Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A02FD3EC3AD11EF9E98C563762E951A.roa
File: 0A02FD3EC3AD11EF9E98C563762E951A.roa (raw, json)
Hash identifier: OWnI+APfY2UlyoA6eR36/OYyj48O/q+2874tp/EHO54=
Subject key identifier: EE:52:65:E7:63:72:76:4A:06:7E:52:2D:A2:57:48:0D:0D:30:20:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A02FD3EC3AD11EF9E98C563762E951A.roa
Signing time: Thu 26 Dec 2024 17:15:44 +0000
ROA not before: Thu 26 Dec 2024 17:15:40 +0000
ROA not after: Sun 12 Dec 2027 17:15:40 +0000
asID: 17561
IP address blocks: 45.200.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60951 (0xee17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:15:40 2024 GMT
Not After : Dec 12 17:15:40 2027 GMT
Subject: CN=676d8f40-0fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:72:5f:64:d8:9a:26:76:27:8a:77:6e:87:19:
18:38:6c:de:8a:48:92:a2:9f:28:35:46:b3:e8:7b:
ef:22:5e:0d:5f:c9:55:e2:5e:6f:d2:2d:79:33:95:
21:26:84:f2:02:34:c9:44:57:43:49:ce:8d:ca:b0:
89:1a:92:28:9d:2b:8b:f3:41:a3:0c:04:3c:86:1d:
10:16:14:ed:e4:53:b4:a7:b2:c1:ba:63:cf:b1:a4:
84:bc:62:65:4b:7a:cd:17:23:d4:3f:4a:e6:61:97:
ca:f0:a2:0e:93:4e:a7:f0:d8:ad:6b:2b:c4:a7:f4:
f2:bc:b4:6d:a4:b8:0f:b3:85:cf:48:b2:70:b1:d2:
3d:e3:62:75:96:7a:79:5f:7e:74:13:6c:0c:42:bc:
3f:a0:12:d6:0e:b2:15:ae:e1:49:04:18:05:e2:55:
44:bf:74:f7:65:b5:40:ef:e2:35:c0:d0:63:ae:76:
c0:d5:27:70:99:8a:3b:ec:ad:f8:2a:f6:ff:9a:3b:
52:4a:ff:7d:12:26:78:ce:98:e8:e2:88:5e:09:3e:
7c:ac:7a:3e:50:4c:41:e0:3d:4f:5b:b9:84:a7:34:
73:d8:5b:83:d4:e8:9c:d3:5f:48:20:aa:1d:99:c1:
ef:5a:cf:53:f3:af:e6:84:53:4e:ff:5c:da:03:1f:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:52:65:E7:63:72:76:4A:06:7E:52:2D:A2:57:48:0D:0D:30:20:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A02FD3EC3AD11EF9E98C563762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f9:bf:b6:d1:2c:13:fd:7a:89:4c:f6:27:52:75:fe:05:ca:
f2:ab:df:47:60:76:a9:92:2c:08:12:14:b3:1b:82:91:fd:6b:
16:d1:86:65:41:4b:8f:cc:1d:7c:58:85:5e:b4:c9:9b:58:82:
fc:68:24:66:e1:43:0f:d7:5d:6d:da:a1:01:47:12:54:38:e0:
98:08:05:21:34:2a:e2:c8:59:67:01:d8:d2:33:2b:1b:15:90:
65:49:be:ae:9c:57:1e:5b:79:8f:a1:4a:b1:38:a1:22:df:65:
ed:50:48:8a:f4:78:e9:90:e1:cf:1b:8b:5f:83:98:b7:99:7c:
c2:23:21:3b:1e:1c:2a:9e:cf:e9:d5:94:19:78:42:f8:cd:50:
90:5f:6d:00:7c:bc:5b:68:28:8f:23:d3:d9:9c:0e:50:77:cb:
d5:2f:ba:aa:2e:ca:99:2c:75:c4:87:18:1a:f5:ba:a6:56:b7:
46:7b:06:e5:9b:a6:05:6f:dd:0f:0e:6f:a2:a1:a5:b9:e5:59:
27:90:5f:c8:94:98:56:ba:73:11:7d:c6:a4:13:1a:fc:b5:1a:
59:bc:32:95:9d:71:08:f2:0f:70:2a:fd:4a:db:9b:a6:7d:66:
d2:07:46:7f:fb:99:83:21:c2:24:1c:17:09:e1:c7:01:d2:c1:
82:12:68:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:38 2025 by rpki-client