Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/029AF82CC3B611EFBBA4269B762E951A.roa
File: 029AF82CC3B611EFBBA4269B762E951A.roa (raw, json)
Hash identifier: lcq/Qtm5VK9z1caD+/yzeY9F1BDUOMUxigpE7y7OWTU=
Subject key identifier: B7:27:5D:6C:31:B7:74:A4:48:F3:58:BC:0F:CD:A8:22:06:AC:8D:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/029AF82CC3B611EFBBA4269B762E951A.roa
Signing time: Thu 26 Dec 2024 18:19:57 +0000
ROA not before: Thu 26 Dec 2024 18:19:53 +0000
ROA not after: Fri 12 Dec 2025 18:19:53 +0000
asID: 984
IP address blocks: 45.207.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61045 (0xee75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:19:53 2024 GMT
Not After : Dec 12 18:19:53 2025 GMT
Subject: CN=676d9e4d-0ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:d9:f3:28:a3:7b:92:d1:32:4e:e7:2d:ae:
ee:c2:38:01:34:f3:bd:4a:bc:b7:a1:93:30:01:96:
a2:e7:8f:82:bd:ed:40:b1:79:b0:6c:7c:72:84:17:
09:eb:61:52:04:c2:ea:fe:31:e7:b0:db:6f:ef:2b:
1b:d2:1b:d0:a8:ea:2e:10:30:dd:dc:83:d4:d0:b0:
3f:2a:c0:7d:8a:a2:88:b6:46:09:df:96:6d:60:59:
eb:a1:6b:ba:22:dc:03:69:2b:a0:be:0d:a3:27:c4:
dc:10:1a:81:b8:b1:87:f0:cd:89:64:15:4e:19:f3:
65:e1:d1:ef:2c:c8:0a:11:1a:a5:3b:fa:9d:a7:36:
83:e6:05:67:71:32:d8:2d:e4:2b:49:28:6f:59:f1:
31:9f:04:f8:57:b6:10:a2:c9:ee:d5:b7:5f:44:41:
7d:9f:20:5b:e4:5b:3c:4b:2c:47:c3:8a:17:ee:fa:
13:b0:1b:08:50:c6:6d:02:04:3f:b0:1a:e7:28:b5:
64:d0:41:43:08:bb:a9:ee:49:f0:6a:1e:91:e1:e4:
69:86:fe:e8:af:83:54:64:8c:be:9c:af:ec:db:95:
57:f7:36:55:09:b2:e1:9b:33:e6:fc:38:bc:8e:1f:
6e:75:05:8b:65:04:02:42:68:a0:e6:0a:b9:42:a3:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:27:5D:6C:31:B7:74:A4:48:F3:58:BC:0F:CD:A8:22:06:AC:8D:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/029AF82CC3B611EFBBA4269B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.23.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fe:53:ff:2d:19:94:97:b9:5e:a8:1c:c1:a2:5b:fd:06:ae:
10:ba:ce:5f:c5:42:e4:ac:7e:ac:67:04:32:e6:7a:61:9b:c4:
bb:71:73:2e:d4:24:b1:68:30:1b:dc:8c:29:06:7d:fc:62:82:
10:08:06:92:fb:e4:a7:c1:41:da:f3:97:e2:f0:b6:fe:9e:c6:
53:85:b4:24:3f:7e:31:1f:3f:d5:d5:8d:da:5d:92:87:3f:f9:
df:d5:a3:11:08:a1:56:70:58:70:a4:f0:b3:d5:c5:55:50:e2:
f4:cb:fb:a3:8e:b9:e0:d0:ce:51:b1:a9:04:f2:7e:9d:f8:7f:
77:28:16:cb:bb:dc:63:4d:ed:a6:3b:58:87:04:67:1d:6c:5e:
e0:a4:38:b5:2a:b9:ba:0a:a4:5b:f6:e8:25:0b:2d:e4:1d:e6:
52:18:f8:d7:31:22:e4:a5:67:31:77:de:6c:fd:70:04:51:b7:
bd:c6:b2:f7:9a:1d:9b:52:2c:72:25:f2:75:b8:a0:76:34:05:
21:b5:fa:cd:57:9c:34:f1:c2:5c:e6:35:43:cf:40:0a:a5:a5:
ee:c2:9e:8b:0f:ea:23:7d:bb:2e:62:8f:76:ed:87:48:d9:5a:
09:1c:2d:16:3b:82:d4:1c:68:a1:2b:bd:19:0a:09:42:7d:4c:
c6:0f:8f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:05 2025 by rpki-client