Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16E1CAAED0C211EF8FA6828A762E951A.roa
File: 16E1CAAED0C211EF8FA6828A762E951A.roa (raw, json)
Hash identifier: vOi0OrpKR3edghLLryWON15QcUW4/UVFt7fcrMMaH/E=
Subject key identifier: 0B:46:21:93:35:FB:59:BD:5E:D7:28:53:7F:6E:D7:6D:DC:D9:AB:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010641
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16E1CAAED0C211EF8FA6828A762E951A.roa
Signing time: Sun 12 Jan 2025 08:49:10 +0000
ROA not before: Sun 12 Jan 2025 08:49:06 +0000
ROA not after: Mon 03 Mar 2025 08:49:06 +0000
asID: 149440
IP address blocks: 45.195.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67137 (0x10641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 12 08:49:06 2025 GMT
Not After : Mar 3 08:49:06 2025 GMT
Subject: CN=67838206-a0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:5e:4d:02:da:3b:84:52:74:1d:83:dd:3d:
23:9e:31:75:e8:47:7a:73:bc:c7:20:23:0d:88:c8:
e0:10:10:a2:88:fb:2d:a4:d2:15:fd:f2:21:ee:98:
d2:b1:89:fe:b0:51:47:44:41:45:bf:fc:e2:3b:a6:
a6:67:8c:8b:50:03:0c:99:a8:3c:e1:6b:21:91:66:
2a:d5:6d:0a:7f:46:06:c8:c2:11:2d:ca:eb:24:cf:
cb:56:d1:7c:74:31:4e:9f:67:6f:8f:e9:89:5e:fc:
de:b2:8a:eb:90:e8:a9:16:19:ba:9e:12:2c:17:8c:
e6:df:17:4a:79:40:43:44:81:fc:e5:a1:4c:8a:69:
99:27:01:cf:c2:8c:be:71:5d:24:ce:5a:ae:35:a1:
e9:73:8e:ab:41:db:3a:37:e2:8e:54:29:ee:17:f4:
3f:5d:9d:78:bd:35:b2:7a:fb:cd:f6:5f:ae:18:58:
f6:31:e0:d2:92:50:af:ae:54:67:00:67:5d:c4:bb:
ec:52:f5:34:72:00:5b:9b:84:49:d9:76:11:1d:f8:
90:6a:8e:c0:c2:05:9b:be:5c:d0:5b:d8:3c:03:8a:
c4:bc:b2:4c:c7:5a:5c:66:9f:24:a3:ec:83:86:10:
17:12:aa:92:07:3b:9f:a5:3f:c9:f6:15:40:07:b9:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:21:93:35:FB:59:BD:5E:D7:28:53:7F:6E:D7:6D:DC:D9:AB:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16E1CAAED0C211EF8FA6828A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ca:71:bb:8f:e4:8a:9c:70:09:33:b5:8d:1c:e2:7d:33:07:
05:24:db:fb:63:7c:22:9f:40:76:3e:e5:24:d4:01:da:78:fd:
6c:bf:9d:37:76:72:1c:2b:47:54:a7:88:ed:72:41:ed:ee:ba:
ae:75:c6:49:ac:b1:c5:07:b3:61:50:54:43:fd:07:1d:2c:79:
6c:0d:f8:e9:67:13:d6:30:f6:ca:79:ce:ec:e9:ae:73:fc:10:
26:64:3d:f8:5a:a0:b2:70:bc:b6:ba:3c:44:13:69:61:d6:ac:
74:78:f3:a0:b7:91:de:c2:2b:9a:57:ec:5d:77:0c:73:07:a7:
19:3f:59:34:41:e6:bd:70:d5:b2:24:43:0b:23:c7:ba:63:52:
1c:88:12:44:23:16:a4:51:93:91:7c:20:97:e0:62:b9:b8:e0:
54:23:78:73:27:cf:aa:9d:de:2b:24:c4:c1:0f:cc:84:f5:62:
b7:15:a3:62:2e:cb:8e:3c:57:e1:36:39:d9:d2:40:7a:64:83:
6c:c3:0d:10:3b:e1:21:1a:dd:7c:a0:2a:7e:37:e5:d5:55:b4:
53:56:d0:d8:89:cf:6a:43:68:0f:48:0a:f1:77:90:f1:32:7e:
b2:bb:ed:f4:7c:b8:cf:a9:31:1a:5c:b0:0e:12:b1:bd:96:34:
30:e0:f3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:29 2025 by rpki-client