Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D6A63A6CDD111EFB9001865762E951A.roa
File: 2D6A63A6CDD111EFB9001865762E951A.roa (raw, json)
Hash identifier: aJ5WyAwwOSWK+r1z/XackSpzLPtmiNwy89STvU1yd/s=
Subject key identifier: 87:4F:78:8B:81:30:1D:BC:D2:F3:1B:E1:2A:3F:8D:F8:57:BE:C3:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01020A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D6A63A6CDD111EFB9001865762E951A.roa
Signing time: Wed 08 Jan 2025 14:59:36 +0000
ROA not before: Wed 08 Jan 2025 14:59:33 +0000
ROA not after: Sat 03 Jan 2026 14:59:33 +0000
asID: 984
IP address blocks: 45.197.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66058 (0x1020a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:59:33 2025 GMT
Not After : Jan 3 14:59:33 2026 GMT
Subject: CN=677e92d8-69d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:4f:97:1a:a8:1c:58:0e:a1:7a:dd:a6:86:
13:ee:b1:63:9b:b3:44:c7:47:ee:5d:e4:13:47:11:
1b:b2:a2:8f:5d:2b:23:39:bf:f8:3a:d8:c4:13:31:
e9:5c:3c:0c:d9:41:63:e8:e0:6e:c6:9c:09:a6:8e:
6a:20:7e:ed:ad:8f:2e:76:66:53:93:d5:cc:a6:f4:
12:92:7f:4b:77:fa:dc:78:65:3a:96:1c:cf:3f:f3:
3d:03:a5:1d:cf:45:4d:d1:87:14:ff:14:19:e7:31:
bd:e1:bb:43:cf:30:fa:18:5b:a6:04:4c:b0:59:5f:
a5:b0:cf:25:59:9c:d8:fa:e2:5e:6f:47:82:bb:37:
c2:75:12:b2:29:9a:fd:47:a5:67:13:6a:8b:bf:03:
f2:fd:b1:39:cf:b5:11:a1:2a:77:7f:89:60:e5:66:
65:77:e7:0e:b9:73:50:ff:95:0c:82:be:21:95:42:
bd:a1:db:1c:12:29:f2:5d:70:f3:b7:ef:1b:b9:c8:
60:f8:e9:00:f8:95:ab:d5:ad:74:3e:c0:9d:96:c8:
7d:69:60:e3:53:6d:f8:ad:84:ec:eb:9a:cf:bf:6e:
88:fa:6a:b1:4b:06:20:a5:83:7c:01:37:cc:7e:e4:
60:ec:c5:9c:5b:3c:da:a1:14:02:87:23:18:8e:85:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:78:8B:81:30:1D:BC:D2:F3:1B:E1:2A:3F:8D:F8:57:BE:C3:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D6A63A6CDD111EFB9001865762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:33:76:1d:64:d6:34:d8:dc:78:be:b9:7f:e5:71:68:5e:84:
84:25:58:7a:53:6a:fd:e1:b4:0b:fa:ed:76:3e:1d:79:1f:1e:
0f:39:b6:ad:17:8e:41:d1:85:e9:41:53:b9:03:2e:8f:f7:d5:
6c:83:41:bc:8d:79:09:76:1e:e2:02:6a:fc:76:c8:88:c3:fb:
23:3a:40:08:52:46:37:a4:72:50:01:bf:5e:a0:fc:4e:40:79:
a8:13:e1:bf:14:84:26:8c:99:86:94:53:44:d1:8c:62:9f:d6:
09:1a:22:5e:bc:f6:b5:e7:5a:85:ba:bf:51:3a:2c:6f:b2:52:
73:dc:e8:70:ef:ee:77:10:4d:ae:fe:3f:9a:8a:b9:52:bb:c3:
10:e5:e4:a3:01:c1:95:f0:4d:26:c2:05:9d:a5:32:eb:67:c9:
a4:80:88:5e:4d:6e:15:01:31:12:12:24:b4:89:0b:e1:7f:2d:
a2:20:23:95:8c:d7:b5:7b:0b:d5:72:8e:42:e2:24:05:a4:cc:
02:cc:10:3e:b6:53:95:73:1b:64:45:5b:51:45:43:cc:48:cd:
60:05:91:c2:2e:be:e4:b6:c5:50:fd:91:e2:72:1f:3a:ee:e9:
91:ad:c4:cd:40:8d:69:27:e0:74:4b:91:21:27:d0:31:94:a5:
05:ba:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:28 2025 by rpki-client