Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C046024BDBF11EFA521346B762E951A.roa
File: 2C046024BDBF11EFA521346B762E951A.roa (raw, json)
Hash identifier: RWLT5vEXsfKX4ruF+pJVES7p4AoLCpf7w8LbeEaFk2g=
Subject key identifier: 5D:FA:58:0F:B9:94:0B:18:76:2A:C2:92:CF:85:C8:51:14:4F:C3:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E565
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C046024BDBF11EFA521346B762E951A.roa
Signing time: Thu 19 Dec 2024 04:10:25 +0000
ROA not before: Thu 19 Dec 2024 04:10:21 +0000
ROA not after: Wed 10 Dec 2025 04:10:21 +0000
asID: 984
IP address blocks: 45.206.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58725 (0xe565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 04:10:21 2024 GMT
Not After : Dec 10 04:10:21 2025 GMT
Subject: CN=67639cb1-ffb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:97:17:b4:b4:db:37:36:d8:e1:c1:eb:9a:
90:59:96:74:28:ef:d7:fe:39:4a:c5:f9:c7:c0:83:
8a:a8:c5:35:26:2f:97:91:73:33:4a:94:37:c8:15:
7d:f4:da:ff:00:5f:56:2e:ad:67:29:f7:e4:c1:1e:
88:8a:1a:f9:8e:c7:05:ea:ae:19:1b:8e:d8:05:1a:
1f:41:a1:4a:50:06:ed:17:05:cb:45:c5:63:ea:04:
0c:74:cf:84:b9:5f:0f:43:d9:9f:e0:7c:72:de:3c:
9a:99:3c:d2:5e:6a:1b:f0:b8:58:0d:29:c6:34:9e:
cf:17:58:bc:ac:f4:8b:ee:53:fc:dd:0c:c8:18:89:
0f:42:7c:39:e0:50:2a:21:d7:4d:0b:b6:d3:0d:c3:
c3:96:38:09:21:6d:04:1d:78:ac:40:cb:82:28:4c:
5b:2f:49:6f:a9:ec:39:c7:0f:a8:97:c7:be:6f:de:
2b:d4:7f:cb:d1:50:69:6e:78:f8:81:f4:ea:2d:e3:
8c:78:1a:38:15:b5:89:26:e8:9c:8d:8b:53:7a:d7:
bc:0e:67:48:cb:0b:de:3f:08:3b:d2:80:d3:e3:23:
f0:56:3d:f9:85:bc:2d:d5:5b:6e:62:58:69:7e:29:
44:08:04:a0:04:56:81:f4:2f:5d:2f:d2:73:cb:e2:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FA:58:0F:B9:94:0B:18:76:2A:C2:92:CF:85:C8:51:14:4F:C3:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C046024BDBF11EFA521346B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.85.0/24
Signature Algorithm: sha256WithRSAEncryption
37:17:66:ca:fe:9e:2b:e3:41:7e:39:89:fd:db:c9:47:c1:05:
ef:d4:1d:d3:c0:0e:eb:1e:61:a5:76:61:b5:2a:00:d5:9e:70:
cf:1b:45:17:45:d4:6b:b8:83:42:57:2c:44:44:5c:ce:ff:92:
cf:ee:e4:12:37:91:7b:fa:a4:38:ae:fd:dc:74:15:c9:7f:76:
2f:55:f1:3a:e3:a4:63:74:4b:be:24:36:17:cf:da:8f:03:bc:
fc:38:18:1c:f2:6b:e5:3b:30:c7:32:22:1c:15:38:6f:4e:45:
5c:8d:f7:59:7e:24:4a:0c:74:8c:d2:a3:8d:04:93:ec:1c:91:
bd:71:ff:67:86:c7:e7:9e:86:e2:8f:80:8c:09:ca:1b:68:0b:
93:6c:f2:7f:64:4e:19:fe:f0:08:70:ee:a0:71:d7:9a:f4:34:
5c:59:4a:75:4d:92:41:0e:03:6e:cf:e3:93:cf:d9:cf:66:f9:
e2:fa:7f:c1:0e:92:ef:22:7e:f4:e9:96:2e:49:b3:05:40:f1:
67:b8:f7:70:07:5c:d9:9d:b7:69:89:cf:4d:dd:55:e0:1e:ed:
39:b1:e5:ad:f8:a4:21:f4:11:9b:f3:74:8a:ff:bb:3d:1e:86:
c2:b6:1c:87:8c:2c:67:57:67:08:dd:3d:f1:fe:e1:a1:59:85:
66:9e:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:52 2025 by rpki-client