c:38:64:d6:5b:04:1d:1b:de:51:87:
98:1b:c7:00:eb:13:08:dd:bd:7c:0f:fd:40:2e:fe:
9e:75:42:2f:49:42:36:4c:10:73:5e:7b:61:b2:4f:
78:5b:1e:c8:3a:80:7d:89:2b:9c:f1:6e:49:19:5e:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:94:A4:51:DF:E1:B0:38:C1:A0:98:CE:65:4B:4C:F3:13:5F:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02193D28C3ED11EF84D79875762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:05:cc:b2:1c:5c:cb:da:5b:3c:75:c5:fa:94:22:89:57:60:
05:d9:cf:d0:54:0b:67:c4:f1:b8:91:f5:2d:16:6c:0c:01:bc:
57:19:03:ee:27:bb:65:0c:91:22:91:e6:58:9d:59:a4:23:38:
fa:57:5d:74:bf:23:f2:8b:98:6a:f9:3a:bc:7b:d9:88:0f:1c:
c2:0a:c2:ab:91:c9:e0:c9:34:24:01:e5:86:39:1f:1d:1d:cc:
09:be:e3:35:1b:10:24:dc:fc:6a:da:2a:89:85:01:3d:92:7c:
03:6c:69:2c:93:0f:59:b1:54:57:d5:31:47:32:4b:98:79:3b:
6a:59:f6:ef:f0:4f:45:70:3a:86:ef:a9:04:da:a3:e3:1c:88:
5a:d9:e5:64:41:03:38:3d:22:30:b6:eb:9e:ba:1f:e5:d7:fc:
b1:27:34:c8:26:56:8f:23:04:4c:b2:8e:c7:88:7d:82:31:11:
b1:3b:b7:ec:a6:18:1b:95:1f:4a:12:7a:67:e5:2c:60:f7:fc:
cb:73:2e:2e:7b:40:af:5b:a8:69:8e:5c:70:36:7c:67:cd:61:
bc:cc:fa:0c:10:6c:91:77:6e:1e:06:68:6f:f2:88:74:e2:1a:
17:ae:bc:ba:1a:f6:28:55:d2:02:62:51:13:ec:9f:13:7f:ba:
6c:15:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:32 2025 by rpki-client