Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/132B2890BDBE11EFB5280D63762E951A.roa
File: 132B2890BDBE11EFB5280D63762E951A.roa (raw, json)
Hash identifier: /zNlQshQbmWnNeWKH59Dsc+p3VIU+FB6AYBIL5A3SOI=
Subject key identifier: 2D:F5:F6:BF:C4:28:C2:0E:CD:10:CC:BE:66:6F:9B:B5:9D:AC:17:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E557
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/132B2890BDBE11EFB5280D63762E951A.roa
Signing time: Thu 19 Dec 2024 04:02:34 +0000
ROA not before: Thu 19 Dec 2024 04:02:30 +0000
ROA not after: Wed 10 Dec 2025 04:02:30 +0000
asID: 984
IP address blocks: 45.206.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58711 (0xe557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 04:02:30 2024 GMT
Not After : Dec 10 04:02:30 2025 GMT
Subject: CN=67639ad9-d133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:55:af:27:72:4e:e9:76:dd:88:86:aa:82:
94:3e:c0:12:f3:59:61:e4:65:bb:3f:42:37:8c:e8:
80:87:e9:dc:6c:2b:cd:70:f3:ef:38:f7:7d:71:da:
37:6c:0d:00:d8:40:99:6e:43:ec:de:d5:79:ee:42:
9f:27:90:42:ce:e8:32:f1:9e:ea:9a:07:70:fd:33:
6d:63:56:ea:ab:de:c0:9e:7a:dc:e6:ab:da:f7:c6:
db:17:86:6d:7f:7c:71:1b:60:5b:05:5d:fb:6c:48:
4f:98:2a:c2:7b:1e:f1:14:26:d1:fb:ed:59:80:b6:
fa:ec:cb:92:d9:2d:35:2e:71:48:a8:1f:27:1a:e1:
0c:73:6f:56:05:ba:5b:98:db:22:da:7c:76:87:68:
55:1e:45:26:2f:25:f0:89:5e:b6:5e:73:52:f7:d5:
82:3c:57:34:cb:cc:8d:d0:81:54:1c:25:11:5d:9a:
46:8d:ed:fa:2d:d0:b5:55:04:cb:d0:35:c6:49:1a:
18:99:fb:88:89:5c:1e:35:da:0a:d0:31:13:51:de:
19:1e:1f:31:21:e6:c0:8c:e5:97:42:14:55:0f:3b:
b3:61:db:a3:26:58:fe:2b:9b:a8:f6:35:8d:6a:4f:
8f:0d:11:63:7d:86:06:76:53:f5:74:df:d1:2b:44:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:F6:BF:C4:28:C2:0E:CD:10:CC:BE:66:6F:9B:B5:9D:AC:17:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/132B2890BDBE11EFB5280D63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.78.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bd:57:b1:77:02:0b:07:44:de:bc:2e:d1:53:93:ad:80:69:
cf:27:df:45:5e:dc:d7:02:03:f0:07:35:71:df:c7:2f:68:9a:
e7:61:19:4d:aa:4b:1f:74:c7:3d:47:63:82:17:05:8e:1f:f5:
32:bb:80:a5:0f:eb:3f:da:6b:a6:43:9a:57:33:87:e3:ca:22:
7a:d3:da:88:51:c9:91:f8:53:94:19:4b:72:76:f8:36:19:3b:
e2:02:67:99:35:fd:14:16:55:3e:ab:ef:89:16:d5:67:a6:39:
a5:02:4d:7d:04:66:f8:89:89:a5:26:b5:27:2f:19:71:ac:c6:
0c:45:0a:45:98:ad:ef:c8:59:e7:b6:09:0e:fe:b0:3f:46:71:
78:c8:ae:be:ce:b9:e7:43:6e:62:01:27:f5:fe:64:b9:e0:51:
5b:27:a3:9b:71:f5:6d:5f:94:ea:a2:68:89:15:28:9a:41:b0:
c7:66:a4:06:bb:c2:f1:a6:a4:d1:95:31:22:22:4a:66:3f:e8:
4e:84:6e:ac:77:f2:1f:96:18:00:17:49:dc:35:a7:56:77:1c:
fb:e1:36:bb:fc:cf:7d:f9:3e:c6:bf:3d:c8:3c:0e:81:44:39:
93:1e:9e:8c:2d:cd:3d:81:c1:bd:4b:ac:31:52:ca:d5:69:a5:
7b:21:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:52 2025 by rpki-client